Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
File:                     79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json)
Hash identifier:          rZrXv8OqY8vYCDu404qCstfSpOUdul7qaBQOdkX8eW8=
Subject key identifier:   29:C8:13:05:CB:35:FC:4F:80:1B:C8:5D:34:D5:2E:46:7E:9D:1E:EF
Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
Certificate issuer:       /CN=efd30d69329d33f44212bf86b69ff20881051063
Certificate serial:       019D9B51745C2B49FAEDD7869B55E9A620FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
Manifest number:          18BE
Signing time:             Fri 17 Apr 2026 12:01:39 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:39 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:39 +0000
Files and hashes:         1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: niQHJz6AHBAjXiFDtfX8AYeErJ+OS3J5zeh3+vyIFmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:74:5c:2b:49:fa:ed:d7:86:9b:55:e9:a6:20:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063
        Validity
            Not Before: Apr 17 12:01:39 2026 GMT
            Not After : Apr 18 12:01:39 2026 GMT
        Subject: CN=29c81305cb35fc4f801bc85d34d52e467e9d1eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:28:47:4c:a3:7c:79:8c:d4:8c:ea:89:72:
                    96:6b:67:10:85:10:12:51:d0:dd:7d:7f:a1:fa:62:
                    f7:52:c1:7a:8f:e2:29:bb:f0:01:87:e9:59:b5:95:
                    65:93:6c:46:93:44:d4:fe:40:10:2d:7c:7f:b0:aa:
                    d9:3d:36:f4:11:6e:66:07:36:33:1c:8c:9c:c4:7d:
                    4b:50:79:94:15:f0:09:45:58:a8:df:5f:eb:21:9d:
                    de:ba:8c:22:d7:d4:04:76:ab:8c:a6:a4:c7:8b:c5:
                    a1:08:cd:be:11:b8:37:e2:71:01:24:fa:83:39:e1:
                    5c:32:3a:c5:72:a6:98:34:4e:67:c9:e1:63:27:4b:
                    0d:28:29:00:98:09:5b:55:77:b3:60:78:06:8c:0b:
                    fd:e5:a3:86:ac:da:6d:29:bc:b4:f8:ea:bc:75:c2:
                    7e:3d:e1:46:32:a6:60:e1:6c:33:91:78:07:30:20:
                    47:59:8e:7d:fd:8e:24:02:cc:18:8d:c4:0d:a4:70:
                    17:48:89:3e:33:e0:b6:eb:2a:b6:e5:01:b7:47:17:
                    34:92:89:15:ce:73:b6:f9:e8:cf:bf:1d:58:2b:c0:
                    12:c1:95:5d:57:26:ad:1c:e5:1c:d2:ed:81:d3:27:
                    48:fc:41:09:33:6e:4c:d6:57:45:d4:e5:4f:a5:61:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C8:13:05:CB:35:FC:4F:80:1B:C8:5D:34:D5:2E:46:7E:9D:1E:EF
            X509v3 Authority Key Identifier:
                keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b7:c4:d9:6d:6b:14:0d:4e:6b:b3:11:f7:9c:0e:63:47:ab:
         66:37:1b:1e:06:d7:28:e1:66:b3:86:79:ea:31:42:a9:43:ee:
         38:05:8a:b9:4e:3b:4b:1e:62:64:bd:bc:21:38:7e:0c:8a:67:
         80:f4:52:97:7f:dd:a7:72:af:68:e7:9d:b5:bd:b9:20:bb:b0:
         ae:ff:ec:eb:93:dd:8d:54:18:47:03:91:17:a0:4c:7e:5b:bd:
         12:db:50:f3:ad:07:04:7d:b7:4d:44:56:58:3d:0e:50:4e:a9:
         80:cd:e6:15:0f:68:ae:60:2d:48:d6:55:4c:c4:20:98:d3:b8:
         2b:1a:a8:ae:93:3f:a7:0c:8f:f9:b9:b9:e4:49:1c:76:e5:fc:
         dc:68:59:94:36:68:78:c0:0a:52:76:d6:da:13:91:cb:40:83:
         6c:c9:3f:36:7a:0f:67:ed:1d:08:37:62:42:fa:55:0a:0e:55:
         2b:b4:a5:cd:1d:40:ce:8d:c3:28:72:b7:da:b4:fe:9f:d4:cb:
         f9:42:c5:d9:c3:8a:23:d6:03:1e:91:8e:fa:c5:92:c1:1a:c0:
         07:20:b5:53:2c:6d:c4:4d:be:08:0c:3c:5d:16:51:9c:8e:15:
         13:14:9b:06:64:a8:11:77:24:7f:ce:fd:2a:71:60:ae:f1:cc:
         c8:75:fa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:24 2026 by rpki-client