Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
File:                     79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json)
Hash identifier:          mvTPzkxYfUGMaUq6innZ37PpOexgbEtK0LteiT/33Pk=
Subject key identifier:   33:46:44:91:96:37:C0:4B:21:53:E7:58:B5:B9:AB:BA:10:A8:59:75
Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
Certificate issuer:       /CN=efd30d69329d33f44212bf86b69ff20881051063
Certificate serial:       01988F59D8E54ECB9C986BFB3650CE0CF122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
Manifest number:          1621
Signing time:             Sat 09 Aug 2025 15:01:26 +0000
Manifest this update:     Sat 09 Aug 2025 15:01:26 +0000
Manifest next update:     Sun 10 Aug 2025 15:01:26 +0000
Files and hashes:         1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: GBwSE4Zh0BGbUkIOHhZSLjvsdf76KjHGXsWfq/5wCY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:59:d8:e5:4e:cb:9c:98:6b:fb:36:50:ce:0c:f1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063
        Validity
            Not Before: Aug  9 15:01:26 2025 GMT
            Not After : Aug 10 15:01:26 2025 GMT
        Subject: CN=334644919637c04b2153e758b5b9abba10a85975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:27:d6:86:bc:7f:69:a8:ae:d1:2d:8a:ab:
                    9e:41:35:8e:5b:6c:f7:55:fc:6c:11:95:ec:9c:3f:
                    75:39:fe:a3:7b:82:2d:eb:ff:8f:43:10:bb:b6:24:
                    29:d9:d4:7d:bb:71:80:6d:d3:21:10:09:9b:03:15:
                    0d:c8:77:25:44:fe:ba:c5:d9:63:b9:8f:63:db:c9:
                    1a:2b:90:00:14:5e:c5:54:c4:40:ad:bf:f6:ad:89:
                    eb:d5:59:8c:62:fa:7f:86:1c:f8:48:db:39:4c:fc:
                    0f:83:38:58:cc:1c:e1:30:98:84:30:f7:8f:3e:f2:
                    1b:74:fe:1a:d4:74:df:89:78:fb:c5:1f:75:72:bc:
                    79:ef:65:9a:6d:86:5f:e1:6d:8e:c0:1a:99:89:f2:
                    9f:ee:d2:a1:65:ec:70:7c:ec:8d:e3:73:54:c8:e5:
                    94:aa:ae:1f:67:62:f4:45:5b:62:05:69:5b:4f:58:
                    ac:c2:ae:c8:11:5e:d2:5a:90:91:86:1a:a9:c7:7a:
                    3b:5b:7b:0c:ce:0f:09:69:1d:62:87:37:26:a1:95:
                    bb:9f:89:c3:fa:bd:fa:1e:4c:34:ab:5f:55:e0:a7:
                    91:3d:f5:1f:b9:06:5d:7c:b5:57:90:ec:44:b2:4f:
                    4e:15:e5:fb:f8:6b:40:09:39:00:8c:84:63:d6:78:
                    27:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:46:44:91:96:37:C0:4B:21:53:E7:58:B5:B9:AB:BA:10:A8:59:75
            X509v3 Authority Key Identifier:
                keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:2d:87:76:51:95:d1:a0:2c:a8:44:36:83:06:3b:64:6d:ec:
         3d:c0:cb:45:87:b1:b1:98:69:4b:73:07:c7:dc:6b:73:ec:42:
         53:5e:1c:d6:bd:ed:2f:cb:f6:6c:b0:a0:44:24:52:e1:7f:6d:
         84:b9:21:55:2e:23:88:94:a3:25:d3:2c:9f:88:bb:70:e8:31:
         c2:a5:60:ec:ac:c1:bd:97:a8:a7:d2:03:03:28:63:07:98:08:
         57:9a:68:d7:4c:cb:23:68:22:8b:ca:6c:36:8e:96:5b:e0:af:
         7d:df:60:fb:5e:3f:72:f6:77:d8:8e:3a:ec:9a:f8:b0:74:f0:
         86:97:65:8e:94:2a:83:17:28:98:cc:70:39:e6:c8:50:3b:d7:
         36:b9:e7:df:59:25:48:73:f2:cf:64:67:40:31:b7:1c:de:28:
         15:cc:d2:ba:cb:c3:6d:51:ec:c0:15:a4:3c:f2:ba:d8:35:77:
         36:3c:df:d2:5d:e8:56:35:26:13:58:a5:54:22:1a:c5:02:31:
         59:90:27:6c:48:7d:4f:fa:dd:06:fa:cc:f2:d6:a3:9a:97:c3:
         70:a7:e4:d7:4b:32:81:0b:3a:e1:24:a6:41:d1:ad:6c:db:4d:
         4e:f8:3a:8b:d9:68:7e:d8:41:df:21:ac:33:3d:df:d4:47:94:
         a8:f6:51:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:30 2025 by rpki-client