Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
File:                     79pPUsK3lM5LX38h4ySxubEGXRw.mft (raw, json)
Hash identifier:          gruVZOze1o8ljAuLOpmfmZf5bDKt4oDAc/7KwdcAxOY=
Subject key identifier:   72:D2:31:A9:79:A2:BB:D6:34:58:BF:9E:A1:77:0C:A6:DE:B8:A0:87
Authority key identifier: EF:DA:4F:52:C2:B7:94:CE:4B:5F:7F:21:E3:24:B1:B9:B1:06:5D:1C
Certificate issuer:       /CN=efda4f52c2b794ce4b5f7f21e324b1b9b1065d1c
Certificate serial:       019CABA1BC3EB6831199AD1DF18126F59AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
Manifest number:          5E
Signing time:             Sun 01 Mar 2026 23:00:29 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:29 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:29 +0000
Files and hashes:         1: 79pPUsK3lM5LX38h4ySxubEGXRw.crl (hash: 4GajhAMu3ZBQ2I95rVAqPJVHTXIX/Xzfi49ezj5RMfE=)
                          2: swO-HTW4j5qDDjQOOjuNXgqW8xU.roa (hash: XU3HpZ66wu/qbtiav87O6TEaXO9w/HkLcs/bSmMTwpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:bc:3e:b6:83:11:99:ad:1d:f1:81:26:f5:9a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efda4f52c2b794ce4b5f7f21e324b1b9b1065d1c
        Validity
            Not Before: Mar  1 23:00:29 2026 GMT
            Not After : Mar  2 23:00:29 2026 GMT
        Subject: CN=72d231a979a2bbd63458bf9ea1770ca6deb8a087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:4c:e3:8d:2b:16:b4:ee:2b:cd:5d:14:14:
                    67:a1:b1:73:d7:71:59:0c:f4:22:dc:35:f3:36:d4:
                    f7:16:b7:9e:8d:5e:70:f1:2c:a6:23:d5:68:4e:1c:
                    2c:8f:d1:48:8c:9d:ba:1e:21:7f:fd:4f:ae:e0:bb:
                    89:e3:ff:bc:5a:c1:b3:38:82:ed:f3:51:3d:77:e1:
                    42:d9:ba:86:98:57:2e:e9:79:bf:b1:9e:ac:9d:57:
                    9c:1d:7e:92:c8:cd:93:7a:3a:a8:cf:d3:d0:4e:67:
                    aa:c9:72:34:b4:23:54:a7:a5:f6:07:d2:38:50:a8:
                    fa:2b:5a:7c:d9:77:9f:3c:d0:f7:f3:8d:04:0a:b7:
                    c9:19:e4:19:22:27:9e:86:46:f5:6d:81:1a:55:b3:
                    f8:06:ab:cc:fd:fa:9c:01:e7:c8:7e:fb:fd:53:15:
                    14:17:42:9f:40:4c:c1:73:93:a4:d9:00:ac:da:79:
                    ab:5a:a5:30:09:74:80:83:ab:c1:91:d3:23:ee:9e:
                    83:f1:55:ad:b6:aa:ed:15:43:a1:62:7e:d4:9c:58:
                    06:03:05:7e:c0:aa:d5:1e:11:6c:e4:17:69:3e:d8:
                    7c:61:88:6d:ba:3a:57:2e:55:41:11:49:c9:13:55:
                    f5:ba:00:0c:d7:4b:1e:18:75:f5:09:40:cc:0c:9a:
                    e5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D2:31:A9:79:A2:BB:D6:34:58:BF:9E:A1:77:0C:A6:DE:B8:A0:87
            X509v3 Authority Key Identifier:
                keyid:EF:DA:4F:52:C2:B7:94:CE:4B:5F:7F:21:E3:24:B1:B9:B1:06:5D:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:80:97:fb:56:05:f9:cf:b3:66:93:ed:35:55:91:da:7f:be:
         da:48:3f:5a:97:1a:d5:28:f4:5f:af:74:b6:ff:7b:c5:44:dd:
         bb:9d:b4:b3:ee:9b:79:e9:e6:e9:4c:b7:f8:00:6b:73:41:2e:
         d7:e4:3d:28:bb:d6:d3:14:13:b2:82:5a:c0:ed:3b:3e:0d:c8:
         c3:f0:67:04:ed:f7:42:1d:cb:48:53:f7:7c:4d:ec:34:75:27:
         35:a4:37:db:f4:c1:29:5e:44:aa:a3:7e:cf:7b:b0:15:1e:ad:
         6c:f5:e6:f1:76:71:82:b8:46:ea:ca:2a:da:63:4e:3e:3e:91:
         01:7a:84:50:a3:e2:d3:ed:96:dc:db:69:bd:8c:61:8e:f4:e9:
         fe:f1:56:41:f5:ea:ad:00:8c:3d:9e:a3:70:dc:be:8b:e6:fc:
         ad:d5:dd:a3:3f:db:a8:76:f0:ae:12:aa:ea:ee:92:58:e8:65:
         c6:81:32:83:18:78:e5:b3:6f:38:c7:1b:d2:1c:06:91:20:7a:
         a1:c6:25:7c:fe:c2:4f:30:7a:e2:2c:af:84:21:5a:3e:24:05:
         69:db:f5:6b:1e:61:ed:a3:d5:bc:f6:f7:94:ad:af:25:5d:72:
         4f:e6:7b:4c:bc:c1:6a:a5:24:eb:4f:8a:27:55:0f:1e:14:c8:
         3c:e4:5d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:42:05 2026 by rpki-client