Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
File:                     79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft (raw, json)
Hash identifier:          kac/bA9K+jvt3hDfBJv/eCg5vOO+6oHo2cl32NBFX+M=
Subject key identifier:   85:12:1A:44:26:0B:50:D2:56:79:5B:36:EB:FD:0A:69:6C:AC:AC:9F
Authority key identifier: 79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
Certificate issuer:       /CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
Certificate serial:       25645D2827369627EFC2A1BE36E1BD6002B7B878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
Manifest number:          0313
Signing time:             Sat 18 Apr 2026 21:32:02 +0000
Manifest this update:     Sat 18 Apr 2026 21:27:02 +0000
Manifest next update:     Sun 19 Apr 2026 23:35:02 +0000
Files and hashes:         1: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl (hash: 46EKuTbY8cikgtclgtNDMRVyxfS3FUA8szPe6IZgaDI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 23:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:64:5d:28:27:36:96:27:ef:c2:a1:be:36:e1:bd:60:02:b7:b8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
        Validity
            Not Before: Apr 18 21:27:02 2026 GMT
            Not After : Apr 19 23:35:02 2026 GMT
        Subject: CN=85121A44260B50D256795B36EBFD0A696CACAC9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:f2:41:e5:4d:c5:f4:89:96:f9:3a:ed:de:
                    96:34:ef:a0:43:58:27:a1:2d:e1:5d:dc:86:3b:08:
                    0a:98:ec:1a:ce:45:bc:4f:23:f7:a9:87:fe:ac:89:
                    ce:eb:32:9d:a8:ad:fa:34:fb:39:f8:5f:3d:81:9b:
                    83:eb:ec:d3:60:c4:9d:03:9f:c6:00:ef:8b:c0:d5:
                    8e:07:c4:ce:f9:58:94:1d:0d:6a:48:5c:9f:56:2b:
                    24:2f:c2:6b:dd:32:62:6b:32:45:50:92:ef:44:ff:
                    f4:19:fd:83:cd:ed:4f:32:55:1d:1c:60:8c:47:81:
                    d9:11:97:83:8e:4c:e6:c8:3b:5a:b0:47:a2:fb:e7:
                    6e:9e:31:a1:83:ee:f8:11:e3:3b:e4:98:bd:3c:e9:
                    0d:27:44:76:49:ca:b4:a1:8a:57:82:de:f9:be:be:
                    58:7d:08:1e:2d:fa:4b:22:d2:2a:c4:60:79:e3:f6:
                    03:07:68:1f:a3:5a:b3:77:c9:fb:e9:97:b5:c3:5a:
                    77:84:45:67:80:2c:4d:00:6f:39:e7:ad:47:59:0e:
                    6b:10:57:70:2a:60:85:a4:08:3e:3c:2c:0f:f6:fb:
                    f2:0b:99:33:98:ae:37:ac:f1:72:a1:14:44:03:63:
                    d8:b2:10:9a:09:ef:81:11:c7:10:6d:18:91:64:1f:
                    5d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:12:1A:44:26:0B:50:D2:56:79:5B:36:EB:FD:0A:69:6C:AC:AC:9F
            X509v3 Authority Key Identifier:
                keyid:79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:9f:ad:5f:9d:89:12:52:b0:a2:48:a3:c1:39:14:6e:c8:21:
         be:9e:f7:9b:1a:1f:fa:f0:ee:35:50:48:dc:d8:ce:50:da:89:
         c7:a7:3a:20:4d:9b:ba:13:bf:60:8f:7a:25:64:d1:3f:15:1f:
         71:b3:ca:9e:73:53:4e:da:90:49:69:2d:62:be:02:85:9b:b0:
         f4:eb:64:a2:20:3c:88:b1:7e:2e:70:a9:a2:be:a1:7b:0a:85:
         bc:6c:7e:11:93:51:d9:7c:d9:d0:09:a0:1f:5b:4f:42:e2:90:
         01:99:0c:67:46:1d:c5:d9:24:32:be:18:d0:30:4c:57:07:a9:
         8f:84:91:20:4d:db:7f:3e:f8:9f:ba:38:20:b8:a5:a9:ac:b2:
         e8:8d:b0:3a:06:2c:ef:60:c3:ec:4b:f5:30:cb:e3:97:1f:cd:
         7f:0f:d3:f5:99:fa:a6:2f:f9:63:09:59:3e:d4:60:37:5c:ca:
         4b:10:60:91:a9:54:f8:db:04:a6:98:dd:58:58:09:92:f4:5a:
         88:a3:02:76:47:f3:74:4c:ad:7f:fc:83:6d:c7:97:8d:1c:4f:
         d5:7a:86:e3:47:4e:dc:50:35:18:7f:68:cd:28:00:25:75:9f:
         03:f2:de:40:c4:24:78:e0:16:a8:eb:da:d2:05:a6:48:ea:d6:
         10:be:88:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:51 2026 by rpki-client