Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
File:                     79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft (raw, json)
Hash identifier:          XygR5OIr6N7fIIzOCkV24q5KyxFqO4ieLv1A9Tm+FUc=
Subject key identifier:   DC:56:80:0F:57:48:47:51:86:34:B8:2F:6E:92:8F:39:23:D4:3B:42
Authority key identifier: 79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
Certificate issuer:       /CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
Certificate serial:       649C79960E371B2DD1238AB04058B7F5FFAAD0BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
Manifest number:          02D3
Signing time:             Mon 02 Mar 2026 01:23:32 +0000
Manifest this update:     Mon 02 Mar 2026 01:18:32 +0000
Manifest next update:     Tue 03 Mar 2026 04:51:32 +0000
Files and hashes:         1: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl (hash: K/87hY0PENQ6XTsqW1P5hiIT91Pl4D4RDjL1zrobTus=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9c:79:96:0e:37:1b:2d:d1:23:8a:b0:40:58:b7:f5:ff:aa:d0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
        Validity
            Not Before: Mar  2 01:18:32 2026 GMT
            Not After : Mar  3 04:51:32 2026 GMT
        Subject: CN=DC56800F574847518634B82F6E928F3923D43B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1b:9b:db:bb:5a:5e:b7:ef:c5:85:ad:e1:19:
                    36:ac:04:a9:cf:5c:76:e8:0f:ad:de:78:50:8d:d6:
                    95:92:70:40:84:38:ac:16:92:fd:d5:2f:72:5b:a8:
                    f6:cf:d6:d9:ae:4f:39:e3:91:f1:19:f8:6b:ea:85:
                    01:6e:01:45:33:12:16:86:1e:6b:af:75:7a:24:0f:
                    d8:23:37:6a:49:71:c5:29:a1:49:8f:ac:51:97:3a:
                    c8:08:9f:69:fd:b4:ea:4c:69:c3:d4:e2:1b:f6:1d:
                    f0:3a:37:c0:e8:3e:5a:4b:da:11:0b:51:ff:4a:5f:
                    ad:36:de:bd:57:14:d4:73:41:7b:f4:6c:34:84:57:
                    d7:60:eb:64:ab:3a:56:42:cf:d5:82:85:e4:44:47:
                    38:f7:e2:71:ee:8b:64:5b:e5:d6:79:77:ce:9f:c4:
                    63:9a:7f:f9:b3:74:05:13:6f:14:88:2d:d5:5c:0f:
                    5c:33:8d:43:a8:a7:fd:e3:d3:19:f1:e0:24:c9:07:
                    be:f6:09:aa:59:7d:00:23:6d:b5:57:75:b3:1b:59:
                    3e:5f:ee:30:75:1b:46:37:ea:4b:05:a6:cf:fc:bc:
                    25:70:24:bf:27:f6:5d:d8:f4:4c:0c:f1:f4:5a:31:
                    c4:8b:4f:58:9a:97:c1:17:a6:d5:eb:cf:e6:49:13:
                    d8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:56:80:0F:57:48:47:51:86:34:B8:2F:6E:92:8F:39:23:D4:3B:42
            X509v3 Authority Key Identifier:
                keyid:79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:20:1f:41:a0:01:2c:17:cc:3c:d3:96:d8:79:98:65:70:b4:
         c5:d4:44:f5:db:f9:3f:2d:04:1a:e3:fe:d6:2c:b3:22:ce:1c:
         9a:02:88:98:ae:79:a4:d1:0a:c5:07:d3:27:2c:c6:d0:78:0f:
         29:30:7f:db:a0:9d:f0:27:c8:22:92:f9:54:46:ad:1d:4f:40:
         82:40:cf:c0:f8:68:ce:56:97:34:72:c5:9a:12:d8:2a:13:2b:
         58:b8:b4:6f:5d:8a:55:b4:21:2a:cf:5b:2c:2e:51:f9:f1:08:
         fb:ce:92:55:c8:88:92:fd:00:71:a5:94:ac:a0:40:1f:78:e3:
         d7:10:bd:6e:76:c1:62:f6:62:fc:60:20:28:0e:f3:fb:68:ed:
         e2:4a:f3:94:f8:9b:97:c2:3c:0d:af:93:e4:53:c9:9a:0b:78:
         64:e9:0c:ff:24:dc:33:f7:3a:5d:a5:28:69:c8:40:57:bb:3c:
         86:6c:d5:b3:52:69:0c:e7:2e:a1:52:5d:3b:c0:99:6f:6b:2f:
         3b:6d:4c:69:cd:ae:c1:65:7b:14:11:2a:80:df:40:99:fa:49:
         1b:77:a7:d9:c3:63:ba:fd:64:57:a4:62:15:97:65:ad:87:54:
         25:a5:ab:6d:88:d4:40:28:1f:18:35:24:29:87:19:10:4e:4d:
         91:37:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:39 2026 by rpki-client