Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File:                     ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier:          8Oja9Kz9JUuFZMlpUhbzkwvCFkFCJArUjwhi7ssRTbU=
Subject key identifier:   42:F8:31:2F:B6:92:08:CB:4B:01:7A:82:A7:40:D0:20:F2:DD:35:B8
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer:       /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial:       019EBFC86D5CCE2A6201A1DB7A67466C44F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number:          0858
Signing time:             Sat 13 Jun 2026 07:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:43 +0000
Files and hashes:         1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: dxoq9xEKwrWntR91jLffxIU3H+Nl+WuuqJ9nS0wbdoI=)
                          2: t6rzb9V4CtqE19d3fvrivglZ8JY.roa (hash: 4D9YdlVLAXYceYahdSlYP72+fLVK34lQxVM5oI1tuvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:6d:5c:ce:2a:62:01:a1:db:7a:67:46:6c:44:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
        Validity
            Not Before: Jun 13 07:00:43 2026 GMT
            Not After : Jun 14 07:00:43 2026 GMT
        Subject: CN=42f8312fb69208cb4b017a82a740d020f2dd35b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:d8:07:db:4f:0d:82:d6:40:84:33:12:92:
                    f0:aa:96:d8:4e:8b:23:87:14:22:93:8d:01:2b:45:
                    e2:c1:3a:6c:e9:fb:2d:1b:1e:81:47:5a:6c:2f:e4:
                    3e:8b:1f:78:62:79:0a:8a:eb:7e:99:77:35:7f:4b:
                    e8:3d:fe:5c:fe:2d:aa:b3:27:ea:0a:87:08:8b:2c:
                    5a:c5:ee:be:87:b8:7d:dc:32:24:ad:9c:94:51:a4:
                    e5:8e:53:a4:af:d1:38:c9:44:02:b0:c9:a1:2a:27:
                    aa:bd:44:71:72:f4:b1:b4:ff:ad:60:4a:a8:f0:b3:
                    08:9e:f7:a9:2a:9f:b6:ad:2e:a7:55:d0:c0:80:c2:
                    2f:4c:2b:f7:36:c3:54:f9:41:35:17:e6:bc:5f:9f:
                    91:ac:ef:22:f2:36:ee:ec:93:07:9e:de:a0:a0:a3:
                    58:66:0f:27:d7:d0:08:57:ac:a0:48:63:85:59:3f:
                    96:25:61:36:26:a5:7a:80:8e:b0:25:fc:87:52:66:
                    ef:38:c0:f6:35:0a:c6:79:27:d0:fd:68:10:62:8f:
                    75:e5:3b:01:5b:36:69:13:fe:cb:37:96:ca:e1:5a:
                    c5:42:de:a2:b0:87:5c:fc:38:19:4d:90:9f:c1:f7:
                    74:e3:1b:18:5c:5d:07:d7:9c:d3:47:8f:7e:34:00:
                    53:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F8:31:2F:B6:92:08:CB:4B:01:7A:82:A7:40:D0:20:F2:DD:35:B8
            X509v3 Authority Key Identifier:
                keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:14:8b:3e:69:a5:57:05:72:c3:eb:b9:68:4d:39:7a:cb:97:
         d0:78:54:49:eb:2f:e4:c3:57:25:02:a4:d5:4e:f4:56:97:00:
         39:1e:26:2b:5c:f7:5e:22:2f:e6:bc:bb:16:e0:21:7a:d8:30:
         f8:f5:99:34:5e:f9:57:f0:57:c0:19:20:51:ac:e3:01:a4:84:
         0b:db:5b:60:1f:df:fd:7c:a3:f4:85:a5:c2:52:6d:54:66:22:
         4b:e9:fb:b4:31:4d:23:b4:66:c5:de:90:5c:12:1f:4f:4f:f3:
         91:da:e1:fa:1b:c5:f2:cc:72:f2:04:72:04:6e:bd:c2:eb:14:
         4c:91:d7:b4:00:76:aa:76:f2:e3:0c:9a:31:87:cc:91:b2:01:
         89:c3:a2:55:e8:50:33:00:12:70:4e:44:c3:f7:c5:a7:a7:31:
         2c:08:ba:44:55:37:01:a4:e6:f1:63:d1:1d:57:0a:bd:84:cf:
         0d:30:43:c4:74:b0:5b:e5:66:9c:04:a6:b9:61:9e:22:e1:65:
         5b:79:d5:34:00:c5:e3:ed:39:fb:02:37:5e:d2:81:99:0c:c4:
         70:77:24:3e:dc:21:9c:ac:86:b4:2d:79:e7:2a:2f:c1:96:a1:
         e4:fc:0b:c5:fd:94:a5:d6:21:18:a2:00:0b:ff:39:1d:bb:36:
         29:a9:01:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:20:40 2026 by rpki-client