Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File:                     ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier:          FWlVeO+YPa2vlBIc1gYHR9ucBq6YsvQn7PT5xk2ziyU=
Subject key identifier:   E0:31:9B:A4:32:FD:7E:20:64:3D:04:59:90:07:E8:37:29:5E:37:B7
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer:       /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial:       01A0EDE6FFF8F323694BE11DE5FEC7186517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number:          0979
Signing time:             Tue 29 Sep 2026 16:02:13 +0000
Manifest this update:     Tue 29 Sep 2026 16:02:13 +0000
Manifest next update:     Wed 30 Sep 2026 16:02:13 +0000
Files and hashes:         1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: yd/0kvellvKsM4eE8zCuUY3xdmxebsJ7JeQ3xFTKHPE=)
                          2: t6rzb9V4CtqE19d3fvrivglZ8JY.roa (hash: 4D9YdlVLAXYceYahdSlYP72+fLVK34lQxVM5oI1tuvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 16:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:e6:ff:f8:f3:23:69:4b:e1:1d:e5:fe:c7:18:65:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
        Validity
            Not Before: Sep 29 16:02:13 2026 GMT
            Not After : Sep 30 16:02:13 2026 GMT
        Subject: CN=e0319ba432fd7e20643d04599007e837295e37b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:ef:8b:58:5f:10:70:1f:9a:b0:ee:b9:67:
                    f8:23:3a:46:ec:3f:79:38:95:2d:88:9a:16:97:a8:
                    ca:b2:f2:12:1e:15:3a:cd:f1:d6:95:ff:68:e8:e1:
                    7f:e2:c9:77:4e:55:9a:66:3c:75:63:8f:59:3e:cd:
                    2b:1b:a2:3b:39:8e:f8:b1:85:34:fa:a0:ee:35:ed:
                    1e:27:0f:3e:be:0a:c6:e3:f1:04:7d:4d:50:bd:6e:
                    e3:b7:2e:59:1c:38:75:e9:18:e5:96:90:c8:f1:f4:
                    ce:f1:09:49:5c:cb:61:df:d0:72:8c:05:59:03:91:
                    9c:f6:81:e9:51:68:1d:09:09:32:80:ff:65:14:03:
                    69:12:b6:38:8b:b6:7c:13:e8:2e:d6:c5:14:21:c4:
                    b8:ac:f9:f4:f7:20:0b:17:7a:df:64:0e:c6:48:50:
                    b1:ed:e4:1e:15:ce:f9:a9:0b:86:1d:95:9b:e2:99:
                    40:c3:69:a9:6d:6c:37:5a:f5:84:cd:83:72:5c:49:
                    44:6a:fb:b4:74:a5:a3:bb:12:ee:3a:11:d3:0b:e3:
                    f7:14:3f:aa:fc:a0:6e:54:95:de:f0:da:6a:e1:42:
                    10:2a:88:19:b2:d4:3b:4c:09:6a:a6:1d:74:c4:b5:
                    bb:a9:de:56:f9:c4:7a:a9:22:ac:ef:f2:6e:f0:7c:
                    8c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:31:9B:A4:32:FD:7E:20:64:3D:04:59:90:07:E8:37:29:5E:37:B7
            X509v3 Authority Key Identifier:
                keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:47:34:40:79:ab:97:cc:c0:d1:5f:75:59:1c:14:bd:2c:35:
         5a:40:6d:96:17:39:6f:1c:ca:c0:88:30:d2:3a:81:8e:b1:10:
         f6:96:9e:07:3b:9d:a6:ff:aa:14:8b:4e:cc:38:26:f2:95:50:
         f6:9b:57:06:ac:35:c8:6d:c4:50:be:f5:dd:35:95:eb:2b:80:
         bb:d7:8b:7f:14:09:30:bd:c3:61:77:b7:48:9b:f7:76:8b:d1:
         d4:31:d0:76:d9:e7:88:ca:74:e8:84:40:29:d5:48:21:55:88:
         9f:83:bc:3e:99:70:3e:71:8d:4b:76:30:38:1f:43:d6:c8:b4:
         7e:6d:83:08:a3:83:55:da:ea:52:d6:d2:f2:66:7b:72:9e:2c:
         6c:e7:9d:7d:fc:fd:43:a6:cc:cd:33:3c:f7:88:5e:4b:71:ed:
         58:65:7c:46:0a:ef:85:87:d8:e9:86:a4:5d:c5:10:d5:a2:4b:
         6d:01:1e:ff:2f:44:dd:39:40:b8:e2:44:06:6d:c2:78:da:94:
         57:5b:78:9b:df:b9:2a:bd:89:d2:07:a7:f2:43:92:ed:64:41:
         f2:90:7b:ea:dd:67:65:86:96:1d:a0:1b:2d:7f:6e:91:a9:3d:
         cc:02:8d:20:2e:25:85:68:67:47:98:56:72:20:d1:9a:d7:38:
         e9:dc:fc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:02:49 2026 by rpki-client