Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File:                     ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier:          1lr8T4C4HUrmfDVlFpTRcKFR33TJGOs+yu9I+FcFX+M=
Subject key identifier:   97:23:FD:40:81:67:E2:83:99:E3:98:A6:8D:BF:65:64:7B:DB:64:58
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer:       /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial:       019CAAC62978B9B177E9CA67767F2D8F75BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number:          0744
Signing time:             Sun 01 Mar 2026 19:00:39 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:39 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:39 +0000
Files and hashes:         1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: pLw8ERSuTlczXiISdeZ8WmVU8+eTtThVwEhg2n68EKY=)
                          2: t6rzb9V4CtqE19d3fvrivglZ8JY.roa (hash: 4D9YdlVLAXYceYahdSlYP72+fLVK34lQxVM5oI1tuvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:29:78:b9:b1:77:e9:ca:67:76:7f:2d:8f:75:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
        Validity
            Not Before: Mar  1 19:00:39 2026 GMT
            Not After : Mar  2 19:00:39 2026 GMT
        Subject: CN=9723fd408167e28399e398a68dbf65647bdb6458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:0f:3d:4c:dc:03:eb:84:ee:6f:0c:c7:15:
                    db:fb:73:f4:a2:70:3c:31:ac:ba:c6:51:03:c2:61:
                    a2:e2:04:09:db:7a:be:61:f1:04:c7:c9:83:ad:44:
                    06:cb:2a:20:15:ed:ea:6a:1a:20:88:ab:85:78:e6:
                    6e:f6:08:38:0f:45:6b:e8:c6:63:0f:fd:5f:1e:2b:
                    7e:08:8c:e6:63:14:d1:fb:fd:f2:e9:57:99:56:63:
                    8e:47:b2:f8:43:09:79:40:e5:88:10:be:d0:a9:07:
                    64:ac:dd:ac:32:45:50:c5:77:08:d5:6d:ee:f6:77:
                    bf:c9:1b:59:53:22:86:37:c9:6c:01:57:a7:7e:2f:
                    0a:e4:3d:ac:31:47:da:37:49:c3:f4:46:a2:55:b8:
                    c8:8b:ff:1a:cd:ae:ec:6b:0b:bf:0f:99:ee:3b:da:
                    4f:b1:15:20:05:89:30:66:36:b6:f8:bf:e5:bb:cc:
                    71:f0:a5:a4:62:fd:28:f5:46:4c:95:49:82:56:05:
                    2a:c7:2b:26:4f:05:e1:4f:17:85:6c:70:dc:dd:00:
                    39:96:92:6d:8c:a4:51:b0:07:21:19:90:92:b9:a1:
                    26:0c:57:61:6f:40:11:a3:60:f3:b8:96:d2:0b:0f:
                    20:ca:a4:39:7c:ec:cd:e9:36:88:25:ec:f5:2c:7d:
                    b3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:23:FD:40:81:67:E2:83:99:E3:98:A6:8D:BF:65:64:7B:DB:64:58
            X509v3 Authority Key Identifier:
                keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:31:aa:44:0d:26:6b:95:77:59:b2:9c:8a:da:87:c6:09:16:
         8a:32:fb:2a:4b:22:6d:2f:cd:90:f4:41:3d:a5:e3:f3:51:21:
         be:a9:ff:5f:84:aa:2c:3a:05:48:1c:30:62:8a:1b:35:17:58:
         00:25:46:58:ea:04:82:ff:65:62:1b:63:02:1f:48:85:81:d1:
         f0:ad:f5:5a:24:a4:18:46:51:ec:9e:04:a0:1a:a6:fd:21:f9:
         67:3c:a5:96:df:9b:6b:2a:91:c4:3d:66:17:ee:72:75:21:1f:
         5a:98:a8:f8:33:b3:4a:1a:9c:4d:be:cc:e1:27:52:6c:2a:37:
         da:65:6a:66:5c:71:ae:80:79:bf:7d:bc:6b:4c:df:9a:fe:14:
         c8:ac:c3:ea:65:dc:d2:30:ff:b0:da:70:da:16:18:50:88:eb:
         c7:94:6c:cc:e8:e5:61:e2:d3:53:aa:64:68:f4:d6:58:53:da:
         80:1b:60:f2:f8:25:d6:99:5e:2f:c0:40:8e:8b:57:fd:00:55:
         8c:14:57:67:ee:91:ac:4d:4a:18:1a:00:fe:bb:7b:c8:55:03:
         24:a3:53:78:ab:54:3d:e4:37:f9:ca:5a:d3:2f:80:f1:37:fb:
         ec:80:da:5d:fe:4c:62:b9:08:fb:60:80:14:af:24:62:50:6e:
         b3:19:5b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:50 2026 by rpki-client