Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File:                     ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier:          OfVawzz57KBN5QWamjAroI7IA+9NECuq49OM7LB4bvQ=
Subject key identifier:   F0:F6:BE:07:5C:7E:7C:6D:8E:19:24:B8:27:04:BD:04:F0:1E:C9:DB
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer:       /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial:       01995A1FE540B50A220AE2D3023241DA20EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number:          058C
Signing time:             Thu 18 Sep 2025 00:01:03 +0000
Manifest this update:     Thu 18 Sep 2025 00:01:03 +0000
Manifest next update:     Fri 19 Sep 2025 00:01:03 +0000
Files and hashes:         1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: smciGnnhNlxJFkDIRg409WnnWNm5bvXtIbahsjws034=)
                          2: fJqV7x77nRb2Myj4lG_sx_PNw-4.roa (hash: zCh70VSES25/KHwSsTgt0cx68+3r91QI55cbavDhYdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Sep 2025 21:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5a:1f:e5:40:b5:0a:22:0a:e2:d3:02:32:41:da:20:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
        Validity
            Not Before: Sep 18 00:01:03 2025 GMT
            Not After : Sep 19 00:01:03 2025 GMT
        Subject: CN=f0f6be075c7e7c6d8e1924b82704bd04f01ec9db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:27:37:10:d0:99:09:71:a4:36:f6:d1:c0:
                    63:14:35:c1:c0:79:3a:4d:90:88:44:4a:ac:6d:7a:
                    ec:0b:4d:a6:7e:4b:31:5f:15:e3:7c:f2:b0:f5:83:
                    ba:9b:ca:d5:43:f0:d8:40:0a:3f:77:6e:ea:7f:39:
                    04:14:8d:14:47:c6:fe:67:3c:f0:f5:e6:03:2f:72:
                    80:17:e6:09:b9:0a:08:91:b9:dc:f9:97:0e:de:b1:
                    ef:60:f0:9f:ed:0f:56:f3:db:46:25:aa:bc:67:75:
                    e4:3b:63:ac:27:0c:7a:ac:a2:16:3c:0e:8e:78:b7:
                    15:ff:05:e1:ee:e7:eb:7c:81:0e:b4:7c:93:b3:9c:
                    a1:45:f9:05:77:b6:3c:67:01:89:32:51:8c:13:ab:
                    88:01:e3:15:fc:5e:86:4e:21:62:9d:1f:5d:99:9a:
                    98:b4:25:98:ac:0d:2c:31:3a:71:6f:ca:71:8a:ac:
                    39:d2:26:fb:5b:7a:e5:20:bf:2f:5b:ca:c9:3f:87:
                    e2:73:fc:6b:f0:99:72:a5:87:51:72:89:35:a5:24:
                    9f:e3:3e:a3:63:9b:d3:36:a6:89:cc:8d:6f:e1:0d:
                    e1:da:9b:36:47:cd:5b:2a:5d:aa:36:50:54:7e:f2:
                    9f:69:f2:b2:86:19:60:df:4e:4c:9c:34:cf:65:48:
                    53:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F6:BE:07:5C:7E:7C:6D:8E:19:24:B8:27:04:BD:04:F0:1E:C9:DB
            X509v3 Authority Key Identifier:
                keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:96:a2:10:0b:6d:fb:6d:66:af:0b:73:01:b9:c6:04:ca:2b:
         0e:5f:7f:b4:0f:77:7f:1b:75:1f:77:e0:e0:30:fc:60:46:ed:
         90:0b:4d:88:23:c3:3d:f6:c6:5b:0a:be:ac:9f:bb:1d:ca:75:
         f7:44:9f:3a:2c:d5:e8:93:33:c9:f2:7e:a4:7a:c3:3a:2c:1d:
         bb:bc:b4:24:32:35:ba:b1:1e:b4:f4:78:33:89:98:11:03:50:
         e1:dc:ed:3e:b0:6f:42:99:83:7b:96:40:d7:20:27:9c:26:17:
         61:fc:18:ce:54:b5:0d:36:b1:d3:15:54:30:73:48:00:83:6a:
         4a:c0:38:fb:5b:00:32:2a:7d:65:ee:6b:0a:af:56:24:d4:db:
         38:90:a2:27:39:08:02:91:c2:af:ac:6a:df:87:b8:84:19:2d:
         f9:df:bb:99:cf:a7:8e:58:a7:e7:86:b4:c1:36:26:a0:63:9d:
         24:c4:1c:08:49:40:f6:b2:c9:2b:ec:6f:56:9e:c1:85:14:32:
         dc:e5:c8:c3:b8:d1:b3:7b:d0:7e:d0:d2:4a:d5:db:1c:1e:72:
         7a:88:d8:ad:b9:93:f9:c8:36:fd:7f:70:7a:01:aa:2a:61:87:
         59:e7:11:12:f2:0b:18:30:de:91:e3:47:28:37:7d:65:df:27:
         d0:ac:11:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:05:12 2025 by rpki-client