Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File:                     3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier:          vkGlCluOr77kt3yoZlVaNdqiRMEhod+F52vNIPDQ2Qo=
Subject key identifier:   10:B6:24:2A:E8:35:49:D4:03:73:C1:37:9C:55:A5:72:69:70:EC:E7
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer:       /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial:       01A000CA59ACE0EEDD60AE5C4E06CD690BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number:          135D
Signing time:             Fri 14 Aug 2026 15:00:56 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:56 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:56 +0000
Files and hashes:         1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: cl9/50OsoMJ3fIcSRui9UFq5jfzxre0CCr0QX+oravg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:59:ac:e0:ee:dd:60:ae:5c:4e:06:cd:69:0b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de122d172c13b15291e41f945681525826fef892
        Validity
            Not Before: Aug 14 15:00:56 2026 GMT
            Not After : Aug 15 15:00:56 2026 GMT
        Subject: CN=10b6242ae83549d40373c1379c55a5726970ece7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c6:d1:cd:1c:f7:0a:ef:22:22:40:7e:45:a9:
                    f3:04:2d:9f:91:e4:79:7d:a6:37:4c:29:c3:19:4b:
                    6f:73:57:34:6f:c4:c7:bd:05:9f:f6:aa:03:7a:9c:
                    07:85:b2:f9:5a:c2:20:b3:3e:6b:a1:9b:88:b8:a0:
                    c3:eb:a8:a3:3a:d6:ad:d8:0e:7d:41:3c:03:3b:eb:
                    c1:8c:79:01:be:d0:b3:7c:96:a8:5f:10:b4:ac:1a:
                    42:56:56:91:25:85:15:47:33:c6:eb:1c:05:bd:8f:
                    1b:e5:6c:ed:38:98:3b:2d:f1:ac:ef:7c:12:c2:a0:
                    b9:34:86:7c:80:55:07:8c:04:ca:8f:e8:72:6b:26:
                    d2:01:fa:74:b8:d7:d4:bd:44:af:01:98:3c:52:71:
                    0e:6f:f9:cb:af:f9:bc:82:59:8e:06:f8:c6:f4:54:
                    9f:57:4c:1d:55:68:d1:ed:d8:db:65:9a:fe:f5:8a:
                    9c:61:73:7d:ca:9f:01:da:f2:a0:54:cc:9a:54:a5:
                    62:3d:8b:f8:5c:69:ea:09:89:17:0c:e4:aa:51:c6:
                    6b:12:dc:df:a1:ab:57:65:d5:69:55:99:92:cb:13:
                    ea:fb:fa:46:f8:10:36:4b:45:25:ba:5f:da:07:0f:
                    21:1f:c5:ce:b4:42:4a:4e:15:9e:e3:f2:a2:15:3b:
                    83:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B6:24:2A:E8:35:49:D4:03:73:C1:37:9C:55:A5:72:69:70:EC:E7
            X509v3 Authority Key Identifier:
                keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5c:a2:49:74:17:47:30:b1:8e:15:0c:a9:25:8c:85:98:46:
         6f:29:ce:b5:0b:a1:53:fc:49:3e:1c:e3:0e:d7:77:72:0d:e1:
         a7:26:73:5d:14:62:27:d6:c6:ba:4e:88:b3:19:3f:8e:08:94:
         3e:00:eb:4d:2a:f1:65:14:78:49:0c:65:15:b5:27:ff:0d:a4:
         c3:5d:3e:fd:b6:06:d4:fb:40:7a:e9:76:28:72:97:c7:83:77:
         de:e9:ba:37:0d:b0:30:79:3d:fb:f0:98:0d:64:30:36:c3:80:
         97:71:9d:0b:21:8a:fb:de:18:f4:95:b6:ec:98:fc:54:b2:0a:
         ec:1b:3c:c6:6f:cc:03:5b:a3:ce:f1:fc:d3:7e:6c:71:41:3f:
         8a:d4:3c:8f:ad:99:53:28:72:55:48:d2:6b:51:cc:94:89:2c:
         b4:d9:f7:a8:51:d3:7b:ac:5d:64:42:2f:ef:d8:c4:bb:6d:fe:
         49:bd:03:f6:0d:30:54:03:8c:30:fd:a2:e7:4f:ec:40:70:f9:
         83:10:99:82:1c:35:70:9f:f5:90:31:02:15:aa:5a:fc:2f:b8:
         a8:1f:1a:b5:c4:87:e2:a2:88:09:83:6c:32:87:3a:2b:ab:12:
         ce:61:37:32:aa:ac:67:02:4b:a7:74:7a:1b:07:87:85:ef:f8:
         34:83:9b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:43 2026 by rpki-client