Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
File:                     Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json)
Hash identifier:          CGI+xCPxD9DZ4E5DxlnDgM6/LKEl2xgrDZV1B1/OQMw=
Subject key identifier:   01:DD:AC:47:0D:FA:21:77:E4:52:76:6A:4D:C0:1F:8C:54:DE:98:9F
Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
Certificate issuer:       /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Certificate serial:       019EB845A37FAF8BB5702619CD48960E9A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
Manifest number:          162A
Signing time:             Thu 11 Jun 2026 20:00:31 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:31 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:31 +0000
Files and hashes:         1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: TA/eTv1hKOz6vR6TXg/b79+tD1hS/XfLOtIx3LzrWEo=)
                          2: c9DEUEWEQPqrGgYUimiiQviSMgM.roa (hash: wakxrbqHUtPpN1M0QZFEdKnthWi1t40kvnk8QYdL7EU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:a3:7f:af:8b:b5:70:26:19:cd:48:96:0e:9a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
        Validity
            Not Before: Jun 11 20:00:31 2026 GMT
            Not After : Jun 12 20:00:31 2026 GMT
        Subject: CN=01ddac470dfa2177e452766a4dc01f8c54de989f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:df:dd:2e:9c:ad:b6:e3:29:b5:42:b1:de:
                    7d:b1:1e:4b:f1:a9:39:a3:41:08:7b:b7:ae:86:94:
                    a3:54:da:9d:22:d5:e9:d5:86:7d:db:79:1d:7f:79:
                    be:af:e6:b6:d7:fa:c3:68:a0:db:e1:47:97:da:3d:
                    85:01:30:97:c4:33:bd:d2:9c:62:e6:5f:5f:be:21:
                    81:98:21:4d:dc:fe:ff:0d:2c:7b:4e:ac:c9:92:cd:
                    b1:86:ba:71:c6:44:23:c9:05:e6:a4:af:15:4c:94:
                    ca:3f:80:e9:fe:37:db:11:cc:86:3f:50:1d:70:30:
                    df:f2:ef:b8:2e:56:57:65:b0:52:8f:fc:4c:59:dd:
                    70:5a:59:59:93:e8:16:6d:75:1c:a1:ef:5d:ca:88:
                    f3:cb:8a:87:69:b9:b7:fc:15:37:e8:38:b0:2e:1c:
                    5a:5a:be:50:ff:58:9f:88:a6:24:af:47:de:aa:89:
                    a4:6e:8c:e5:51:a6:7c:1a:b9:dd:ac:8c:4a:09:95:
                    62:06:cb:a9:d8:8c:b8:12:02:a5:f2:60:cb:56:73:
                    5a:58:e8:9d:95:74:b3:df:cf:ff:79:d3:93:ec:9c:
                    7b:a1:56:16:0c:b9:81:24:9a:52:01:a8:aa:59:9d:
                    01:da:c0:6a:02:93:80:ba:a2:9a:eb:b1:9f:fd:fd:
                    78:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DD:AC:47:0D:FA:21:77:E4:52:76:6A:4D:C0:1F:8C:54:DE:98:9F
            X509v3 Authority Key Identifier:
                keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:45:4c:96:d1:95:73:a5:b6:6a:d1:d5:ea:2e:9b:24:f9:bb:
         21:7e:1e:f3:3e:1e:97:f8:78:7d:f6:03:69:5f:59:17:9c:12:
         4b:90:95:8e:25:47:2c:84:08:4e:00:ab:4a:f0:ba:3f:5a:5b:
         ae:94:7e:5b:be:ed:4d:6c:65:91:68:24:67:99:13:62:77:e2:
         df:fc:45:cd:f2:87:e7:bd:14:31:bb:41:ea:b4:03:e8:ec:77:
         3b:70:fd:dc:cd:2b:fc:33:74:9c:4c:04:b5:e2:4f:31:43:55:
         28:ff:40:39:be:db:52:5a:e2:08:d2:4b:fe:3d:d7:19:ee:85:
         55:b4:4c:61:27:f3:81:ba:ae:5a:dc:25:39:9d:ea:de:2d:b8:
         8a:ca:11:bb:07:94:ab:71:8d:33:f4:65:14:e0:2d:a0:e5:40:
         7c:8b:b7:87:82:ec:e7:b8:bf:70:49:e7:4b:91:24:2c:00:0f:
         70:06:9c:51:d4:b8:d5:13:dd:0d:f1:44:50:c4:bc:8f:fc:22:
         3b:0e:ef:8e:34:01:c9:fd:ba:73:8e:a9:93:95:06:1c:06:d7:
         c9:08:18:6c:99:cb:8e:62:75:87:4b:5c:9c:20:83:11:b5:d7:
         72:1b:ff:1f:f4:63:f7:3e:01:ec:44:f6:80:80:c1:e7:fa:a6:
         30:65:71:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:36:51 2026 by rpki-client