Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File:                     ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier:          UxmZgmqx2U0s1Cio/aSo9dnIywFXhMOc7+woBDSgbHw=
Subject key identifier:   88:A6:F9:50:EF:54:AF:35:10:D7:C4:95:73:F1:B9:C3:BD:57:EC:38
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer:       /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial:       01987C77B682A9D12A0FAE953960B1BEEE07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number:          1624
Signing time:             Tue 05 Aug 2025 23:01:16 +0000
Manifest this update:     Tue 05 Aug 2025 23:01:16 +0000
Manifest next update:     Wed 06 Aug 2025 23:01:16 +0000
Files and hashes:         1: 2xSdynJrR2lrRXow3DheycMEzkg.roa (hash: nooA7vWCWimGNoVynR8X8CPFNFkK8X4dvNkM9491OGY=)
                          2: 4ivYTJwHbxlEFGw6yHQUPiIrnLk.roa (hash: c/5BSogehebsaJujE8GYhFFEuezzSIs2u3N/ALM/jkY=)
                          3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: n/edRO6YJ6p0d36ukaDAJfLbkJfulA8KRX4Vz+txj0o=)
                          4: JFVsgFbYrjh5C77tg48FZqxd4J4.roa (hash: ff5cSciKjRToO8iXbplHVL2WQA8ta+cT3q72ycgeqdw=)
                          5: cFyLz0464YCDv1_wlpt751wWjv0.roa (hash: 6oL3kHvs8+fXiSDYlf2hI6gNwQZ8WHh03nzI53rd4Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:77:b6:82:a9:d1:2a:0f:ae:95:39:60:b1:be:ee:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
        Validity
            Not Before: Aug  5 23:01:16 2025 GMT
            Not After : Aug  6 23:01:16 2025 GMT
        Subject: CN=88a6f950ef54af3510d7c49573f1b9c3bd57ec38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:1e:b4:72:c5:1a:29:42:01:56:e6:73:6d:
                    f2:2c:e9:46:04:2b:01:b9:81:d6:c1:16:40:f5:1f:
                    90:a2:a9:27:9a:e9:86:3e:67:0d:cc:79:0d:f4:0f:
                    31:9d:f0:ac:03:26:2c:90:5d:87:8a:53:58:be:d9:
                    9f:87:5e:76:ef:50:4c:30:0d:73:7b:95:c5:82:d8:
                    26:7c:13:f9:3c:a4:7f:37:69:99:68:b3:84:de:61:
                    dd:59:8e:89:31:5b:41:fa:8c:1a:1e:26:ab:19:55:
                    ea:22:cb:e8:14:02:f8:fb:e2:3a:df:7c:bb:2b:ed:
                    fb:95:9f:0d:11:83:48:d4:c1:20:9f:d7:db:4e:02:
                    71:42:8c:e6:63:16:8a:f9:26:7d:d0:14:32:47:8a:
                    eb:2f:6d:b2:98:8b:56:17:9b:42:22:d2:83:83:4f:
                    4e:5d:1d:40:2c:3f:03:c6:69:cd:3c:00:4b:80:6d:
                    4d:b5:9f:4b:cd:b3:c1:e7:f9:1a:3d:c2:3d:8d:43:
                    eb:f4:bc:bd:fe:6a:05:e9:28:fa:13:4d:f6:22:3e:
                    91:ad:c3:f7:5a:1c:63:d7:14:f0:22:6c:b9:81:3b:
                    53:bb:77:6d:a5:64:ad:b7:7b:cf:62:7e:79:6c:ae:
                    d7:3a:2a:f4:21:ed:5c:21:04:02:bc:88:47:f5:64:
                    8e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A6:F9:50:EF:54:AF:35:10:D7:C4:95:73:F1:B9:C3:BD:57:EC:38
            X509v3 Authority Key Identifier:
                keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:78:20:bd:20:8e:13:67:37:9b:1b:06:9c:17:fd:dd:c2:a3:
         5b:c7:b7:03:56:08:5c:a0:4d:62:2d:8a:7a:06:17:36:17:7b:
         91:2f:a8:ff:fe:e8:ba:39:8c:87:b7:7c:2e:b7:28:e4:f7:67:
         27:ed:76:8a:f0:94:e0:d6:90:c3:64:f0:75:c5:36:f1:ca:5b:
         4a:a8:86:8a:72:51:98:d8:e9:26:f1:59:03:82:ea:a8:7c:b9:
         e4:4e:87:73:f2:72:37:c5:5c:e0:f8:9b:06:2a:c1:f7:c8:65:
         04:8d:28:65:b1:0f:82:e8:68:32:da:a5:e6:2d:ab:04:f6:f3:
         d5:63:b8:23:3a:78:fa:8b:11:f0:08:84:7d:38:d4:5c:85:b5:
         37:66:ff:7c:96:5b:a2:a0:12:12:16:ea:22:cc:69:74:ac:70:
         b2:56:37:23:c6:55:f1:cb:81:b0:86:fb:55:87:33:d3:74:78:
         a1:92:63:42:9b:57:6e:20:d1:96:1a:07:65:67:ec:03:b0:b3:
         1c:f1:2e:8e:13:d1:17:46:e7:07:d4:a2:b4:2f:90:9a:75:ca:
         ba:49:94:63:10:bc:90:e9:01:b7:77:f4:2c:0a:6c:54:0d:98:
         b1:e8:13:28:3b:93:3c:e4:29:3d:78:90:11:83:f8:c9:78:29:
         e9:c0:4d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:27:11 2025 by rpki-client