Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File:                     ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier:          t1PiTMv/c513IZ1k9kgRog0NKRHlLbqgX5xWY0Q1s2M=
Subject key identifier:   4E:64:C4:3F:B0:2B:0E:1A:DC:2C:32:32:B5:8A:6C:94:A4:2C:B7:E0
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer:       /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial:       019CABD94861DD186413A1A875005789C139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number:          184F
Signing time:             Mon 02 Mar 2026 00:01:09 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:09 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:09 +0000
Files and hashes:         1: 30h9dqpO2HTNFcZzXQCxUtNzDC4.roa (hash: 0sA/L/18FE59iFvAgUSimg7slW1i1d3kvvSKOu/WMqs=)
                          2: DaWre0O30UsHqeSDT6i_4Yq-tic.roa (hash: 9DotK/TTTUTMkn9fIQaKfkaVPPRreV6+27pYcu5DDN0=)
                          3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: 9ZGRVgUsKpuVfGC7wRSE7rdQcrM1XiVtjY7zpKWO9pI=)
                          4: MkyGLOUgEm7yWmws0P0WmJhg_og.roa (hash: lImHVfPNO/uEHSArF6tT6T1ccVGKtSX8t+Ym23NvLaU=)
                          5: Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa (hash: iRsZadW5zJyTKxF9xF+gVynd1FcJcWOsgkuRoqnlw+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:48:61:dd:18:64:13:a1:a8:75:00:57:89:c1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
        Validity
            Not Before: Mar  2 00:01:09 2026 GMT
            Not After : Mar  3 00:01:09 2026 GMT
        Subject: CN=4e64c43fb02b0e1adc2c3232b58a6c94a42cb7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:44:50:4e:5b:27:b6:a5:c7:22:c1:6e:56:
                    aa:98:2f:95:80:01:8d:2a:b1:bc:49:bb:1f:80:6f:
                    f8:3d:6d:be:10:ec:c3:a3:d8:cb:1e:dc:34:b8:b8:
                    d5:e2:c1:28:fe:2f:ca:9b:cd:13:c7:f3:2f:05:53:
                    a8:09:08:29:96:d7:f5:21:8f:b2:95:39:32:e6:a9:
                    91:46:d0:59:a0:0c:0d:69:00:95:dc:d5:20:81:e1:
                    69:1b:f7:03:51:56:b3:af:83:6c:54:32:ae:8f:91:
                    3e:07:35:3d:82:7d:0a:06:d0:ea:2b:0f:a8:fe:fb:
                    5d:34:cc:c8:a9:39:1d:56:c1:33:6d:1c:75:e0:d9:
                    bc:5d:1a:40:0e:8f:f0:69:a0:e5:42:9f:96:3e:d9:
                    81:02:f6:3e:aa:e9:af:85:6f:de:e7:cd:5e:46:9b:
                    5b:fa:f6:d9:35:b8:a1:ba:d4:75:80:c9:93:f9:55:
                    e1:27:24:45:ae:78:90:1a:16:b0:11:d0:7e:0f:68:
                    73:68:1e:2d:20:10:52:d4:63:f3:ba:44:15:92:2a:
                    af:43:0b:14:48:e8:3e:65:b1:1f:55:fd:ec:93:69:
                    0f:1f:0f:da:a1:5f:25:17:f3:c9:11:82:c6:6d:96:
                    41:2b:36:96:c2:aa:25:b0:f9:d4:d4:63:3f:e2:74:
                    7b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:64:C4:3F:B0:2B:0E:1A:DC:2C:32:32:B5:8A:6C:94:A4:2C:B7:E0
            X509v3 Authority Key Identifier:
                keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d1:21:c8:85:c6:36:80:d9:d2:70:99:11:9b:9d:d0:6a:b4:
         58:1d:fa:dd:c7:91:8c:ae:d3:9f:63:b5:15:d4:6a:72:23:ae:
         76:6d:d9:aa:40:86:09:fe:6a:3a:14:96:6e:95:c8:9b:4b:73:
         39:9d:b6:26:f7:a1:7b:a9:f8:6d:db:55:7d:d5:53:13:ed:7a:
         a4:00:b8:55:ae:fe:cd:95:6d:3e:d8:98:98:0f:02:23:e4:05:
         0a:58:8d:da:71:eb:5a:70:24:36:7d:cf:e0:aa:55:53:34:99:
         0b:46:5f:2b:68:28:89:6c:55:7d:0a:19:a0:68:ea:92:e0:4a:
         bb:93:34:af:52:f5:ae:f8:e5:da:2f:e1:ff:24:13:79:f3:34:
         6d:d8:b4:66:65:e4:31:4e:0a:75:bc:73:43:84:f2:06:8c:69:
         02:fa:f2:cb:54:27:32:86:ec:86:e9:38:3b:14:35:da:67:97:
         a4:58:f7:98:c9:f0:be:09:93:40:a7:19:57:5a:9b:82:19:aa:
         3d:25:b9:24:88:19:9c:dc:39:9d:90:c9:fa:37:ea:1a:2a:98:
         09:cf:fe:d4:28:19:a0:36:fa:4e:7d:e8:77:03:d4:85:ff:82:
         11:40:af:02:1a:ac:44:8f:74:d9:30:36:e8:df:8a:07:95:36:
         83:61:8f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:20 2026 by rpki-client