Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File:                     ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier:          8dguzepOX8MA8ixykqJVspm8qdSIAZ1KL2piK0EcXQ4=
Subject key identifier:   54:96:8C:8C:DA:68:9F:03:E6:1E:97:CC:27:1E:2C:03:5D:88:01:5C
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer:       /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial:       019EC0DB0AAC6C4D1D1589BB8DAF83A03C84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number:          1963
Signing time:             Sat 13 Jun 2026 12:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:40 +0000
Files and hashes:         1: 30h9dqpO2HTNFcZzXQCxUtNzDC4.roa (hash: 0sA/L/18FE59iFvAgUSimg7slW1i1d3kvvSKOu/WMqs=)
                          2: DaWre0O30UsHqeSDT6i_4Yq-tic.roa (hash: 9DotK/TTTUTMkn9fIQaKfkaVPPRreV6+27pYcu5DDN0=)
                          3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: lxCYtuM9ZYjMqIDQx19HAs6OULdNOSNDATN2xMUCi8c=)
                          4: MkyGLOUgEm7yWmws0P0WmJhg_og.roa (hash: lImHVfPNO/uEHSArF6tT6T1ccVGKtSX8t+Ym23NvLaU=)
                          5: Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa (hash: iRsZadW5zJyTKxF9xF+gVynd1FcJcWOsgkuRoqnlw+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:0a:ac:6c:4d:1d:15:89:bb:8d:af:83:a0:3c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
        Validity
            Not Before: Jun 13 12:00:40 2026 GMT
            Not After : Jun 14 12:00:40 2026 GMT
        Subject: CN=54968c8cda689f03e61e97cc271e2c035d88015c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:03:c6:2d:58:30:09:5c:83:d6:a1:7e:4e:
                    5a:11:ab:42:0b:0a:a8:53:96:3f:e9:af:b4:e9:21:
                    c1:c5:77:45:98:e2:26:96:bb:97:aa:e4:96:98:b4:
                    4e:93:46:a4:c6:59:da:8f:12:3d:cf:68:3f:a1:90:
                    a5:73:54:e4:a0:d4:cd:8a:35:4b:19:7d:b3:8f:10:
                    a5:92:28:78:c4:eb:ac:c5:b7:a4:27:fb:5c:5a:45:
                    5e:76:d6:71:8f:62:13:81:94:9c:02:c9:2e:08:b4:
                    12:e5:6e:e1:20:8a:cb:ac:0b:f1:5c:29:86:cb:d0:
                    57:a4:41:be:83:71:dd:95:50:87:77:e7:e4:c8:8d:
                    67:ba:c6:c8:23:66:3a:06:2d:ed:05:29:47:74:3c:
                    ef:8e:27:ed:2d:6b:05:d4:06:01:e4:8b:e6:70:b5:
                    64:b4:ec:d3:0b:c2:8d:b3:02:dc:d5:f2:64:b7:b1:
                    a8:30:58:b9:e6:e3:9c:fc:f2:2b:65:20:4c:cd:0f:
                    a9:19:08:10:3d:c6:7f:92:d6:98:7e:4f:cf:c9:8f:
                    19:68:77:9d:c3:7f:d9:7e:d4:2d:60:5f:b1:9d:6a:
                    fb:f7:17:94:be:70:4f:65:c5:78:b1:06:8a:47:09:
                    95:64:3c:25:ec:47:0a:e4:11:13:3b:6e:39:a1:9b:
                    6f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:96:8C:8C:DA:68:9F:03:E6:1E:97:CC:27:1E:2C:03:5D:88:01:5C
            X509v3 Authority Key Identifier:
                keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:d9:9b:fc:75:dc:a8:08:9b:cc:b7:14:f3:d4:4b:37:06:
         d3:2f:97:b7:84:ac:49:7e:32:b1:0d:a5:36:76:ce:15:59:c5:
         e2:2e:ee:8c:49:ca:f2:69:aa:1f:5c:a4:ea:0a:75:58:86:6e:
         f2:2a:fd:db:23:5c:a1:07:33:3d:33:ec:eb:8b:f6:b2:fe:51:
         da:8a:19:bc:58:15:db:b7:91:29:e1:27:93:81:ca:98:1f:90:
         aa:a5:34:fe:c3:85:dc:f0:6c:a3:37:5b:c8:6b:cb:6d:cb:a6:
         6c:c3:6d:ec:c6:0b:e6:d0:44:d7:3a:b7:34:4c:fc:4d:ef:f1:
         0f:19:83:ca:f2:f7:bd:a2:78:c8:23:25:09:7e:a1:5f:b7:41:
         17:f2:31:00:19:be:4d:68:21:50:89:31:b5:76:03:e8:61:a9:
         e2:67:ad:bc:c8:9d:3f:53:44:af:81:2e:c2:3a:c3:2c:ff:d1:
         00:ad:8f:15:9c:57:45:13:3b:55:1d:aa:17:13:dd:91:9b:39:
         ca:03:d8:11:29:93:2c:75:6d:f1:95:cb:56:2c:86:68:00:de:
         36:bb:17:4b:f6:05:82:55:a7:fd:2f:bd:d4:d2:61:95:78:ac:
         b1:67:a0:34:51:98:40:bc:d8:bf:6d:1f:4e:30:23:92:87:65:
         6d:18:ae:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:34:07 2026 by rpki-client