Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File:                     IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier:          a6ycYSxUIYGgwEYg3AAVc20CIhF2z97BlnX5666fCDA=
Subject key identifier:   6E:C5:9C:75:60:03:11:47:91:11:39:43:DD:CF:11:3A:0B:46:5C:0C
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer:       /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial:       019FAA887A63F59B3A18ED92CB4E93D6B167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number:          151F
Signing time:             Tue 28 Jul 2026 21:01:38 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:38 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:38 +0000
Files and hashes:         1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=)
                          2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: QrxAtagyhl0UAc1okdin0S6MitzaaQyPkogZjPPWlnw=)
                          3: JVFZhRwUm5AzKUHRTK8KA5ERW7c.roa (hash: GyhDJmFQCDzUgwg/YVLMov5lqPzGc1kg2Dx51IyQvak=)
                          4: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=)
                          5: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:7a:63:f5:9b:3a:18:ed:92:cb:4e:93:d6:b1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
        Validity
            Not Before: Jul 28 21:01:38 2026 GMT
            Not After : Jul 29 21:01:38 2026 GMT
        Subject: CN=6ec59c756003114791113943ddcf113a0b465c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:e3:52:79:a9:04:69:6f:ee:60:0d:c0:e6:
                    ec:e7:33:ff:a3:57:2e:70:4b:a8:da:47:6d:bb:92:
                    24:0e:3b:35:7a:37:c7:84:2c:84:52:e3:b9:36:78:
                    e2:f6:d4:a6:0d:b3:28:db:3b:f8:6d:d3:0d:11:bd:
                    fc:52:a9:2d:9f:4b:44:7b:8c:46:4a:a8:b8:21:09:
                    0e:67:16:5d:ac:43:24:92:f0:5c:7b:5f:61:3f:98:
                    79:22:25:0d:40:d1:17:06:3a:a6:33:c3:32:57:1e:
                    7f:13:c5:8b:95:45:1d:d1:04:50:69:7e:13:b1:00:
                    aa:e7:3c:23:1d:10:16:e0:7d:db:9e:ce:37:16:9d:
                    f1:f9:b7:df:05:2e:56:9e:dd:c2:74:5c:58:6b:0e:
                    ed:20:5f:e4:e5:a6:f4:20:b2:a4:62:ac:b2:c3:ce:
                    f6:b3:af:66:a5:08:c2:96:2e:8f:ad:50:60:e0:9e:
                    a9:18:3e:3c:3c:bb:29:66:1e:f7:67:a3:59:c7:f8:
                    3e:6d:bf:eb:2d:90:86:d5:ec:7d:99:ea:04:08:ef:
                    ff:37:e0:c7:3d:0f:e9:d2:c8:5e:78:c0:3d:1c:4e:
                    4a:89:da:6f:57:ea:db:b8:28:f7:c2:e4:e5:d7:3d:
                    d5:0a:30:28:83:0d:56:94:d8:53:b4:f7:03:c0:ee:
                    b7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C5:9C:75:60:03:11:47:91:11:39:43:DD:CF:11:3A:0B:46:5C:0C
            X509v3 Authority Key Identifier:
                keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4a:1c:cf:2a:77:47:c1:6d:c6:6f:21:20:f6:ca:23:ca:04:
         0e:f6:8f:d7:51:f6:3e:2e:7e:ef:fe:b8:32:83:94:09:51:b0:
         e4:49:de:89:33:33:ed:88:d1:6c:8d:f1:56:8a:12:b8:b0:7d:
         bb:1b:6a:57:41:93:21:08:21:17:84:00:d8:77:57:68:6a:9e:
         85:8d:ec:e3:e0:df:92:92:ca:68:bb:ff:cc:a0:66:8e:bd:26:
         3a:7c:b2:df:5b:87:30:ca:f6:86:31:fb:98:7e:70:e6:f4:a2:
         73:a9:2a:6d:7d:92:f9:e3:d1:7a:12:47:51:e6:3e:05:61:89:
         e5:73:54:15:41:99:24:d9:17:a9:46:c2:b7:3c:69:44:29:70:
         ca:9b:f3:8e:ea:92:33:e2:82:6b:c2:61:45:f6:33:7a:b7:54:
         09:9e:ea:ee:be:aa:6d:88:75:d0:82:2e:d5:43:51:80:b4:90:
         5e:a1:c9:bb:61:b6:6a:57:e6:9a:a3:0b:14:ca:e3:4b:a0:30:
         16:b0:84:5e:57:53:57:58:65:54:57:c0:fa:48:40:4b:15:78:
         28:82:76:74:24:c4:23:1b:9e:e5:9c:ee:f8:d9:b5:6d:b4:ce:
         d8:a9:93:1e:d2:73:e0:6d:5a:79:3d:32:75:ac:1f:54:83:9a:
         41:ff:2d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:43:21 2026 by rpki-client