Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File:                     ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier:          Guxrz/vK1uS3VEKiU4+iMZS7XzlRaXPFxkgpoQe4eQE=
Subject key identifier:   DD:D6:F9:87:37:EA:BD:27:91:C0:DA:41:70:73:72:08:21:EA:58:D0
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer:       /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial:       019EC1489D1F66586506AD727B17A20AC75F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number:          15FE
Signing time:             Sat 13 Jun 2026 14:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:21 +0000
Files and hashes:         1: EHnMdlQCTiULg7kKOrY_TKLhyGo.roa (hash: //N8l4aMb1HtqxaY4hYaKRgIbFDikawzft4e5uyR8EU=)
                          2: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: +Kjyb0DeGeKtNvnyWxZmCuO6MrDbt8XArmMrmd8DJtY=)
                          3: jApwspNrYmvHSczWoxpSc1FCf5Y.roa (hash: lPAYA3qVHdsWwR+TkawAou907puKMaA0tiGtCTfZCxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:9d:1f:66:58:65:06:ad:72:7b:17:a2:0a:c7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
        Validity
            Not Before: Jun 13 14:00:21 2026 GMT
            Not After : Jun 14 14:00:21 2026 GMT
        Subject: CN=ddd6f98737eabd2791c0da417073720821ea58d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cc:36:6f:e6:ad:22:a2:0e:47:8c:39:ba:08:
                    34:af:0f:a5:45:71:a1:5b:68:b7:26:32:e7:2e:13:
                    0c:f8:81:cd:da:51:0e:b4:d7:55:9b:d0:c1:2b:58:
                    3b:54:51:cd:f6:ca:61:e4:fd:21:cc:f7:37:42:39:
                    b3:63:38:39:f3:e2:32:33:28:44:b2:80:11:5e:44:
                    10:66:69:5c:0f:38:34:af:d9:d2:a3:e4:f1:9d:4c:
                    21:9a:38:70:2f:66:b1:7e:a9:1e:e9:19:45:98:c7:
                    36:63:6a:fd:d3:a3:07:73:9e:c5:4c:bb:b0:94:4c:
                    38:0f:db:36:ad:73:48:13:ee:d4:21:87:7c:81:4f:
                    9c:e4:5a:7d:99:a9:65:7d:f8:cd:fe:16:77:26:7c:
                    fd:34:52:c0:76:60:12:42:71:f1:9e:19:34:6c:92:
                    fe:d8:98:61:49:cc:83:5a:fb:d1:46:6a:4c:ee:d2:
                    85:cc:72:0b:2e:e0:b2:3b:69:cf:77:a7:7c:7b:dd:
                    4b:f2:32:cd:24:b3:e2:d5:d8:bf:08:8a:9a:17:88:
                    5e:47:76:b3:9f:66:82:42:55:2a:90:be:87:38:38:
                    b9:a6:0b:c4:bb:d2:95:01:13:b8:68:4f:6a:b8:a9:
                    a7:9c:09:57:d0:cf:b5:5a:df:4b:72:2b:d0:ca:eb:
                    93:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D6:F9:87:37:EA:BD:27:91:C0:DA:41:70:73:72:08:21:EA:58:D0
            X509v3 Authority Key Identifier:
                keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4d:ed:8f:7b:3e:d1:48:f7:9b:e8:50:4c:61:ae:03:87:e4:
         56:0a:6b:f3:1c:86:77:04:89:0a:13:0b:35:05:e0:c5:18:50:
         f8:7c:74:f4:70:dd:05:14:42:e3:e0:27:0d:20:6e:a0:64:c7:
         51:7c:7e:ea:56:ec:1e:c4:c7:cd:36:7e:c7:1b:fa:4b:cd:80:
         2a:4b:42:27:be:ef:a9:2c:61:43:af:a0:3b:4d:de:78:11:fd:
         b5:51:49:2e:53:96:6e:3d:ea:7e:39:17:c1:47:a8:e9:04:de:
         85:2d:eb:9f:7b:9d:69:93:2b:97:e7:6f:08:2d:1d:d9:23:6d:
         0e:7f:97:14:61:54:cb:99:cb:0f:af:ac:59:5e:b5:5a:81:4c:
         24:e9:66:ae:24:1b:44:0c:a2:35:99:db:70:f7:53:2d:c9:48:
         9b:f8:92:e0:0b:57:b1:6b:23:b8:62:b9:94:b8:87:da:9d:16:
         8b:3e:68:ff:2b:c3:c5:37:28:8f:32:67:cd:93:e1:16:a2:7d:
         de:dc:b4:5c:b8:c5:80:55:1c:6f:71:4f:f2:95:ad:39:ee:4e:
         37:1a:95:86:38:2d:11:90:87:1b:76:50:d6:1e:3f:2a:1e:82:
         40:97:6c:93:4b:43:92:2e:09:a6:81:60:46:61:70:fb:f8:d9:
         31:94:9c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:54 2026 by rpki-client