Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File:                     ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier:          PI/TL9vbDC+ZnJwnBhZeEXRcDOe7q5JH1XVBhNVjL20=
Subject key identifier:   92:F6:99:59:67:65:B9:2F:89:99:66:BE:90:D2:C9:26:2A:9B:61:1A
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer:       /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial:       01976A057C99EBE98163A7BAE042480BA74A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number:          122E
Signing time:             Fri 13 Jun 2025 16:00:33 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:33 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:33 +0000
Files and hashes:         1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: /cpv3PiJ27UBdyvGD2h+JfPlZHlG9P9bQsHMoJgOp5A=)
                          2: bwWK7STk8JGeZNNeiu45q2N8QGc.roa (hash: IHej2lyZuUlDH3fMmYrRdwCcTBeweBqee1xUvWcQAO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:7c:99:eb:e9:81:63:a7:ba:e0:42:48:0b:a7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
        Validity
            Not Before: Jun 13 16:00:33 2025 GMT
            Not After : Jun 14 16:00:33 2025 GMT
        Subject: CN=92f699596765b92f899966be90d2c9262a9b611a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:09:bd:a4:33:2a:a8:ed:59:4c:2e:f9:cb:
                    5e:aa:2c:4a:63:e6:16:ad:25:00:c9:32:e4:2e:c4:
                    00:46:46:71:59:8b:67:1d:09:75:96:09:a6:ae:fa:
                    f7:92:7b:9f:c1:65:34:1b:b8:f4:6e:2f:25:0c:d8:
                    70:16:59:d7:f3:43:93:d4:93:d0:83:70:43:02:25:
                    b5:d6:19:5f:e2:f0:8f:fc:03:23:08:40:85:e9:ce:
                    a0:c0:06:2d:36:cb:f6:1f:63:a1:ce:aa:62:9e:3e:
                    4a:59:4a:20:86:48:c1:44:96:d8:eb:f5:b2:98:67:
                    c0:c8:60:80:84:31:20:7a:b3:1f:0b:c8:df:87:a0:
                    0a:61:65:82:72:16:47:80:ba:41:34:20:9d:7a:80:
                    14:15:d0:32:60:f3:ee:13:ce:df:bd:01:e6:1e:66:
                    fd:20:14:ce:be:4e:a0:9d:02:f7:54:28:4a:8b:07:
                    f6:f9:a6:95:07:41:6c:e7:d5:07:a5:16:37:50:b8:
                    7b:f2:d2:99:4f:a0:58:85:d8:aa:a3:e4:34:29:ea:
                    b5:ee:24:b3:4c:2e:c9:fe:ef:87:54:3b:79:2d:75:
                    ae:fc:bc:26:f0:e8:ac:bf:ff:20:61:0a:f4:9c:f0:
                    13:4b:3d:74:76:d1:0f:28:b1:d3:06:db:9a:1f:23:
                    e2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F6:99:59:67:65:B9:2F:89:99:66:BE:90:D2:C9:26:2A:9B:61:1A
            X509v3 Authority Key Identifier:
                keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:85:a0:c0:6a:f9:64:ca:8e:56:86:82:38:46:63:6c:67:cf:
         94:3d:41:51:7d:be:40:f4:cf:f8:40:f5:ae:bc:19:ce:af:2d:
         d4:98:e9:5e:3e:93:74:a8:26:fe:9a:6b:dc:c2:43:35:03:e7:
         09:fb:fb:03:99:b1:d1:f1:5d:de:ab:d0:d5:97:7d:d9:62:e8:
         bd:93:3f:2e:cb:ea:b5:57:a1:0b:84:1f:86:21:e6:e3:4a:d9:
         43:04:57:62:5a:89:8d:86:18:91:fd:7d:b1:ac:5f:d8:a4:0c:
         37:94:a6:fd:cb:d2:56:33:d2:a2:d7:89:4e:5f:9e:3d:46:65:
         1c:31:a5:4d:44:6e:72:d5:84:f4:f8:bd:50:9b:e6:4b:1d:02:
         5a:64:55:c1:38:94:41:98:e0:31:31:a3:8d:c2:5b:2f:0d:2b:
         b6:35:55:18:3d:81:47:f3:5a:00:66:30:e6:3c:24:c6:6f:b5:
         f4:9c:bb:a9:68:73:d9:58:a8:ec:0e:e0:d2:90:b5:c6:16:9c:
         ef:0b:45:a6:de:f4:ac:45:51:0c:9f:a1:b4:eb:2a:ef:db:b2:
         8e:bb:2b:d9:35:e3:c9:97:a8:a4:5c:45:d1:5f:01:5b:b7:5b:
         ab:fb:d3:49:0b:d0:d9:d2:88:e2:dd:a8:55:ca:05:7c:5b:d8:
         2e:bc:02:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:45 2025 by rpki-client