Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File:                     ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier:          CTGz+CPKL3+LjUsRISnj+rQ/4YKgrzkvRUw4mzgRwJ4=
Subject key identifier:   64:D7:4B:16:91:B5:94:B1:B7:B4:CC:B2:DC:D4:67:4C:A3:9E:A3:F0
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer:       /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial:       01A0D3F08C6199B93D600B4662DF24BD15B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number:          1A76
Signing time:             Thu 24 Sep 2026 15:02:32 +0000
Manifest this update:     Thu 24 Sep 2026 15:02:32 +0000
Manifest next update:     Fri 25 Sep 2026 15:02:32 +0000
Files and hashes:         1: 30h9dqpO2HTNFcZzXQCxUtNzDC4.roa (hash: 0sA/L/18FE59iFvAgUSimg7slW1i1d3kvvSKOu/WMqs=)
                          2: DaWre0O30UsHqeSDT6i_4Yq-tic.roa (hash: 9DotK/TTTUTMkn9fIQaKfkaVPPRreV6+27pYcu5DDN0=)
                          3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: UqxKcq3COAY6e5Mo9Pphhx4wgF/c6d/TJ4ucICdyJbs=)
                          4: MkyGLOUgEm7yWmws0P0WmJhg_og.roa (hash: lImHVfPNO/uEHSArF6tT6T1ccVGKtSX8t+Ym23NvLaU=)
                          5: Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa (hash: iRsZadW5zJyTKxF9xF+gVynd1FcJcWOsgkuRoqnlw+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:f0:8c:61:99:b9:3d:60:0b:46:62:df:24:bd:15:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
        Validity
            Not Before: Sep 24 15:02:32 2026 GMT
            Not After : Sep 25 15:02:32 2026 GMT
        Subject: CN=64d74b1691b594b1b7b4ccb2dcd4674ca39ea3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:12:bf:43:2c:d9:04:32:5d:56:7d:9f:91:7b:
                    33:ad:45:f4:38:86:14:31:79:72:2e:d7:35:1a:29:
                    07:ed:4a:6e:91:d8:99:3c:4f:6b:23:1d:30:3d:a6:
                    57:a7:6c:eb:79:e0:7a:84:24:1f:23:68:d2:7d:21:
                    c1:85:48:da:89:1e:15:50:15:32:e1:41:b3:fd:53:
                    40:a5:05:c8:e1:a6:18:e2:eb:af:b3:ae:0c:3a:34:
                    4d:3d:cb:2d:b1:ff:b2:41:19:fa:3f:74:b7:e5:81:
                    d7:b4:27:bf:60:d5:20:92:a2:3f:3b:00:f1:7f:51:
                    45:c3:6e:ff:bb:eb:b6:02:f6:ed:55:37:9a:ed:4e:
                    e4:81:e5:c0:08:c7:33:85:d4:ef:e8:51:44:b2:d4:
                    96:f6:7c:01:cf:c5:1e:72:46:b5:fe:f0:3a:9f:8b:
                    25:6b:d5:83:66:8a:9d:08:1d:85:10:85:ec:2b:9d:
                    0b:d9:e7:5b:0b:b5:2d:12:4b:a2:b7:77:f5:24:a0:
                    8d:0b:fd:ef:86:ea:05:fd:7a:e0:b5:5d:68:17:30:
                    31:75:36:5f:96:96:ec:b8:c2:a8:74:14:61:f6:78:
                    3a:f6:2e:54:83:46:36:c0:a6:64:1c:04:23:0d:1b:
                    87:9e:67:5f:8c:c2:ec:98:e5:fb:3d:51:1e:7f:4a:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D7:4B:16:91:B5:94:B1:B7:B4:CC:B2:DC:D4:67:4C:A3:9E:A3:F0
            X509v3 Authority Key Identifier:
                keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:2e:95:77:4d:d6:fb:d2:fa:ef:6c:e0:ab:46:73:60:13:f7:
         94:f3:a7:c9:15:8f:02:17:1f:a9:10:ce:d5:bc:8e:ba:81:5c:
         8c:aa:4c:da:1e:8b:ef:7d:8a:63:86:45:ba:c3:00:7d:3a:ac:
         e5:ab:fc:a0:f1:77:5e:53:1f:ba:e8:66:09:1a:e9:1f:e1:94:
         bf:01:ea:f9:6e:e3:0e:ec:0c:40:6f:0d:44:3e:fa:d9:35:af:
         5a:fc:d2:e2:96:00:9a:35:b3:fd:ef:62:a3:5a:d2:ca:a9:61:
         d8:a1:01:4b:72:14:dc:34:db:1c:7d:00:ac:7b:4c:39:67:34:
         83:56:9d:b9:66:c3:f6:80:ef:7d:64:a5:05:32:ea:3d:9d:6d:
         f4:42:93:f2:d0:6b:c9:c2:90:ad:6d:55:f7:15:46:df:8c:55:
         8a:5a:56:89:44:8f:83:ac:4d:15:0e:56:ab:7b:84:02:36:3c:
         4f:c2:8f:9a:84:ac:9e:a9:9d:cf:62:a0:e0:f8:ce:64:da:b5:
         08:53:9c:b6:a2:a3:c6:e1:38:1d:58:88:66:f6:f0:5e:c5:66:
         30:06:bd:4e:ed:f8:0c:4a:78:10:82:ab:f8:18:45:20:95:f5:
         e1:28:76:01:af:d2:ff:a8:0d:3b:f9:86:32:8e:02:95:ae:81:
         a7:6a:a2:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT8Ixhmbk9YAtGYt8kvRW0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzUxODY1Yjc2N2RkN2I5YzIyMzE0YmZjODA1NWJkNTdk
YjAwNjUwHhcNMjYwOTI0MTUwMjMyWhcNMjYwOTI1MTUwMjMyWjAzMTEwLwYDVQQD
Eyg2NGQ3NGIxNjkxYjU5NGIxYjdiNGNjYjJkY2Q0Njc0Y2EzOWVhM2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixK/QyzZBDJdVn2fkXszrUX0OIYU
MXlyLtc1GikH7UpukdiZPE9rIx0wPaZXp2zreeB6hCQfI2jSfSHBhUjaiR4VUBUy
4UGz/VNApQXI4aYY4uuvs64MOjRNPcstsf+yQRn6P3S35YHXtCe/YNUgkqI/OwDx
f1FFw27/u+u2AvbtVTea7U7kgeXACMczhdTv6FFEstSW9nwBz8Uecka1/vA6n4sl
a9WDZoqdCB2FEIXsK50L2edbC7UtEkuit3f1JKCNC/3vhuoF/XrgtV1oFzAxdTZf
lpbsuMKodBRh9ng69i5Ug0Y2wKZkHAQjDRuHnmdfjMLsmOX7PVEef0qDrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTXSxaRtZSxt7TMstzUZ0yjnqPwMB8GA1UdIwQY
MBaAFCE1GGW3Z917nCIxS/yAVb1X2wBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAt
MWU0ZTA0MDA4NDRiLzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAtMWU0ZTA0MDA4NDRi
LzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAty6Vd03W
+9L672zgq0ZzYBP3lPOnyRWPAhcfqRDO1byOuoFcjKpM2h6L732KY4ZFusMAfTqs
5av8oPF3XlMfuuhmCRrpH+GUvwHq+W7jDuwMQG8NRD762TWvWvzS4pYAmjWz/e9i
o1rSyqlh2KEBS3IU3DTbHH0ArHtMOWc0g1aduWbD9oDvfWSlBTLqPZ1t9EKT8tBr
ycKQrW1V9xVG34xVilpWiUSPg6xNFQ5Wq3uEAjY8T8KPmoSsnqmdz2Kg4PjOZNq1
CFOctqKjxuE4HViIZvbwXsVmMAa9Tu34DEp4EIKr+BhFIJX14Sh2Aa/S/6gNO/mG
Mo4Cla6Bp2qi4g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:21:44 2026 by rpki-client