Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File:                     ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier:          LXrZL5kRfSzQsbeFWZXcXGJ55CKn1YojLfM+vfUNGw4=
Subject key identifier:   97:2A:D2:A2:03:AF:28:93:C8:CB:BC:02:EA:11:97:4E:94:C1:2F:01
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer:       /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial:       0199FCC612307CFB8EB971EC914AFDF5DE23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number:          16EB
Signing time:             Sun 19 Oct 2025 14:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:03 +0000
Files and hashes:         1: 2xSdynJrR2lrRXow3DheycMEzkg.roa (hash: nooA7vWCWimGNoVynR8X8CPFNFkK8X4dvNkM9491OGY=)
                          2: 4ivYTJwHbxlEFGw6yHQUPiIrnLk.roa (hash: c/5BSogehebsaJujE8GYhFFEuezzSIs2u3N/ALM/jkY=)
                          3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: MbmTjamIzZ64lAJiJkh/689tvqvjNL1UW350ZmlZVWA=)
                          4: JFVsgFbYrjh5C77tg48FZqxd4J4.roa (hash: ff5cSciKjRToO8iXbplHVL2WQA8ta+cT3q72ycgeqdw=)
                          5: cFyLz0464YCDv1_wlpt751wWjv0.roa (hash: 6oL3kHvs8+fXiSDYlf2hI6gNwQZ8WHh03nzI53rd4Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:12:30:7c:fb:8e:b9:71:ec:91:4a:fd:f5:de:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
        Validity
            Not Before: Oct 19 14:01:03 2025 GMT
            Not After : Oct 20 14:01:03 2025 GMT
        Subject: CN=972ad2a203af2893c8cbbc02ea11974e94c12f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:67:49:d8:0a:b2:71:3a:28:c0:72:82:ec:
                    fe:08:6e:34:a8:cc:19:05:1d:73:78:6c:fa:9d:19:
                    a5:f5:b5:29:2a:ac:4a:35:28:3f:40:6c:0f:66:0a:
                    30:86:96:e8:e8:44:9e:39:d4:f6:6b:3b:d5:25:22:
                    24:70:f1:98:08:aa:76:45:6d:a4:66:ca:4a:90:b3:
                    31:19:c3:59:af:06:ef:c2:f6:85:12:de:a5:91:93:
                    5e:80:18:ab:10:cd:ee:af:ba:88:32:80:64:b3:59:
                    f2:fd:33:cb:6c:89:2c:5a:09:19:67:81:83:5c:f9:
                    63:13:34:98:e2:80:46:33:fe:0b:00:2a:50:da:2c:
                    6f:10:19:92:3b:65:10:d7:89:23:0c:34:66:d9:f5:
                    ac:9f:9f:19:52:18:a9:42:4a:62:a4:06:13:19:b4:
                    53:f3:a9:eb:9d:f9:ea:e4:d2:b7:20:88:97:72:47:
                    83:08:f8:74:74:8c:08:45:8c:06:04:a4:79:2d:76:
                    88:c2:00:77:a0:26:35:0f:99:82:70:80:cd:c9:a2:
                    93:87:d9:58:01:6b:24:fb:e2:69:54:02:17:32:4a:
                    a9:00:cc:3b:5a:46:3e:14:95:b5:68:df:f0:c5:b6:
                    13:4b:0c:48:ef:cf:6f:f4:40:e3:c0:31:d1:5e:43:
                    49:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2A:D2:A2:03:AF:28:93:C8:CB:BC:02:EA:11:97:4E:94:C1:2F:01
            X509v3 Authority Key Identifier:
                keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fe:0e:ae:51:e0:a2:e2:90:b7:ac:b1:5f:3b:fa:aa:61:71:
         80:8c:7d:1f:b0:94:c1:a1:e9:6e:e2:aa:26:6d:c0:ac:80:d6:
         05:55:2c:97:d3:b7:fa:cf:41:55:d3:26:af:b5:7e:bd:8c:e1:
         ce:b9:aa:23:ee:9f:7d:3f:f9:3f:92:42:88:0b:08:43:8b:2e:
         fb:69:fb:a9:34:17:86:be:dc:d0:69:44:6c:19:63:f7:12:c6:
         70:a6:1a:f8:f0:9a:7e:21:9e:ce:76:66:13:53:9d:84:4b:8a:
         8c:1a:83:05:af:af:39:e3:1e:11:15:fb:fb:30:13:57:74:64:
         bb:f2:01:67:4c:5b:bd:5e:8d:2e:29:5e:af:60:13:28:a2:84:
         0d:d3:aa:4d:14:ec:c0:f0:5f:fe:5a:b6:ea:d3:31:ea:9b:e0:
         25:3c:27:93:cd:7b:b1:21:f6:4a:74:71:ec:14:92:a7:45:41:
         6d:93:f6:fc:99:08:23:2b:ac:5d:1d:0c:8d:22:f4:a1:0c:6b:
         27:16:c2:34:91:3a:32:e4:72:73:04:9f:9e:2d:e1:1a:e1:02:
         0d:11:9e:c7:2f:bd:03:85:0b:6d:c9:a1:14:c8:e4:f1:57:33:
         9b:08:88:1b:67:9b:51:5f:01:a1:88:80:0c:8c:e9:6f:d9:89:
         51:27:c7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:47 2025 by rpki-client