Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File:                     ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier:          U+wv4FTlGdtITzN5rYFdqGcGST7qKO8WfnFy/PLVVfk=
Subject key identifier:   73:11:09:5C:B5:9A:0D:14:B1:6C:B4:81:8C:12:86:74:4B:BC:BA:5F
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer:       /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial:       019F916D79A9CDE8F6A9CC3287FB85644814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number:          19CF
Signing time:             Fri 24 Jul 2026 00:01:38 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:38 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:38 +0000
Files and hashes:         1: 30h9dqpO2HTNFcZzXQCxUtNzDC4.roa (hash: 0sA/L/18FE59iFvAgUSimg7slW1i1d3kvvSKOu/WMqs=)
                          2: DaWre0O30UsHqeSDT6i_4Yq-tic.roa (hash: 9DotK/TTTUTMkn9fIQaKfkaVPPRreV6+27pYcu5DDN0=)
                          3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: flJM3yQCDlUTdUkqEksm69pwd1V/bKZd68OrKYhoo+U=)
                          4: MkyGLOUgEm7yWmws0P0WmJhg_og.roa (hash: lImHVfPNO/uEHSArF6tT6T1ccVGKtSX8t+Ym23NvLaU=)
                          5: Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa (hash: iRsZadW5zJyTKxF9xF+gVynd1FcJcWOsgkuRoqnlw+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:79:a9:cd:e8:f6:a9:cc:32:87:fb:85:64:48:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
        Validity
            Not Before: Jul 24 00:01:38 2026 GMT
            Not After : Jul 25 00:01:38 2026 GMT
        Subject: CN=7311095cb59a0d14b16cb4818c1286744bbcba5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:d4:d8:c7:e3:5f:c0:64:8a:80:02:c0:84:
                    6c:f3:4b:ae:dd:d4:c9:69:eb:0c:d9:3c:1c:1d:29:
                    fa:5c:69:65:66:8e:a7:1b:57:6a:3f:68:4a:ea:18:
                    b9:e4:64:2a:ad:d9:ec:f2:f1:41:eb:b1:54:43:b7:
                    cd:10:09:8a:fd:7e:58:4a:0c:69:20:ae:c6:fc:d4:
                    2a:e9:74:a0:09:00:6a:06:70:7d:2f:f2:96:79:be:
                    74:cf:4f:c1:61:dd:64:77:89:89:da:1d:f0:3b:4d:
                    d2:b6:dd:48:ce:fd:8a:ae:82:79:9f:ea:4f:00:a9:
                    2f:81:da:10:6f:19:98:8c:11:b3:b7:62:98:b4:c2:
                    ee:42:4b:ab:c3:32:86:cc:00:a4:b6:63:9f:b6:22:
                    6d:c2:7e:20:19:26:74:d6:bc:27:6c:64:57:77:02:
                    8e:f0:78:e1:55:12:d8:3a:d2:c9:91:78:0c:ca:0e:
                    23:4c:ad:35:8c:bb:d3:c9:b4:05:e4:24:67:6b:09:
                    85:40:db:7f:19:a3:7b:f0:17:c0:79:c4:1b:d8:ad:
                    75:a6:ee:04:3d:a1:41:36:8e:e6:2a:4a:8b:3e:b1:
                    aa:f3:1f:7d:fb:71:04:35:3a:43:b1:17:c0:02:e6:
                    55:b9:7d:e3:10:a5:c9:00:a6:c0:63:e3:96:41:df:
                    54:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:11:09:5C:B5:9A:0D:14:B1:6C:B4:81:8C:12:86:74:4B:BC:BA:5F
            X509v3 Authority Key Identifier:
                keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c8:c8:5e:9c:28:b4:25:c7:5d:f3:cc:23:00:87:54:55:4c:
         67:8f:06:8c:cd:de:55:c6:30:13:81:0b:dc:b6:e6:9c:c6:3a:
         06:d0:b0:6b:92:b2:21:27:cb:18:26:ef:2c:59:ed:60:87:09:
         e5:88:8b:14:82:84:3f:33:af:54:d2:90:15:a8:2f:00:c3:91:
         b5:b6:6d:66:35:c7:d5:0d:e7:02:58:80:d2:c9:fa:49:6f:5e:
         31:0e:77:37:17:7f:e4:28:ec:20:cb:86:70:00:2e:dd:c0:16:
         52:ba:a2:dc:4a:09:d3:db:0d:9d:dc:1f:dc:08:a5:a0:5e:cf:
         d5:0c:ce:9c:fe:14:3d:e4:73:a1:a6:40:3b:13:0f:a7:c0:bb:
         1b:cc:e5:89:70:41:d2:3e:e4:ee:08:7f:55:14:54:41:3e:33:
         cf:82:d2:66:86:d2:33:64:f7:2b:83:1b:c4:0d:c2:bf:c0:d2:
         76:2f:9c:a6:95:4a:3f:20:d7:e9:dc:f9:bd:1c:0a:6b:da:81:
         a4:2c:73:dc:26:a8:0d:c8:0c:f5:6b:da:5d:85:10:77:00:f0:
         41:44:e5:4f:f3:8a:d0:97:a8:17:87:dd:81:b3:b0:a3:11:34:
         65:ee:8f:78:7f:6e:d6:f3:a4:bc:b6:b6:06:ac:ff:3b:32:3a:
         f3:58:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:41 2026 by rpki-client