Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File:                     ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier:          8tr6SWEY7rOif/q9wjrzV5rz8fQtm6Y7O6ORvfcpUAE=
Subject key identifier:   4E:B1:FE:73:B1:32:9C:BC:BD:09:20:D8:80:96:53:64:08:E4:2E:0A
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer:       /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial:       019E1EA2E818BBF71FC7B464B120DCBA1108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number:          190F
Signing time:             Wed 13 May 2026 00:00:53 +0000
Manifest this update:     Wed 13 May 2026 00:00:53 +0000
Manifest next update:     Thu 14 May 2026 00:00:53 +0000
Files and hashes:         1: 30h9dqpO2HTNFcZzXQCxUtNzDC4.roa (hash: 0sA/L/18FE59iFvAgUSimg7slW1i1d3kvvSKOu/WMqs=)
                          2: DaWre0O30UsHqeSDT6i_4Yq-tic.roa (hash: 9DotK/TTTUTMkn9fIQaKfkaVPPRreV6+27pYcu5DDN0=)
                          3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: g9SvHljhNdcVPWqGoAtfDAnUKcXVwD0ypAJSUuzL1GE=)
                          4: MkyGLOUgEm7yWmws0P0WmJhg_og.roa (hash: lImHVfPNO/uEHSArF6tT6T1ccVGKtSX8t+Ym23NvLaU=)
                          5: Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa (hash: iRsZadW5zJyTKxF9xF+gVynd1FcJcWOsgkuRoqnlw+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:e8:18:bb:f7:1f:c7:b4:64:b1:20:dc:ba:11:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
        Validity
            Not Before: May 13 00:00:53 2026 GMT
            Not After : May 14 00:00:53 2026 GMT
        Subject: CN=4eb1fe73b1329cbcbd0920d88096536408e42e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:d6:a6:e9:3b:05:78:d2:d7:95:2d:4d:e1:
                    1d:31:0c:31:c1:ff:ae:75:23:ce:25:30:78:40:f6:
                    7d:cb:83:20:3d:58:6e:7f:7f:cd:cd:87:64:dd:29:
                    db:cc:f8:89:ab:fc:b1:0f:87:a5:29:1c:d9:d6:77:
                    fa:54:29:04:48:80:99:a2:6f:3d:77:11:0d:44:65:
                    66:03:fd:bb:8d:30:44:da:33:30:c2:ec:3e:d9:24:
                    c8:91:7e:fc:fa:24:23:80:5f:67:84:67:ee:26:47:
                    6a:a8:ff:bb:2b:a5:67:c0:47:49:4a:32:8e:a1:41:
                    02:83:80:7a:52:6e:6b:56:7c:83:5a:4f:75:c1:b2:
                    ab:55:e6:1b:56:03:08:1b:67:d5:84:0e:c6:5f:10:
                    13:cc:e7:46:49:00:65:11:aa:85:01:e8:39:7d:5d:
                    36:34:35:bc:4c:36:df:a8:4d:8b:51:54:f9:54:8d:
                    15:b8:92:7b:cc:eb:fc:88:af:38:41:d4:62:de:e3:
                    be:fb:30:a9:88:e5:25:fe:aa:54:1e:49:0b:61:77:
                    78:55:ae:df:05:0e:ee:fa:df:1e:e6:20:5e:c4:82:
                    39:8a:d6:4d:55:a4:64:87:c2:88:11:02:b7:2c:9b:
                    8a:42:bc:98:5d:56:cd:b7:ea:cb:a7:00:16:e9:50:
                    e5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B1:FE:73:B1:32:9C:BC:BD:09:20:D8:80:96:53:64:08:E4:2E:0A
            X509v3 Authority Key Identifier:
                keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3f:0a:6b:5f:c5:b5:7e:55:d2:58:77:67:76:e7:b3:60:37:
         59:d4:5d:ca:ab:ed:66:68:b8:2f:57:e4:c2:d7:bf:b1:46:1d:
         7d:2a:9a:2a:f6:73:5c:18:43:7c:25:3a:70:da:a5:90:ac:28:
         ed:a9:36:ff:3b:f7:af:7e:43:e5:18:92:26:3a:95:ee:c3:9b:
         27:ef:60:f0:59:b9:1d:ee:b2:57:56:a7:f0:db:2c:63:5d:b4:
         1d:1b:ab:5e:d9:66:4f:40:12:0e:c4:1f:11:52:e5:89:5a:da:
         07:37:06:18:1f:aa:4f:da:ae:41:1e:58:eb:a4:b9:5e:da:e7:
         0f:73:55:c8:af:94:47:14:81:32:16:f2:5f:ed:51:62:5f:81:
         55:46:a5:f5:b3:97:b4:3d:2f:9c:5c:89:17:d7:f6:92:84:10:
         c9:18:07:2d:a8:1e:6b:bf:e8:41:2d:4b:48:e0:0d:84:57:a7:
         63:93:87:0c:08:19:25:d4:c1:fb:8e:02:da:54:e0:5c:36:08:
         a7:c3:e0:08:fb:ee:5c:fd:7b:84:09:98:db:35:5d:ee:f4:68:
         d6:fe:07:0d:07:63:92:4f:f6:d8:75:87:6f:d5:b0:ea:cc:00:
         11:f6:94:8f:4e:7a:d5:41:02:04:60:f5:16:9e:0d:b0:c2:12:
         c1:a9:4c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:42 2026 by rpki-client