Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File:                     ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier:          Ph5f0jpnMf3SmMQr0KKeGpeMkxSD/Vah6t1LVi3VRSE=
Subject key identifier:   D7:04:F2:07:CB:E3:67:46:9E:C2:21:0E:40:7B:CF:90:6D:C1:4A:0C
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer:       /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial:       01A0D7CD3DF94DD1F16AC7CC007085699FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number:          1A78
Signing time:             Fri 25 Sep 2026 09:02:27 +0000
Manifest this update:     Fri 25 Sep 2026 09:02:27 +0000
Manifest next update:     Sat 26 Sep 2026 09:02:27 +0000
Files and hashes:         1: 30h9dqpO2HTNFcZzXQCxUtNzDC4.roa (hash: 0sA/L/18FE59iFvAgUSimg7slW1i1d3kvvSKOu/WMqs=)
                          2: DaWre0O30UsHqeSDT6i_4Yq-tic.roa (hash: 9DotK/TTTUTMkn9fIQaKfkaVPPRreV6+27pYcu5DDN0=)
                          3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: F6hse0nPFh65frqLZUvZir/E5FC38yWHjmtAedTyxwk=)
                          4: MkyGLOUgEm7yWmws0P0WmJhg_og.roa (hash: lImHVfPNO/uEHSArF6tT6T1ccVGKtSX8t+Ym23NvLaU=)
                          5: Q82JzMQ9fn6zQUYFYzhsa6n8EfA.roa (hash: iRsZadW5zJyTKxF9xF+gVynd1FcJcWOsgkuRoqnlw+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cd:3d:f9:4d:d1:f1:6a:c7:cc:00:70:85:69:9f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
        Validity
            Not Before: Sep 25 09:02:27 2026 GMT
            Not After : Sep 26 09:02:27 2026 GMT
        Subject: CN=d704f207cbe367469ec2210e407bcf906dc14a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:04:29:1c:6d:aa:83:84:b0:6d:28:ae:5f:a1:
                    e0:c4:fd:3c:73:72:b4:22:f4:48:56:0c:24:a8:7d:
                    c5:94:01:8e:8b:83:3f:1b:11:f6:da:4b:74:9f:3d:
                    1e:79:e3:8b:ad:59:d7:d6:6f:b0:bd:d8:20:51:52:
                    15:6d:b4:fa:13:87:3a:f9:b0:7e:b6:83:fe:60:b9:
                    c7:b8:bf:7e:16:93:73:64:ff:a6:59:3a:a4:b3:3b:
                    63:27:27:3c:b5:c0:eb:a5:d3:46:df:63:89:f3:ad:
                    08:69:8f:81:eb:69:6f:d7:28:6f:70:f6:de:ac:6a:
                    e7:39:94:3b:9f:4f:f9:67:e5:e9:a4:71:ef:fd:e6:
                    c5:7f:f6:4f:30:86:58:06:96:4c:7a:d7:cc:76:3d:
                    36:5f:87:59:82:2a:61:a8:7a:f1:e2:84:e6:74:42:
                    14:1c:96:ff:a0:65:7f:e5:89:21:02:5d:e1:86:85:
                    e3:91:66:e3:3f:95:83:cb:db:d7:14:dd:0c:5a:30:
                    c9:f6:f5:ef:56:e9:e4:f5:b3:27:73:8e:b8:eb:0e:
                    16:e9:73:c1:36:0f:ea:80:fd:10:8e:ae:c9:ae:be:
                    e9:d2:1e:33:c8:14:99:a1:4b:5a:d1:43:6a:74:73:
                    b1:6c:f6:db:67:05:62:cb:c3:16:cf:f6:a6:52:ce:
                    d1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:04:F2:07:CB:E3:67:46:9E:C2:21:0E:40:7B:CF:90:6D:C1:4A:0C
            X509v3 Authority Key Identifier:
                keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2b:b5:77:9d:8c:ff:5e:2a:64:44:bd:54:26:d6:b6:2a:59:
         ce:cb:00:e4:44:08:2a:9f:2d:f2:cf:38:f4:5d:d4:9b:ec:9c:
         11:06:ce:13:60:1c:10:30:a9:12:53:48:75:51:07:63:06:7d:
         84:24:f0:cb:70:0c:31:bd:76:9d:43:45:42:fa:69:28:3e:41:
         99:86:c8:cf:ae:28:9a:e4:78:d7:89:90:ac:d6:c1:fa:d4:e4:
         2f:8a:cf:8c:e0:67:f4:b5:23:b7:2c:7b:60:27:f3:e3:75:d8:
         fc:4b:9b:d6:f7:a6:12:b3:b8:05:a1:c8:88:b5:78:75:65:05:
         dc:eb:96:d3:2c:04:22:cc:14:1f:bb:39:87:7b:32:ba:4e:8b:
         bd:3c:f8:cc:c3:7d:dd:84:6e:96:0f:c6:f9:b4:fa:48:cb:b4:
         f2:e5:91:6c:50:64:c6:14:02:02:95:b2:eb:d7:3e:c8:cb:62:
         d6:e9:f6:63:9f:aa:2c:a8:42:c3:88:83:7c:61:61:db:56:b0:
         e4:91:74:6c:85:01:29:0c:68:84:b5:8a:7f:12:9d:73:cf:45:
         72:99:2e:8b:93:da:12:59:a2:3c:87:16:65:5c:a2:98:5a:d7:
         ee:dd:9f:0c:d0:33:c0:31:ec:c3:99:60:90:be:11:65:9e:02:
         7a:02:19:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzT35TdHxasfMAHCFaZ/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzUxODY1Yjc2N2RkN2I5YzIyMzE0YmZjODA1NWJkNTdk
YjAwNjUwHhcNMjYwOTI1MDkwMjI3WhcNMjYwOTI2MDkwMjI3WjAzMTEwLwYDVQQD
EyhkNzA0ZjIwN2NiZTM2NzQ2OWVjMjIxMGU0MDdiY2Y5MDZkYzE0YTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwQpHG2qg4SwbSiuX6HgxP08c3K0
IvRIVgwkqH3FlAGOi4M/GxH22kt0nz0eeeOLrVnX1m+wvdggUVIVbbT6E4c6+bB+
toP+YLnHuL9+FpNzZP+mWTqksztjJyc8tcDrpdNG32OJ860IaY+B62lv1yhvcPbe
rGrnOZQ7n0/5Z+XppHHv/ebFf/ZPMIZYBpZMetfMdj02X4dZgiphqHrx4oTmdEIU
HJb/oGV/5YkhAl3hhoXjkWbjP5WDy9vXFN0MWjDJ9vXvVunk9bMnc4646w4W6XPB
Ng/qgP0Qjq7Jrr7p0h4zyBSZoUta0UNqdHOxbPbbZwViy8MWz/amUs7R/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcE8gfL42dGnsIhDkB7z5BtwUoMMB8GA1UdIwQY
MBaAFCE1GGW3Z917nCIxS/yAVb1X2wBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAt
MWU0ZTA0MDA4NDRiLzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAtMWU0ZTA0MDA4NDRi
LzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESu1d52M
/14qZES9VCbWtipZzssA5EQIKp8t8s849F3Um+ycEQbOE2AcEDCpElNIdVEHYwZ9
hCTwy3AMMb12nUNFQvppKD5BmYbIz64omuR414mQrNbB+tTkL4rPjOBn9LUjtyx7
YCfz43XY/Eub1vemErO4BaHIiLV4dWUF3OuW0ywEIswUH7s5h3syuk6LvTz4zMN9
3YRulg/G+bT6SMu08uWRbFBkxhQCApWy69c+yMti1un2Y5+qLKhCw4iDfGFh21aw
5JF0bIUBKQxohLWKfxKdc89Fcpkui5PaElmiPIcWZVyimFrX7t2fDNAzwDHsw5lg
kL4RZZ4CegIZrA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 12:56:32 2026 by rpki-client