Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File:                     IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier:          8+rrKVVxM7dP1JgCtHTAOtCALfyr0PTitFGxWtFTCGQ=
Subject key identifier:   74:1F:B0:0B:65:B7:49:BE:3C:BD:2D:DF:23:CC:D5:96:B3:2E:F5:26
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer:       /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial:       019844ACDED2A088FAFEC2849317377087D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number:          114A
Signing time:             Sat 26 Jul 2025 03:00:36 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:36 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:36 +0000
Files and hashes:         1: 76krOMMFj4xGzKVVHko6uuDROxo.roa (hash: ceX2KDmhx3x4hNPX/8MXCJQ5KaH4yEnp1JFYHt1MSdY=)
                          2: F5qz-Vy2ncltsniwS8n2KgCCfq0.roa (hash: kxMCsu4yD7h4P+QzcS37eIb+y0MEuK5iSa4JgSytJ7M=)
                          3: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: 0G9L/v5UiW93tlErJhyhksl1gakKAY63CdXKTjY82lM=)
                          4: StSC9N03azFTttR3EoIav2MRsZc.roa (hash: Cu2Gg7GKVcYUuysW1qolVhXM9Kgp01W96yjaPNDKJxk=)
                          5: ewZSVtLlMKbZRioDRSGf8H0IaLA.roa (hash: cBUrQBxHZc9doLajihiHlq4PDgUK5KQSHA/948O3rQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ac:de:d2:a0:88:fa:fe:c2:84:93:17:37:70:87:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
        Validity
            Not Before: Jul 26 03:00:36 2025 GMT
            Not After : Jul 27 03:00:36 2025 GMT
        Subject: CN=741fb00b65b749be3cbd2ddf23ccd596b32ef526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9a:c8:ab:ad:89:a3:47:48:03:25:77:e5:34:
                    2c:ea:f9:e1:dd:26:95:f5:18:82:dd:9c:d0:56:0b:
                    b8:c4:9d:41:bf:b6:c0:b1:87:d5:05:a0:63:90:97:
                    7d:d4:91:cf:d6:2e:22:97:36:7d:dd:90:18:5a:5b:
                    18:7c:40:89:8b:9f:5e:41:91:c2:f7:32:f6:bc:b8:
                    24:1e:d4:1f:2a:82:25:d6:33:42:8e:6b:15:ed:18:
                    4e:f4:c8:2e:39:cd:c5:09:ce:06:ae:8d:8a:72:f1:
                    ed:42:89:38:fa:d3:27:60:2b:1e:be:89:ee:55:a5:
                    d4:96:d0:51:48:f4:db:3e:ad:47:2d:16:7a:2e:2c:
                    c3:6c:e8:00:95:cc:e3:8c:0b:ac:15:de:23:56:54:
                    f6:1f:11:5d:0a:4c:c1:d8:7f:f5:09:99:f6:de:4a:
                    6e:a8:00:fc:6f:19:ba:80:57:1d:64:5c:10:10:07:
                    2b:1a:ed:f1:45:69:db:42:98:d2:4a:8f:98:15:b3:
                    a0:cb:67:34:26:3e:17:d4:6a:10:ee:76:6a:46:d7:
                    b3:e2:74:03:e4:97:1a:3a:b2:83:d4:49:4f:83:cc:
                    b5:32:0e:cd:af:7e:df:70:34:50:f7:c4:84:21:0a:
                    1a:4d:43:29:59:ef:90:2b:cd:8e:9b:63:42:9f:99:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1F:B0:0B:65:B7:49:BE:3C:BD:2D:DF:23:CC:D5:96:B3:2E:F5:26
            X509v3 Authority Key Identifier:
                keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f8:57:c4:11:c2:f2:72:af:1a:0d:4f:cb:57:54:ce:50:04:
         b8:e7:dc:7b:1b:7d:dc:2f:d7:04:84:a1:49:4e:07:8a:1b:b2:
         88:4b:42:92:6c:3b:99:e6:d2:4d:b2:ba:8c:46:83:95:62:a5:
         a5:d9:0d:9e:d8:7f:79:ee:b0:45:79:77:54:8a:f7:74:df:28:
         2d:83:24:4a:08:2c:8c:ee:56:b2:c5:ae:54:75:e6:0f:2e:26:
         d6:bd:97:3d:98:b9:4a:93:08:f9:f9:20:72:69:f6:aa:88:64:
         29:df:c9:fb:01:de:60:15:50:e3:c9:df:8b:63:d4:75:24:50:
         c7:04:f6:a0:61:67:42:7f:8c:cc:8c:5b:25:85:d0:60:21:f6:
         08:88:ad:53:b2:ca:80:8f:e0:3d:35:d6:10:a1:33:ac:9e:99:
         7b:02:8d:24:cb:de:e7:61:17:5f:f3:ac:2e:93:4a:2c:13:7b:
         67:4a:b2:21:7c:bb:26:de:6a:e6:16:69:94:ba:28:bc:96:e4:
         e9:23:eb:e2:2e:ce:a7:a9:aa:1a:bf:03:91:55:41:a0:09:7f:
         70:74:56:96:be:84:15:96:c4:c2:56:50:5a:2f:87:d8:1b:4d:
         06:7f:fe:0f:3e:d0:db:3c:21:d0:ac:25:de:50:ef:3e:e1:4c:
         4e:39:92:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:16:04 2025 by rpki-client