Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File:                     ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier:          wfVpWHZbTDYrtVCudFxPdEzsrvGy7o7W4MNXz74qAJM=
Subject key identifier:   0E:6E:6F:A1:40:7B:A2:B1:95:38:6A:3E:0E:51:26:BE:CF:0F:00:50
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer:       /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial:       01974D44BB3D7E2C3D22C7FE70473B0C2F13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number:          1587
Signing time:             Sun 08 Jun 2025 02:00:39 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:39 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:39 +0000
Files and hashes:         1: 2xSdynJrR2lrRXow3DheycMEzkg.roa (hash: nooA7vWCWimGNoVynR8X8CPFNFkK8X4dvNkM9491OGY=)
                          2: 4ivYTJwHbxlEFGw6yHQUPiIrnLk.roa (hash: c/5BSogehebsaJujE8GYhFFEuezzSIs2u3N/ALM/jkY=)
                          3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: 9rPKrE8EclMiQzdRbCfOobtapKZIW8MfSdG658Z9kBU=)
                          4: JFVsgFbYrjh5C77tg48FZqxd4J4.roa (hash: ff5cSciKjRToO8iXbplHVL2WQA8ta+cT3q72ycgeqdw=)
                          5: cFyLz0464YCDv1_wlpt751wWjv0.roa (hash: 6oL3kHvs8+fXiSDYlf2hI6gNwQZ8WHh03nzI53rd4Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:bb:3d:7e:2c:3d:22:c7:fe:70:47:3b:0c:2f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
        Validity
            Not Before: Jun  8 02:00:39 2025 GMT
            Not After : Jun  9 02:00:39 2025 GMT
        Subject: CN=0e6e6fa1407ba2b195386a3e0e5126becf0f0050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:b5:de:80:4b:ba:34:d8:4f:12:a6:ee:33:
                    b4:73:12:2e:ae:56:5e:60:83:bc:4f:0f:ec:53:90:
                    08:a7:94:e4:1d:ae:ad:fb:02:d1:47:ac:66:fb:2f:
                    3e:42:d8:6b:1f:55:f6:6d:99:00:1a:72:78:6c:07:
                    73:12:1e:67:0d:ed:f4:d9:78:ee:af:5f:89:f5:b9:
                    01:d2:be:07:b8:eb:e1:3d:51:c2:a9:b3:d0:d7:3c:
                    7f:d6:6f:78:ec:ce:93:63:f2:54:61:ff:de:38:39:
                    66:63:c2:03:16:4c:66:ab:97:d1:e0:97:b0:59:03:
                    71:8d:8f:30:06:23:ce:80:e6:1a:65:40:00:42:bc:
                    63:9a:20:25:2b:bf:84:be:de:82:c5:e2:a8:68:3f:
                    86:0e:28:c2:e8:82:1e:1a:a5:84:e0:ee:7d:c7:2d:
                    cd:d1:ff:40:fc:72:35:82:32:0e:55:cb:26:ec:6e:
                    8d:de:b4:3c:8a:0c:81:f0:79:85:a6:03:60:af:ce:
                    65:88:1c:0e:e4:02:6f:22:cc:b1:a2:83:e7:bd:36:
                    bb:b1:95:c2:f6:12:5f:9b:49:0a:04:6d:73:69:10:
                    34:e5:cc:79:da:bb:c5:b1:bc:8c:52:f7:45:0c:a6:
                    25:dd:98:90:6e:99:88:4e:27:c0:64:b9:04:06:89:
                    78:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6E:6F:A1:40:7B:A2:B1:95:38:6A:3E:0E:51:26:BE:CF:0F:00:50
            X509v3 Authority Key Identifier:
                keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f9:6b:d6:cc:f9:87:19:88:b7:74:d4:3a:6b:d9:17:31:e3:
         6b:fd:8b:71:10:3a:ea:90:a1:2b:48:c6:d6:7c:99:41:61:ad:
         4a:64:ff:07:c0:8d:2a:3a:47:61:6b:52:b0:08:ed:3f:72:43:
         b5:a8:ed:97:90:45:fa:3b:6c:ee:6b:ed:44:33:7c:b4:6d:23:
         08:ea:87:1d:b1:89:56:ec:22:56:d1:ac:7c:26:97:33:b0:c8:
         17:03:3f:ba:02:de:1a:6e:27:73:00:db:c1:ee:ab:df:4f:03:
         e2:06:a3:b2:04:bd:3c:35:36:05:ee:c5:95:a2:1c:43:73:12:
         7f:60:00:9d:50:d0:f7:b7:64:30:bb:2d:c0:42:3d:12:93:cd:
         67:0b:5d:3d:e4:46:5f:bf:02:bb:c1:09:aa:48:76:63:ba:b9:
         6f:71:d8:9b:88:25:ed:2a:03:4c:34:2a:f8:ef:70:b8:17:10:
         85:39:06:0b:50:46:58:69:25:61:23:88:5f:87:63:d8:fc:22:
         73:9c:1a:d4:18:68:0c:99:a7:3d:0a:10:0d:b6:c9:88:04:2d:
         15:cb:97:d0:10:26:2a:01:4b:77:be:4e:91:aa:11:fe:8a:c2:
         87:ef:a4:65:33:25:0e:70:7b:2e:df:74:9b:26:bb:1f:99:46:
         2f:3b:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:54 2025 by rpki-client