Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File:                     ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier:          naCrtGlVsLEebfg3uwpTlNaFcXf5XYPmSccgoBSIxy0=
Subject key identifier:   A8:94:CE:F9:D9:47:83:1C:36:D1:C5:A4:E9:55:CC:15:C1:F3:6F:D6
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer:       /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial:       019A29301FDA79E2C730386E1F8899EFDBEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number:          1702
Signing time:             Tue 28 Oct 2025 05:00:10 +0000
Manifest this update:     Tue 28 Oct 2025 05:00:10 +0000
Manifest next update:     Wed 29 Oct 2025 05:00:10 +0000
Files and hashes:         1: 2xSdynJrR2lrRXow3DheycMEzkg.roa (hash: nooA7vWCWimGNoVynR8X8CPFNFkK8X4dvNkM9491OGY=)
                          2: 4ivYTJwHbxlEFGw6yHQUPiIrnLk.roa (hash: c/5BSogehebsaJujE8GYhFFEuezzSIs2u3N/ALM/jkY=)
                          3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: tToM0/itNf/h8BVcfirtNq/nYbXs1J2zW6Ob0sjDnk4=)
                          4: JFVsgFbYrjh5C77tg48FZqxd4J4.roa (hash: ff5cSciKjRToO8iXbplHVL2WQA8ta+cT3q72ycgeqdw=)
                          5: cFyLz0464YCDv1_wlpt751wWjv0.roa (hash: 6oL3kHvs8+fXiSDYlf2hI6gNwQZ8WHh03nzI53rd4Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:29:30:1f:da:79:e2:c7:30:38:6e:1f:88:99:ef:db:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
        Validity
            Not Before: Oct 28 05:00:10 2025 GMT
            Not After : Oct 29 05:00:10 2025 GMT
        Subject: CN=a894cef9d947831c36d1c5a4e955cc15c1f36fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cb:d3:e3:cf:fa:f2:bf:39:21:2b:6c:28:66:
                    be:f6:93:6f:29:49:7c:c7:e0:12:e7:4c:16:7f:c1:
                    8a:78:fd:36:be:f8:86:60:64:0a:27:c3:c5:20:e5:
                    f8:08:48:86:d0:4b:c0:f1:7f:4a:a1:e0:81:e7:01:
                    9e:d7:d9:9c:7c:ee:bf:fd:dd:0c:51:d0:34:3a:a9:
                    3e:e2:b6:fd:0a:46:bc:b0:e3:96:a6:33:82:68:37:
                    a3:17:ec:45:70:fd:0c:73:f5:b4:23:23:fb:a7:d6:
                    01:6e:00:f2:83:7b:23:49:55:79:2a:a1:da:1f:31:
                    35:fe:e1:17:8f:91:53:ac:74:ba:ef:59:e4:27:a2:
                    0d:a8:b9:f0:b1:b0:5b:16:72:91:fd:6c:e9:40:44:
                    95:ff:b6:48:57:8f:b6:48:ab:57:b5:d3:25:74:5b:
                    d8:c9:ac:a7:0d:98:75:2d:71:2a:dc:0f:8f:5d:cb:
                    1d:8f:ba:fb:61:6b:7a:4b:21:ba:af:32:ff:cb:4b:
                    36:df:ce:83:41:21:38:53:6a:f2:f0:43:f2:cb:24:
                    7d:f0:97:fb:1b:40:d1:48:f4:39:70:9c:d1:55:b2:
                    4e:8b:c8:c1:aa:1b:c0:2e:6d:c4:2b:6c:27:bb:02:
                    0e:39:a0:58:28:9c:e7:cd:1b:f4:7c:73:64:77:b0:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:94:CE:F9:D9:47:83:1C:36:D1:C5:A4:E9:55:CC:15:C1:F3:6F:D6
            X509v3 Authority Key Identifier:
                keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:85:8e:46:9d:c6:d8:3b:22:6c:a1:42:34:45:e0:2e:9c:c3:
         46:b8:3a:69:40:c4:c0:6e:f7:ef:23:d9:4a:0a:cf:a2:d1:0e:
         0c:56:01:ea:df:54:31:3f:03:e3:04:2d:93:fd:80:9b:12:c9:
         77:cb:eb:e4:a0:18:1d:b4:e4:5d:c5:19:04:34:c5:93:e7:b9:
         c3:c1:a4:10:67:d6:8a:bb:73:4e:10:d0:04:17:c0:c9:8b:9f:
         cc:35:39:96:db:18:6a:4c:66:31:3f:59:89:b6:95:c1:3a:bb:
         53:29:1a:f7:5a:0c:89:37:2a:0e:1b:1f:88:49:ec:cc:63:9b:
         74:c4:f2:5c:cd:e5:dc:36:ae:11:f2:0e:41:cc:b9:63:9b:5e:
         aa:af:ae:42:8b:b4:21:d5:fe:8d:6b:65:59:9b:e6:d0:89:56:
         9c:19:db:41:62:19:ad:36:51:d3:ef:9c:37:c0:6e:51:44:2d:
         7e:92:a1:19:28:e2:dd:2f:b7:41:32:56:24:f9:cb:77:41:6a:
         45:42:dd:05:17:b8:5d:e4:fc:81:fb:f5:b5:4b:5e:71:8b:00:
         5e:40:fb:7d:c5:e6:ea:a8:b7:9e:db:5d:f5:b9:e3:3c:fb:77:
         ca:6f:a0:86:bb:d2:60:14:7d:61:3d:66:f0:52:7d:17:de:8b:
         4b:1d:47:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:34:43 2025 by rpki-client