Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File:                     Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier:          KpPe+CtQ3vt8DMkhED/UeCvXW3vcDReL/vYsY6BXU9g=
Subject key identifier:   36:C9:C6:98:C1:35:55:E1:9C:7E:55:19:48:8E:7B:5A:25:B5:B9:32
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer:       /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial:       01A08D57467F5C802FD5ECC1A956E0C4E61A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number:          191E
Signing time:             Thu 10 Sep 2026 22:01:42 +0000
Manifest this update:     Thu 10 Sep 2026 22:01:42 +0000
Manifest next update:     Fri 11 Sep 2026 22:01:42 +0000
Files and hashes:         1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: Bs76r7T4NV99K2VdSQFwsEl6GPrWv3ahHZH8Er/CTSs=)
                          2: gDJ4Lp76yXybVk_hOXjmjT2yA0Y.roa (hash: TNUN3ffkTS+jn16rGNGRBs19tZhvUdCtK4/zEyf8nb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:57:46:7f:5c:80:2f:d5:ec:c1:a9:56:e0:c4:e6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
        Validity
            Not Before: Sep 10 22:01:42 2026 GMT
            Not After : Sep 11 22:01:42 2026 GMT
        Subject: CN=36c9c698c13555e19c7e5519488e7b5a25b5b932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:db:50:fa:bc:38:a1:e8:51:31:a2:75:d9:f7:
                    05:d3:fb:6a:ee:9d:34:44:ba:0a:d1:8d:31:5b:a8:
                    3f:fa:b5:8c:9e:f5:e9:76:73:cf:78:30:7d:96:bd:
                    f7:6e:37:21:a0:a8:3e:49:ec:7a:4c:54:77:08:af:
                    0b:44:62:54:2a:4e:fe:bc:5c:33:d2:66:f1:79:5f:
                    a0:d7:44:53:af:63:26:b7:2e:06:06:90:bc:f7:d9:
                    9a:3d:e1:eb:e7:da:ab:c5:b5:00:89:c1:be:f4:67:
                    86:75:4c:18:01:56:a1:9f:d6:d0:97:34:45:65:09:
                    78:a8:bf:03:c9:58:18:c1:69:3c:c4:0d:03:ee:ca:
                    09:ff:dd:0f:55:e6:56:7a:5d:f3:96:ef:22:d9:1f:
                    7c:25:56:50:38:b5:65:8e:c6:eb:4e:95:d6:8a:d2:
                    03:35:06:b4:84:b8:80:45:5a:ab:b9:3a:b6:98:57:
                    da:69:54:08:4c:aa:5e:dc:dc:fc:06:bd:49:26:d0:
                    49:11:c2:6b:ce:f8:89:bd:4f:94:19:ba:65:26:ca:
                    9b:a8:25:50:43:08:96:65:30:07:13:1e:20:a0:ed:
                    ed:4b:53:51:ca:36:97:f8:b2:d0:b0:c7:4f:08:4d:
                    fa:7c:31:89:00:f1:de:49:09:a3:2b:8d:c4:f0:9c:
                    57:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C9:C6:98:C1:35:55:E1:9C:7E:55:19:48:8E:7B:5A:25:B5:B9:32
            X509v3 Authority Key Identifier:
                keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:12:69:95:8f:38:b0:3f:14:5e:1d:99:bc:f9:aa:5c:ba:bd:
         6e:5e:3d:17:8c:44:59:39:9a:62:91:06:7d:af:98:40:28:37:
         93:72:b0:31:6b:7d:ae:2c:ee:ad:20:91:53:e5:71:66:20:d5:
         5e:55:73:f1:fc:bb:71:c5:cf:ee:92:0b:7d:4e:1f:90:3f:4e:
         9f:1e:2c:20:28:20:0a:2a:bc:f0:4f:8b:c3:69:76:a1:fb:52:
         38:96:cc:1f:0f:da:47:3a:ba:66:4a:60:c8:d6:ac:90:14:b6:
         89:cd:24:75:64:84:38:f7:99:dc:fb:aa:74:19:6e:7a:4c:2a:
         2c:14:a6:4a:90:c4:00:b8:43:6c:c3:eb:e3:94:af:3d:8a:f6:
         6f:f5:99:90:5b:6e:06:41:3e:a0:33:53:d5:4e:eb:11:86:ce:
         bd:52:ce:32:34:df:76:67:6c:69:c7:44:1b:f9:20:19:e0:9f:
         d6:de:db:77:2a:f6:ef:ba:29:5b:11:b1:ed:37:4e:3e:bb:08:
         85:83:51:ff:d5:5f:f7:06:c8:83:7b:2c:ed:ca:f8:32:76:b7:
         c7:9d:75:53:1a:4d:1c:d6:1f:ed:57:86:bb:c8:9b:85:2b:d7:
         76:60:b1:af:fa:14:dc:c2:a5:e0:e4:ef:34:7b:32:ae:4e:37:
         d1:40:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:18:11 2026 by rpki-client