Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft
File:                     iljqUXnWZHGoIQxi_MhO8XvUvz0.mft (raw, json)
Hash identifier:          gvoTGnQ56jBgaDalRCZ1FLX3k2zd7yOCXwhKDvbR6is=
Subject key identifier:   2B:C7:6E:29:A5:D7:63:F2:21:5B:A9:1B:63:59:7A:75:99:F5:A9:F4
Authority key identifier: 8A:58:EA:51:79:D6:64:71:A8:21:0C:62:FC:C8:4E:F1:7B:D4:BF:3D
Certificate issuer:       /CN=8a58ea5179d66471a8210c62fcc84ef17bd4bf3d
Certificate serial:       019FF9486CA21BC264F9DFC0A4154156BA6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iljqUXnWZHGoIQxi_MhO8XvUvz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft
Manifest number:          C2
Signing time:             Thu 13 Aug 2026 04:01:40 +0000
Manifest this update:     Thu 13 Aug 2026 04:01:40 +0000
Manifest next update:     Fri 14 Aug 2026 04:01:40 +0000
Files and hashes:         1: iljqUXnWZHGoIQxi_MhO8XvUvz0.crl (hash: nhenywisskviHLFONjvx0SC/kr3jo5+Vi+XZmoP4Xew=)
                          2: mF1RS8LnLkXN8vWWTILBQMonH6U.asa (hash: RoNJP5GISKj19rEZAkT7j2xuvCAzO+US0l9wkh11poc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iljqUXnWZHGoIQxi_MhO8XvUvz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:48:6c:a2:1b:c2:64:f9:df:c0:a4:15:41:56:ba:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a58ea5179d66471a8210c62fcc84ef17bd4bf3d
        Validity
            Not Before: Aug 13 04:01:40 2026 GMT
            Not After : Aug 14 04:01:40 2026 GMT
        Subject: CN=2bc76e29a5d763f2215ba91b63597a7599f5a9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ea:4e:a7:cc:35:d4:7e:86:e2:61:6c:f1:00:
                    fb:19:d8:51:50:07:97:cb:53:4a:45:81:bd:ee:e1:
                    8b:eb:2f:dc:84:e9:b4:30:98:86:f2:27:a2:ff:e0:
                    fb:11:3d:f4:a2:13:ea:d6:b8:9c:e5:74:3c:48:3b:
                    a0:50:c9:3b:1e:a0:7d:d9:18:e6:b1:52:7c:26:d0:
                    b2:62:7e:10:b8:33:91:8f:f5:c5:ae:7f:2f:23:22:
                    69:85:69:28:20:fe:10:de:78:52:fc:f7:67:44:c6:
                    cb:fb:87:68:53:72:f9:d2:35:7b:36:3b:3e:68:0a:
                    c9:9e:9f:00:ba:23:53:62:83:d7:a5:b3:61:ee:e7:
                    51:9b:dd:4b:9e:8d:40:d5:4e:80:31:18:ab:93:37:
                    4f:69:bf:db:ad:48:bf:ad:ad:14:5f:3b:9b:33:02:
                    57:44:ce:3f:09:55:37:53:51:c0:e9:ab:cd:c9:05:
                    b6:a5:09:43:98:50:5b:15:7b:8b:f2:6b:41:15:10:
                    77:1b:df:7e:af:6c:9a:63:1d:ea:6e:c8:13:48:5f:
                    1a:b8:7f:da:1c:95:17:cd:bd:0f:0a:39:45:36:06:
                    21:21:ce:4e:34:b8:94:8e:31:43:15:96:3c:8f:d5:
                    cf:58:1a:39:af:14:52:ce:8e:b3:f4:87:18:c9:45:
                    3d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C7:6E:29:A5:D7:63:F2:21:5B:A9:1B:63:59:7A:75:99:F5:A9:F4
            X509v3 Authority Key Identifier:
                keyid:8A:58:EA:51:79:D6:64:71:A8:21:0C:62:FC:C8:4E:F1:7B:D4:BF:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iljqUXnWZHGoIQxi_MhO8XvUvz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:19:49:2c:75:24:9a:f0:88:d3:d9:88:0a:92:3e:e2:22:61:
         e2:d8:f4:59:34:bc:31:e5:bd:9d:1d:c5:9b:0a:fc:6c:ed:ff:
         5c:ce:23:a5:2c:75:ab:07:4b:5a:94:09:59:29:82:0e:1d:5f:
         10:8b:0c:04:52:c0:cf:cf:e6:a6:ac:d4:7c:4f:a0:a9:ba:0e:
         cf:33:fb:6f:36:c2:ad:a3:96:c4:20:f7:29:f2:9e:96:76:31:
         31:e7:46:0b:97:55:29:f6:84:e6:4b:26:b4:9b:24:10:49:f7:
         54:cf:88:f6:ea:61:0e:6d:01:44:16:80:a4:71:02:08:8a:f8:
         b7:ac:ee:4b:e2:d7:7a:7a:32:26:91:21:88:47:6e:a3:62:43:
         37:c6:aa:b8:c1:90:0e:57:ed:90:79:4f:55:70:7b:21:c8:51:
         e5:0d:52:9e:06:82:c4:f2:d8:a9:36:6b:49:66:df:ba:e4:83:
         03:76:1c:84:a5:c2:ad:e4:cb:9f:2f:e8:14:aa:f4:e3:b1:bf:
         1a:1c:d0:83:45:f1:77:84:80:43:c7:b0:79:24:a1:df:e1:4f:
         2a:73:a0:fc:db:f0:f0:b7:22:76:8e:72:7f:09:71:c2:f6:b3:
         7b:fa:e9:ed:53:1d:2f:fc:2c:5e:8f:e5:2a:e3:90:8d:fa:ee:
         9b:02:f8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:03:13 2026 by rpki-client