Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft
File:                     iLJuRMUJzzYPfLp8ijtRNABSrzE.mft (raw, json)
Hash identifier:          Al7s7mZJ1hUotP4SRRVKn1Ex2MuHb6cR9hE0UViejfQ=
Subject key identifier:   E6:2B:79:81:E8:8A:79:EE:71:4B:B6:0E:7F:57:D0:70:79:50:4E:96
Authority key identifier: 88:B2:6E:44:C5:09:CF:36:0F:7C:BA:7C:8A:3B:51:34:00:52:AF:31
Certificate issuer:       /CN=88b26e44c509cf360f7cba7c8a3b51340052af31
Certificate serial:       01A1607AD9B8550392CCB970AA191A42A6A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft
Manifest number:          0DA8
Signing time:             Wed 21 Oct 2026 22:00:26 +0000
Manifest this update:     Wed 21 Oct 2026 22:00:26 +0000
Manifest next update:     Thu 22 Oct 2026 22:00:26 +0000
Files and hashes:         1: iLJuRMUJzzYPfLp8ijtRNABSrzE.crl (hash: bji4UE8T4Zz/eGpaVS+8OSa0A2Mk8liUqaoFVdspuIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 22:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:60:7a:d9:b8:55:03:92:cc:b9:70:aa:19:1a:42:a6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b26e44c509cf360f7cba7c8a3b51340052af31
        Validity
            Not Before: Oct 21 22:00:26 2026 GMT
            Not After : Oct 22 22:00:26 2026 GMT
        Subject: CN=e62b7981e88a79ee714bb60e7f57d07079504e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:e5:99:94:f6:b8:2a:43:3b:1a:1d:93:a6:
                    c1:60:1c:3f:95:16:db:d2:74:57:52:5a:9e:13:41:
                    f6:7e:71:ba:86:cf:58:05:8c:c1:c3:76:7a:70:b9:
                    a7:a9:ec:ca:ec:45:56:6c:29:8d:b2:e1:bf:92:a2:
                    cb:cb:b1:cc:5b:4f:98:b0:79:bc:91:10:13:58:67:
                    09:e0:ba:8a:73:c2:e7:de:cc:b2:5a:8b:f4:24:59:
                    5d:fc:2b:38:53:77:44:e4:ba:c5:67:e3:dc:85:78:
                    72:42:0a:40:cf:bd:8a:56:d6:5d:67:16:7b:27:63:
                    2a:0d:1d:97:14:01:b3:2f:b2:e5:86:b5:fb:c0:7e:
                    29:7f:92:d3:db:e4:8b:cd:0d:11:76:cc:4c:21:85:
                    64:2b:a9:47:35:64:9d:4d:79:7c:96:6f:ab:23:ec:
                    60:dd:d9:51:65:07:94:f2:11:dc:1e:53:99:ee:eb:
                    5c:ef:5b:62:25:94:d2:c9:41:ac:76:2d:88:6b:d7:
                    a7:ac:2d:dc:89:bd:61:6f:83:fd:e0:bd:c4:1a:66:
                    1d:a2:e8:48:cd:c3:00:43:fc:93:97:ec:24:82:af:
                    b4:a8:98:8b:4a:fc:28:e2:c5:76:50:75:da:e7:75:
                    33:cb:3e:c7:7a:5c:64:26:9c:cf:a5:20:1f:dc:3e:
                    37:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2B:79:81:E8:8A:79:EE:71:4B:B6:0E:7F:57:D0:70:79:50:4E:96
            X509v3 Authority Key Identifier:
                keyid:88:B2:6E:44:C5:09:CF:36:0F:7C:BA:7C:8A:3B:51:34:00:52:AF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:5b:eb:5b:c2:42:b1:43:9f:7d:7f:fc:ae:c1:91:20:16:b5:
         8a:c0:70:7c:ff:3a:71:45:0f:e0:f7:ba:b3:a5:45:69:a4:8c:
         89:8a:fb:38:66:12:e7:b3:bd:e5:80:74:b6:d9:7f:70:eb:03:
         bc:3d:2f:48:52:d4:2e:fa:1d:3a:3d:1c:b9:98:17:78:b4:16:
         5a:98:c1:2a:62:1e:bb:e7:78:8f:03:22:dd:68:09:07:ed:c5:
         d9:63:a9:aa:39:2e:1b:1d:da:18:d1:72:f6:bf:fc:72:9c:05:
         bb:ca:36:c0:01:30:be:3f:30:81:43:c8:4e:74:0f:92:0a:28:
         53:63:e4:eb:f3:ae:48:68:11:6c:45:16:ec:1f:3b:a4:f3:54:
         54:ac:25:ed:09:64:61:40:92:62:04:2a:4d:76:4c:7b:1b:83:
         b8:b1:2f:e6:7f:e7:7e:e1:c6:95:5f:11:a5:d5:88:ca:fc:89:
         b5:b0:a6:bd:68:b3:96:c5:0d:55:e9:cf:24:fd:16:cd:1e:45:
         3c:a3:e9:4a:34:17:0a:f9:5a:e7:53:91:8a:75:78:c5:7f:f5:
         f9:58:d6:12:b4:89:51:30:2b:80:dc:ff:f3:67:93:4e:e2:75:
         2b:7c:f7:13:25:9f:3e:f1:c8:df:ef:92:3f:6c:16:fa:00:80:
         a9:79:16:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:59:25 2026 by rpki-client