Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
File:                     ilUt2GldSD1Hzkz4RbkGsXUnalw.mft (raw, json)
Hash identifier:          uX8nrx9C5bYeGEZgaK4Yl6XM+ZjiYv2u6zlYHiEZEoo=
Subject key identifier:   51:AB:80:F7:A4:B7:5C:D6:32:AB:5D:53:CB:B7:CE:1A:59:9A:79:58
Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
Certificate issuer:       /CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Certificate serial:       019F85684E618CD092981AE3A1F889F6E49A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
Manifest number:          035C
Signing time:             Tue 21 Jul 2026 16:00:33 +0000
Manifest this update:     Tue 21 Jul 2026 16:00:33 +0000
Manifest next update:     Wed 22 Jul 2026 16:00:33 +0000
Files and hashes:         1: 3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa (hash: Sh3IYzZ1zQ9r12wJte75WaIR+93O150+ToROD8zLC3s=)
                          2: ilUt2GldSD1Hzkz4RbkGsXUnalw.crl (hash: f0WQ4d5srfs6wKRIioVBJ1YFjgz98KMtzmGU/HP/NlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:68:4e:61:8c:d0:92:98:1a:e3:a1:f8:89:f6:e4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c
        Validity
            Not Before: Jul 21 16:00:33 2026 GMT
            Not After : Jul 22 16:00:33 2026 GMT
        Subject: CN=51ab80f7a4b75cd632ab5d53cbb7ce1a599a7958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:62:1b:dc:6b:29:ad:4f:65:df:80:97:6f:5f:
                    c7:4d:50:de:cc:74:a3:bd:9b:27:fd:ed:35:61:de:
                    8e:9d:5b:e0:10:2f:5e:2f:c7:ce:ed:07:9e:4b:81:
                    57:b4:14:91:9b:25:6c:52:5b:7e:1e:ae:83:ee:71:
                    af:eb:63:7b:31:c2:95:c7:1c:20:c6:75:ea:51:40:
                    e6:1f:b6:6c:d9:e6:69:61:a9:ac:b1:e8:3e:8e:bb:
                    c5:ed:5c:48:b9:d6:26:5d:93:a1:8a:be:b0:ff:ed:
                    7a:c0:d5:2b:b0:df:59:db:85:2f:65:68:9d:76:61:
                    81:cd:49:cd:69:c6:c5:7f:68:f7:7e:7d:a3:63:bf:
                    27:ea:9b:b7:a5:73:56:66:3a:13:0c:0d:f3:1e:61:
                    67:5d:2f:cb:be:26:49:a5:d8:e2:30:a5:61:b7:79:
                    92:57:15:4c:35:b7:18:17:7e:27:f6:e8:0f:13:29:
                    bb:0a:8c:87:ad:ca:31:12:48:a1:42:59:20:a7:91:
                    39:c7:0f:a3:69:09:99:bc:59:e7:1f:48:79:d0:24:
                    b7:1d:aa:24:b5:d3:e1:a4:80:5a:22:07:c1:cd:49:
                    c5:3f:cc:0d:fb:f5:99:d4:a2:1d:b8:30:33:fe:4c:
                    2d:d3:87:ad:6d:12:fc:34:bf:c9:18:44:c6:08:b2:
                    6b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AB:80:F7:A4:B7:5C:D6:32:AB:5D:53:CB:B7:CE:1A:59:9A:79:58
            X509v3 Authority Key Identifier:
                keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1d:7b:b8:16:bf:1c:dd:02:53:9d:79:e6:e7:ab:42:18:44:
         5f:23:6e:39:fd:6c:a1:c5:cc:0c:2f:ba:c4:0b:31:51:03:d9:
         3f:40:e3:cc:1e:da:10:f7:8c:9f:58:81:86:31:88:4d:33:e0:
         e2:06:32:f1:b3:bc:6f:da:bc:40:55:8a:4e:fa:ea:56:56:92:
         4d:4e:1e:94:d3:c3:7a:fc:1b:b7:4f:e6:7d:ab:41:41:e0:bd:
         27:bc:7a:b6:8b:9e:ed:47:1e:d7:a8:8a:58:3c:2e:39:18:1a:
         e8:a9:60:68:cf:1a:b7:9a:d4:9f:50:fe:32:67:89:b0:ad:15:
         63:7e:90:8f:2a:8d:f2:44:26:a1:71:05:4f:9d:ca:c6:73:f6:
         db:ce:4d:77:42:a0:17:3e:83:83:51:35:76:32:7a:de:4a:6a:
         ce:8f:2d:7e:5f:2e:a1:27:0f:ea:d5:c9:ca:17:cf:a3:89:63:
         b1:e5:7a:be:b1:bb:9f:a2:cd:e1:6f:57:14:d2:8a:23:61:25:
         5e:87:be:5e:f6:0e:59:11:e8:4e:81:7f:ea:9b:29:3d:5f:20:
         3d:69:d2:0a:8d:e2:58:97:d7:fd:9b:84:c4:b9:a4:34:d6:ce:
         1e:45:a4:f3:0e:38:a0:a0:b2:9d:38:4c:49:3d:f6:e4:5b:77:
         8c:1e:c0:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FaE5hjNCSmBrjofiJ9uSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNTUyZGQ4Njk1ZDQ4M2Q0N2NlNGNmODQ1YjkwNmIxNzUy
NzZhNWMwHhcNMjYwNzIxMTYwMDMzWhcNMjYwNzIyMTYwMDMzWjAzMTEwLwYDVQQD
Eyg1MWFiODBmN2E0Yjc1Y2Q2MzJhYjVkNTNjYmI3Y2UxYTU5OWE3OTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9mIb3GsprU9l34CXb1/HTVDezHSj
vZsn/e01Yd6OnVvgEC9eL8fO7QeeS4FXtBSRmyVsUlt+Hq6D7nGv62N7McKVxxwg
xnXqUUDmH7Zs2eZpYamsseg+jrvF7VxIudYmXZOhir6w/+16wNUrsN9Z24UvZWid
dmGBzUnNacbFf2j3fn2jY78n6pu3pXNWZjoTDA3zHmFnXS/LviZJpdjiMKVht3mS
VxVMNbcYF34n9ugPEym7CoyHrcoxEkihQlkgp5E5xw+jaQmZvFnnH0h50CS3Haok
tdPhpIBaIgfBzUnFP8wN+/WZ1KIduDAz/kwt04etbRL8NL/JGETGCLJrGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGrgPekt1zWMqtdU8u3zhpZmnlYMB8GA1UdIwQY
MBaAFIpVLdhpXUg9R85M+EW5BrF1J2pcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxVdDJHbGRTRDFIemt6NFJia0dzWFVuYWx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MjA2MjEtOThiOS00OTYxLWEyMzAt
MjliM2YwMjcyYjlmLzEvaWxVdDJHbGRTRDFIemt6NFJia0dzWFVuYWx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80MjA2MjEtOThiOS00OTYxLWEyMzAtMjliM2YwMjcyYjlm
LzEvaWxVdDJHbGRTRDFIemt6NFJia0dzWFVuYWx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJB17uBa/
HN0CU5155uerQhhEXyNuOf1socXMDC+6xAsxUQPZP0DjzB7aEPeMn1iBhjGITTPg
4gYy8bO8b9q8QFWKTvrqVlaSTU4elNPDevwbt0/mfatBQeC9J7x6toue7Uce16iK
WDwuORga6KlgaM8at5rUn1D+MmeJsK0VY36QjyqN8kQmoXEFT53KxnP2285Nd0Kg
Fz6Dg1E1djJ63kpqzo8tfl8uoScP6tXJyhfPo4ljseV6vrG7n6LN4W9XFNKKI2El
Xoe+XvYOWRHoToF/6pspPV8gPWnSCo3iWJfX/ZuExLmkNNbOHkWk8w44oKCynThM
ST325Ft3jB7Aeg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:28:13 2026 by rpki-client