Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File:                     IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier:          dPrfssMY2gUn+kVYSgB5jjOsKfB936m8J4wChzCeubI=
Subject key identifier:   EB:2B:D8:D4:C2:0D:48:1C:14:25:7F:6A:7A:70:57:8E:F4:44:78:2C
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer:       /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial:       019DFC853B45C3BBB491AA8986ED3E726DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number:          0360
Signing time:             Wed 06 May 2026 09:01:22 +0000
Manifest this update:     Wed 06 May 2026 09:01:22 +0000
Manifest next update:     Thu 07 May 2026 09:01:22 +0000
Files and hashes:         1: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: MxbzlI05SzUhYkxMGcbuD1/QzmkQ8pOQd8DCwEc1poI=)
                          2: VGZt16TaNbYhDiwnaWT7BIOvDLk.roa (hash: Y3ywHDxVVrMBlYasPLw8Fmqixb2KEFgEzqo4692NceY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fc:85:3b:45:c3:bb:b4:91:aa:89:86:ed:3e:72:6d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=225326a0b249d2109f5292961392495071d89c92
        Validity
            Not Before: May  6 09:01:22 2026 GMT
            Not After : May  7 09:01:22 2026 GMT
        Subject: CN=eb2bd8d4c20d481c14257f6a7a70578ef444782c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:a0:48:52:56:45:b2:cc:2d:f7:87:a3:ea:
                    44:0e:d5:e3:d5:d7:63:ea:8e:7d:1d:ce:93:51:aa:
                    13:cb:f5:e7:5b:ac:14:43:6f:86:63:ac:70:08:50:
                    63:b1:bd:d6:a5:22:bd:c9:89:01:b0:73:7c:56:23:
                    13:63:30:e1:5f:da:f5:d4:94:18:09:24:76:00:d3:
                    ba:32:9f:f4:3d:f1:89:c5:3a:cf:ba:5b:68:ab:c3:
                    fa:d6:c4:b9:b4:bd:1e:43:aa:b2:86:47:ad:89:42:
                    93:40:63:3a:6e:da:82:b6:66:ec:83:1f:e1:a0:fc:
                    0f:55:fa:08:82:91:62:a2:d1:21:b7:c3:17:7c:eb:
                    bf:9f:7d:0b:b2:08:fb:f0:20:1f:28:a1:17:21:82:
                    11:dd:9f:d7:06:7c:39:e3:06:b8:1f:19:7f:14:0e:
                    6f:f9:04:4b:46:fc:29:52:7c:d7:ee:92:79:8f:d5:
                    c4:a2:17:18:45:07:f3:19:0a:73:ee:a1:ec:d8:13:
                    ec:5e:a7:a4:af:02:5d:1f:a6:ac:f3:0c:b8:8b:4e:
                    1d:22:d0:6d:15:4d:63:0a:eb:b6:84:d3:9c:22:65:
                    b6:7f:f2:27:70:29:b0:a7:d6:60:44:62:2d:f4:13:
                    f4:22:f5:8a:f7:77:fa:df:f5:d3:94:ee:8d:02:be:
                    a6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2B:D8:D4:C2:0D:48:1C:14:25:7F:6A:7A:70:57:8E:F4:44:78:2C
            X509v3 Authority Key Identifier:
                keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:a2:02:91:04:c2:49:f5:3e:a3:db:52:c7:cb:8a:71:a2:76:
         c3:66:bd:ff:8f:4b:58:69:d0:7c:e6:4f:28:9e:d0:a9:f6:13:
         2f:57:17:b3:0a:52:6f:7a:5b:8d:bd:23:16:7d:e7:07:50:1d:
         e2:57:a5:fe:4c:73:34:0b:7a:15:ac:37:01:34:cc:df:6d:a5:
         84:95:66:5c:e5:dc:04:b1:c1:82:dc:be:25:2e:2d:24:bd:48:
         4c:e0:2a:d1:d7:d1:b8:c0:e9:62:56:0a:8e:f3:6e:61:8a:bb:
         a4:a6:28:23:32:9c:94:b7:f8:81:0e:9a:1d:95:90:b3:c7:51:
         61:94:3c:7d:91:8a:c7:59:51:ff:ac:db:19:0f:51:98:d5:7e:
         fb:2a:bd:bb:f8:37:46:24:2b:9d:99:70:85:db:b3:89:55:9a:
         8b:94:99:97:d3:73:5a:f8:20:44:82:bf:ee:eb:16:75:39:10:
         a4:a1:ec:fb:61:78:ab:1e:eb:c4:e6:1a:91:97:c4:9f:50:2e:
         ae:2b:45:6c:12:9c:10:2f:96:2e:e7:de:f0:dd:75:9e:1e:f5:
         03:68:9f:40:75:81:99:49:da:dd:73:e7:f6:ba:80:1b:8a:ae:
         fb:3c:96:48:e0:dc:d6:1a:25:79:96:f6:d4:b6:13:75:3b:b6:
         fb:fe:34:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 13:23:26 2026 by rpki-client