Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File:                     IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier:          YtIQ1eUuDcHCYLjYUQFwe9YI7E2M6BVN0trWE7GuADA=
Subject key identifier:   40:C1:D1:F3:0E:97:88:41:6F:DE:B5:6A:55:CE:DE:01:10:06:B7:39
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer:       /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial:       019EE82062E669C54905B49CF47AEFF11B0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number:          03DA
Signing time:             Sun 21 Jun 2026 03:01:37 +0000
Manifest this update:     Sun 21 Jun 2026 03:01:37 +0000
Manifest next update:     Mon 22 Jun 2026 03:01:37 +0000
Files and hashes:         1: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: R9jbyRZqjwhmaFOAowcCQPCuV09OLgQ0eNpAJNAfLE0=)
                          2: VGZt16TaNbYhDiwnaWT7BIOvDLk.roa (hash: Y3ywHDxVVrMBlYasPLw8Fmqixb2KEFgEzqo4692NceY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 21:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:20:62:e6:69:c5:49:05:b4:9c:f4:7a:ef:f1:1b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=225326a0b249d2109f5292961392495071d89c92
        Validity
            Not Before: Jun 21 03:01:37 2026 GMT
            Not After : Jun 22 03:01:37 2026 GMT
        Subject: CN=40c1d1f30e9788416fdeb56a55cede011006b739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:5e:b0:d5:49:b8:d5:74:ff:4c:40:cb:fa:
                    6b:ff:64:21:b6:e5:fd:16:a8:be:51:18:0c:0a:cd:
                    a1:7b:84:e1:b4:a0:79:53:db:1c:0a:40:d4:46:8e:
                    ed:24:95:9e:31:e1:05:94:8a:d8:e2:b1:c9:91:22:
                    f4:8f:ca:31:59:8b:53:a4:42:13:9a:c2:e1:7e:5b:
                    d3:94:50:6b:7b:1f:d4:db:23:4f:c9:a4:77:0a:43:
                    a1:c4:51:9d:1a:42:50:c9:8d:ab:79:b3:23:86:9d:
                    3c:57:05:ce:1f:07:15:2b:27:1c:87:7e:16:fe:99:
                    2e:ef:4b:4f:35:a2:04:a9:bf:6f:50:76:bd:0a:93:
                    41:3e:3e:49:3c:a3:d8:b1:6d:fc:f1:ad:1d:02:66:
                    8f:9b:99:6c:36:06:35:c3:35:43:16:4f:79:1d:c6:
                    82:02:84:d1:50:65:56:34:3d:9e:42:a5:fc:b8:ed:
                    d9:d9:cf:a5:40:17:08:8b:b0:71:15:4e:e5:bb:b6:
                    26:a0:88:09:3d:71:af:c1:3d:f6:75:ff:00:d0:01:
                    89:ce:bc:95:63:8b:af:eb:8e:52:13:cf:17:99:30:
                    e8:70:d9:bf:0b:db:04:ef:86:dd:51:28:99:c9:22:
                    f9:bf:53:2d:24:4b:c3:60:6e:e4:32:3a:a7:f1:fd:
                    68:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C1:D1:F3:0E:97:88:41:6F:DE:B5:6A:55:CE:DE:01:10:06:B7:39
            X509v3 Authority Key Identifier:
                keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:90:2e:1d:06:bb:0c:ae:96:64:ed:1c:c9:57:08:e6:8c:17:
         c6:e1:fd:6b:4f:c3:1b:c4:03:5d:59:a0:07:a2:db:a2:35:d1:
         42:73:d9:59:82:4d:3e:8a:a4:00:1a:37:2d:95:d7:ab:91:fa:
         5e:72:4e:6f:94:ab:9d:36:69:61:e8:25:f9:7f:48:e0:76:00:
         1b:1b:d8:63:4e:e8:54:e2:38:96:de:17:46:f5:a0:9c:ef:6e:
         39:a5:39:32:12:c7:55:3c:e7:4c:26:bd:fd:5c:ee:a8:f8:d5:
         d6:9b:68:20:02:2d:05:98:e8:b0:eb:43:91:2f:53:c0:02:c8:
         98:1e:c9:11:9d:13:c2:02:6e:63:69:7f:9e:08:d6:e9:e7:69:
         93:3b:79:d6:e2:e9:34:a6:86:34:30:ac:f1:51:28:76:c1:f9:
         5c:4b:70:9a:63:17:44:32:24:2d:a7:ea:b6:d3:e5:c8:24:bf:
         90:ab:fd:35:6d:7e:54:3b:c1:5f:a1:e6:93:50:5b:16:52:7e:
         32:85:79:84:a7:0f:40:45:56:e2:6d:d9:8a:0e:f1:4e:79:0b:
         f9:5f:12:92:fb:fb:20:70:ed:e3:0c:ab:b3:a7:92:c8:b3:df:
         22:18:b9:91:ca:49:ac:83:0b:7e:4d:d7:d3:4e:c9:4a:53:a3:
         b4:7c:dc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 07:02:05 2026 by rpki-client