Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File:                     IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier:          UuYXY3WSBj1qqBY4T1E9JoTOXv0BMZtfVG5DGWwGRQc=
Subject key identifier:   0E:F2:B5:75:23:42:49:5C:71:A6:A2:90:D3:5F:1E:C2:70:A0:16:B3
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer:       /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial:       019FD1CD1E431831EC8591D4BBC7DF88EF64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number:          0453
Signing time:             Wed 05 Aug 2026 12:01:48 +0000
Manifest this update:     Wed 05 Aug 2026 12:01:48 +0000
Manifest next update:     Thu 06 Aug 2026 12:01:48 +0000
Files and hashes:         1: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: SH/PviTgUN0aZeHm1+cqhVyQIJCMXEfxmH1MrFxNi34=)
                          2: VGZt16TaNbYhDiwnaWT7BIOvDLk.roa (hash: Y3ywHDxVVrMBlYasPLw8Fmqixb2KEFgEzqo4692NceY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 12:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d1:cd:1e:43:18:31:ec:85:91:d4:bb:c7:df:88:ef:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=225326a0b249d2109f5292961392495071d89c92
        Validity
            Not Before: Aug  5 12:01:48 2026 GMT
            Not After : Aug  6 12:01:48 2026 GMT
        Subject: CN=0ef2b5752342495c71a6a290d35f1ec270a016b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1f:43:65:fa:bf:ba:c0:37:2e:8d:ed:f1:e5:
                    be:83:17:e0:f7:7f:a5:64:56:63:f0:79:d8:84:b1:
                    6f:ee:40:60:5d:0f:8c:fd:1d:4c:01:55:db:32:ca:
                    3a:a4:f7:24:6a:23:2e:64:81:c2:45:8c:7f:f1:1f:
                    e2:cb:d6:fe:ce:6a:19:57:28:3e:c1:31:af:a2:e5:
                    82:62:73:67:83:6d:f0:af:60:c1:f0:36:ac:83:c0:
                    61:39:20:ef:24:00:20:6b:85:c6:a1:50:c0:62:e3:
                    0d:cb:70:c0:5c:e9:0e:22:ad:67:3b:ce:5a:ca:14:
                    94:54:70:53:fc:14:9a:34:63:42:df:b0:1b:8c:c7:
                    1c:56:68:fe:ea:99:f0:e3:f1:94:c9:45:1c:36:d5:
                    03:55:03:50:f3:5c:33:24:74:25:fe:d5:da:d1:44:
                    1a:02:01:6d:05:96:94:22:67:09:32:be:34:0a:65:
                    86:b5:4b:b3:06:d4:a0:c9:b1:d0:89:fc:25:b1:c2:
                    a9:76:ad:fe:ad:31:e3:66:3c:27:1c:42:e0:37:d9:
                    4b:a1:1e:34:72:8d:33:04:fd:3f:da:9c:f2:30:b9:
                    95:70:36:70:84:1b:53:2a:c2:2e:ec:02:ec:44:c2:
                    97:e4:c4:de:48:6a:bd:e0:5d:4e:1f:23:ab:4b:f8:
                    22:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F2:B5:75:23:42:49:5C:71:A6:A2:90:D3:5F:1E:C2:70:A0:16:B3
            X509v3 Authority Key Identifier:
                keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:7c:43:d7:74:c7:5b:3a:5f:22:5b:f3:53:a4:66:08:41:86:
         c5:06:80:eb:0f:ad:8a:16:68:f5:be:d3:b2:01:f3:d8:f1:84:
         3e:f5:ee:87:7d:4c:24:cf:6c:5a:7e:06:d5:ea:09:e2:12:06:
         df:25:43:80:3e:8d:19:f0:b3:aa:91:74:5f:70:c2:4a:8e:fa:
         d3:0a:33:4b:72:77:42:2c:b1:bb:b8:b5:da:46:a5:76:6e:1f:
         61:07:6c:25:c7:91:d6:44:18:17:56:7d:97:cb:f8:ee:78:6e:
         1d:3c:60:c4:f3:48:54:91:f3:83:1f:0d:11:26:26:be:f4:5b:
         e2:a8:84:99:54:8b:fd:8a:3d:42:cd:24:44:cf:8b:b5:41:c4:
         56:da:06:d3:c8:27:ba:7e:9a:d5:69:86:82:4f:d2:ca:68:50:
         fe:b0:82:50:ad:d0:24:d6:9e:8b:e4:05:23:3a:5a:5e:0b:20:
         b1:19:f6:6f:16:c9:1a:88:e1:fa:7b:0b:10:cc:f1:90:b8:c3:
         e6:13:58:59:ce:df:40:69:bb:d7:37:3d:2e:25:f8:2a:72:9f:
         9c:04:4d:65:3a:eb:3b:a2:b6:ea:e5:bd:ad:4a:73:29:96:3c:
         92:6c:8a:0c:f7:1d:2a:58:25:a8:0d:63:78:c3:76:ea:48:f8:
         96:da:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 18:57:37 2026 by rpki-client