Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File:                     IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier:          HytKxFUIy5vcFL27Tk6MxBmfOtGMlkKgZeFJg3Q0PF0=
Subject key identifier:   FE:38:BD:6C:65:D4:3B:2C:01:8B:02:FE:F0:98:73:35:58:7C:E3:32
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer:       /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial:       019D12D8E81457304B04340FF2A014F6998F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number:          02E7
Signing time:             Sun 22 Mar 2026 00:01:38 +0000
Manifest this update:     Sun 22 Mar 2026 00:01:38 +0000
Manifest next update:     Mon 23 Mar 2026 00:01:38 +0000
Files and hashes:         1: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: v1UGM3p2oK6zum7CDKxF/i0cUwab9OsagtZnBQyXQns=)
                          2: VGZt16TaNbYhDiwnaWT7BIOvDLk.roa (hash: Y3ywHDxVVrMBlYasPLw8Fmqixb2KEFgEzqo4692NceY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:12:d8:e8:14:57:30:4b:04:34:0f:f2:a0:14:f6:99:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=225326a0b249d2109f5292961392495071d89c92
        Validity
            Not Before: Mar 22 00:01:38 2026 GMT
            Not After : Mar 23 00:01:38 2026 GMT
        Subject: CN=fe38bd6c65d43b2c018b02fef0987335587ce332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:68:a5:d7:d0:31:65:d6:16:4f:d3:de:b7:5d:
                    11:a5:35:6c:2e:ce:45:7f:1d:65:03:22:49:8b:be:
                    a3:96:d1:d2:35:ff:48:8c:e1:d4:21:f1:df:89:42:
                    d1:3f:3e:54:d5:7b:65:52:6d:84:f3:eb:ce:7d:e5:
                    bd:32:a8:76:1d:71:c0:70:25:0c:7e:17:71:70:30:
                    4f:65:54:29:12:93:6b:20:42:3b:2c:ed:7b:bd:9a:
                    3a:36:ba:40:36:11:c7:4f:3f:01:15:73:27:4e:41:
                    d6:cc:cd:77:3a:82:a2:bd:c2:0a:42:50:fe:4b:d0:
                    fe:ad:f1:92:dc:ca:7d:86:64:09:ff:ec:5e:06:46:
                    12:e1:80:74:d1:35:5e:78:9b:bf:57:f6:e9:22:61:
                    ef:b4:35:82:02:61:53:0e:b5:da:84:fc:49:21:1c:
                    50:3b:fe:3b:db:9f:c3:7a:cb:29:91:49:dd:88:de:
                    f8:da:9a:8f:ca:a1:56:8e:fd:d7:87:34:c4:f2:88:
                    13:e0:80:1f:16:55:15:9f:36:7e:fe:98:1b:66:ce:
                    54:d8:08:72:ef:1d:17:7c:87:eb:96:c7:2c:9a:34:
                    42:c4:a3:03:63:39:53:ed:0f:17:ad:85:0c:c2:56:
                    b5:6d:de:53:9a:5d:a0:db:3a:4c:d7:8f:e2:a6:22:
                    76:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:38:BD:6C:65:D4:3B:2C:01:8B:02:FE:F0:98:73:35:58:7C:E3:32
            X509v3 Authority Key Identifier:
                keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:62:74:4c:2f:d8:ab:b0:77:6e:79:f9:94:f9:a3:48:a2:67:
         ca:63:69:aa:8a:58:25:d4:3c:33:cb:fe:02:47:0a:66:5e:7c:
         ad:af:8a:ec:3c:c4:86:34:3c:55:ac:81:3e:80:a0:93:d1:2f:
         6f:f1:e0:ce:a8:e4:af:03:4e:30:10:5f:56:61:72:e8:d6:26:
         41:26:16:ce:e0:79:a5:a1:3e:2c:64:bb:e3:19:05:0a:00:f4:
         e7:73:14:87:b9:33:9b:18:03:65:8d:49:33:c8:69:ad:14:b8:
         00:c0:48:06:01:b1:11:8c:15:02:9b:da:53:b7:17:05:7f:24:
         6c:e6:6c:10:fa:40:5f:3b:87:e2:10:f9:59:0f:d3:cf:56:2e:
         8e:11:8f:ac:a7:e1:04:b6:62:6f:88:9b:17:8c:19:1b:09:81:
         6b:cf:ab:26:1d:5e:0e:18:f8:df:f6:1b:1c:d3:04:87:08:a2:
         dc:37:69:4d:df:d4:5c:08:aa:69:32:3e:4b:4e:d5:62:ed:67:
         00:fe:ae:3a:20:f4:59:0e:77:a6:7f:65:2c:f3:a6:f2:86:fc:
         f7:5b:5e:20:22:4e:d5:5c:4c:d7:36:1b:36:98:7e:72:1c:1b:
         04:a0:5d:ff:ef:fd:98:87:44:3a:16:fc:ca:37:b0:63:97:12:
         18:d4:e5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:37:24 2026 by rpki-client