Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File:                     iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier:          fb9E9Vdgwgc/mycboeae3SX6/NKbXBTFLr2z0nC4AeU=
Subject key identifier:   8D:73:42:1D:D4:AB:0D:AD:0A:C7:29:B3:7F:A4:D6:50:4F:AC:82:12
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer:       /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial:       019E9B173A2F7FEABC168561EFFC69AF2687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number:          0B35
Signing time:             Sat 06 Jun 2026 04:00:51 +0000
Manifest this update:     Sat 06 Jun 2026 04:00:51 +0000
Manifest next update:     Sun 07 Jun 2026 04:00:51 +0000
Files and hashes:         1: Sij9IlfqNvLqsGMh1vte9HHCsJE.roa (hash: ++kaPggqzwnpUTH7+GWX7uPn6wV3SaYRJ1kpXxDIl20=)
                          2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: Fl2g+zrocTI1zZ/nCxgdcstH7LXyCJtsT+6vCjd6FPE=)
                          3: rbEZUX-V_RUbO-B__2tBNPZPi20.roa (hash: 5orvEtrKwewCyoQkeWjKimsM7zmwihlBeVeYKcs/1tM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:17:3a:2f:7f:ea:bc:16:85:61:ef:fc:69:af:26:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
        Validity
            Not Before: Jun  6 04:00:51 2026 GMT
            Not After : Jun  7 04:00:51 2026 GMT
        Subject: CN=8d73421dd4ab0dad0ac729b37fa4d6504fac8212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b8:7a:54:1a:32:1b:94:50:79:56:44:27:91:
                    94:54:35:7e:80:a2:86:2d:a5:b3:04:98:92:47:7b:
                    7a:c4:88:4d:09:ab:d0:6f:5a:4f:69:44:0b:bc:0f:
                    09:6d:56:0c:29:dc:9b:6c:c0:ab:5f:f3:db:14:b8:
                    67:53:e6:7d:ee:fe:b6:27:5f:51:68:0e:40:bf:be:
                    8f:70:3d:1b:1f:87:57:26:68:29:0e:e3:f8:04:e7:
                    fd:53:39:b2:80:94:11:ba:37:82:0d:0b:e0:06:1a:
                    c4:54:05:ae:db:5e:fd:cb:b8:54:fc:be:3d:7c:ad:
                    be:1b:6d:d2:89:20:f5:1f:fe:35:ad:5e:46:e6:4b:
                    97:53:60:55:43:76:c1:fc:a0:9f:cb:89:1b:21:58:
                    5b:0e:9c:13:6c:08:19:e6:f3:c7:3c:0d:fc:bc:09:
                    a8:1e:3e:9e:61:9c:35:15:93:35:d5:e9:03:95:d2:
                    f2:f7:8d:13:0a:c7:8a:4f:3e:e4:1f:a6:0c:98:ad:
                    f3:c7:dd:aa:fd:ec:16:40:6f:b0:3b:1d:2b:dc:4f:
                    b2:6b:9b:94:68:63:c5:09:f6:2e:5b:33:8f:2b:8f:
                    fc:ba:e8:74:2a:d4:ae:c1:54:b3:a9:b9:ad:b9:c7:
                    a4:26:46:b1:96:a5:d1:43:f5:74:28:28:ce:f8:ba:
                    de:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:73:42:1D:D4:AB:0D:AD:0A:C7:29:B3:7F:A4:D6:50:4F:AC:82:12
            X509v3 Authority Key Identifier:
                keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:90:f1:aa:a3:f2:90:f3:e5:28:b2:ca:f9:83:25:ff:53:bb:
         55:b6:c9:99:cd:e8:7a:fb:9c:68:35:00:4c:db:b0:44:7f:01:
         82:5e:9d:08:e2:83:81:26:ab:14:e9:19:20:44:5a:db:27:f1:
         19:33:7d:6d:f0:ac:d8:0d:5d:2c:20:75:4c:8a:40:7d:4b:bb:
         51:5e:44:55:e4:51:44:62:10:fd:4d:75:18:d1:92:ee:6c:72:
         48:ba:07:fd:77:54:1c:5f:32:39:08:87:64:af:12:c5:a4:fa:
         b0:12:a8:1e:89:88:c6:41:32:ba:ff:d7:80:15:a6:fc:71:85:
         8e:48:72:6e:4e:45:bb:85:db:23:6e:d1:a7:08:54:4f:87:8c:
         54:9a:27:41:7e:f0:33:21:1d:20:bf:fa:2c:c0:44:7a:d6:db:
         92:7f:9f:e9:11:59:09:4c:71:bc:22:9d:8a:2c:ed:8d:57:14:
         cf:43:27:3b:3b:ce:a4:5e:42:40:28:2f:36:17:29:3d:db:67:
         c6:60:5a:1b:25:f9:ae:ff:cc:08:3f:92:c2:a6:87:64:e0:98:
         d7:18:80:89:e6:a8:47:08:46:99:40:4e:ff:14:c6:19:14:48:
         b1:28:26:c6:7d:2c:7f:fb:24:94:71:d4:8c:38:6b:57:b1:cc:
         cf:3e:01:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:24:22 2026 by rpki-client