Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File:                     iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier:          +oOVnZPS6UgvepTMTUMk59iEUxkir3chdPOLf7ergqI=
Subject key identifier:   8B:9A:9A:7C:B4:2C:F6:A9:C7:BF:25:97:56:0C:58:92:87:A8:D7:78
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer:       /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial:       019E1E35DFC4C7B098BC611105D40180E02E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number:          083A
Signing time:             Tue 12 May 2026 22:01:47 +0000
Manifest this update:     Tue 12 May 2026 22:01:47 +0000
Manifest next update:     Wed 13 May 2026 22:01:47 +0000
Files and hashes:         1: gS3iiGFApTHDCIfFhx1EtF8qVC8.roa (hash: AM6jnqVpEm+WYY4ZOUaeap/f8QliHSoQXDrak2F6D9w=)
                          2: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: bM1a0m31NPV/1+0i7aWJjYC9wy7b9guKSzybTKKQe8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:df:c4:c7:b0:98:bc:61:11:05:d4:01:80:e0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
        Validity
            Not Before: May 12 22:01:47 2026 GMT
            Not After : May 13 22:01:47 2026 GMT
        Subject: CN=8b9a9a7cb42cf6a9c7bf2597560c589287a8d778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:f7:59:df:1e:a5:58:31:33:05:74:d0:80:
                    8f:de:75:e7:18:64:80:18:55:ac:6c:88:7d:31:58:
                    03:e9:2d:3b:45:9e:c4:31:38:1f:58:ff:9e:8e:09:
                    a0:d1:c0:8a:20:d9:61:21:2a:e9:d3:e4:06:7b:49:
                    45:ec:16:94:d6:e2:68:39:d7:a1:85:e1:24:c9:f9:
                    f8:3e:4a:81:fd:f6:ff:c7:4a:6a:f9:6f:c2:0e:ca:
                    f2:2d:94:90:62:e6:99:01:b9:7c:f2:f4:71:a4:9b:
                    28:bb:b4:a1:9a:98:e0:35:02:2a:f2:24:45:be:90:
                    3c:ab:c6:bf:d2:6a:01:9d:c4:cc:3e:a2:e8:11:a1:
                    82:66:0d:c2:35:47:b5:1e:0e:35:3b:31:ef:61:d6:
                    df:2c:7f:22:97:f7:b0:aa:ec:6e:53:b8:4c:10:3e:
                    ef:c6:c0:b6:f3:01:91:9a:a9:93:91:e7:71:c8:6d:
                    a9:75:9c:6f:4a:89:1c:02:c6:2f:ae:3d:ac:85:d1:
                    7f:f2:0f:12:07:4f:c0:e7:f3:55:97:4b:d7:1b:1d:
                    b0:ea:02:84:00:aa:62:8f:67:4a:ae:7e:d5:2b:c2:
                    68:8b:34:e1:68:b0:bb:4b:ea:6c:b8:0d:03:51:8b:
                    d7:37:dd:5a:84:3d:57:b3:33:bc:47:43:0a:16:38:
                    f0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9A:9A:7C:B4:2C:F6:A9:C7:BF:25:97:56:0C:58:92:87:A8:D7:78
            X509v3 Authority Key Identifier:
                keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5e:09:91:f4:9d:ae:48:0e:c2:a6:0a:a9:73:d7:dd:a6:74:
         ab:f7:0f:ec:d6:c6:12:d9:0e:3b:6e:05:1b:09:81:fe:c9:30:
         91:7f:03:6e:13:f7:27:cd:41:90:64:03:fc:ff:51:d8:29:26:
         50:74:98:e0:2e:fc:d5:0f:b0:eb:7a:25:e7:18:79:ab:f8:b0:
         1a:73:5a:ac:88:2a:f5:89:63:81:af:7e:95:48:d3:fa:95:c3:
         34:49:26:39:63:74:ed:83:98:8c:c3:33:da:e4:71:e5:07:87:
         ee:f7:48:7d:76:0c:dc:42:cd:d7:e8:b0:d2:e3:3b:41:b6:76:
         d0:8d:2d:91:2d:23:f5:de:02:e6:c4:06:9c:d8:27:d7:07:88:
         11:36:88:7b:e6:0b:6b:7b:c4:47:83:35:3c:8d:ee:a9:e3:21:
         19:68:ff:32:24:e1:58:67:83:26:1d:4d:6d:69:ea:ea:38:1e:
         80:1d:b3:66:a0:85:90:04:84:34:f1:68:1a:32:6b:6c:07:79:
         0d:de:94:7c:85:8a:ca:7f:70:8d:aa:d3:3c:00:72:29:18:94:
         4a:b2:d4:78:5b:f1:8c:ed:05:a1:97:85:a0:f5:48:df:3f:c8:
         b7:c1:cc:ee:a3:65:81:fd:cf:71:d9:79:ac:0f:fd:03:38:c4:
         62:fc:7c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:24:15 2026 by rpki-client