Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File:                     iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier:          4ILWk5Lt7aV+lePNibjRz+GfI9uCi5hYRTM577YZR2c=
Subject key identifier:   02:C7:75:F1:69:36:9E:96:3F:A6:B5:0A:AE:56:75:B6:BE:48:6C:D5
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer:       /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial:       01A0CF6CE0E7D8799E7F4401508E4DE3EA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number:          099F
Signing time:             Wed 23 Sep 2026 18:00:14 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:14 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:14 +0000
Files and hashes:         1: NDzhVbz3oeZ11q9_LylV2ZPngdM.asa (hash: DgFN6Xf/HdcvFRuAAAFfHYivxEVG4xC2XmK5Ds7rm28=)
                          2: gS3iiGFApTHDCIfFhx1EtF8qVC8.roa (hash: AM6jnqVpEm+WYY4ZOUaeap/f8QliHSoQXDrak2F6D9w=)
                          3: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: h03ElDOX9bp1pZ0+a0NG/UXgkGCrLTcyZVYx1mlf8+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6c:e0:e7:d8:79:9e:7f:44:01:50:8e:4d:e3:ea:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
        Validity
            Not Before: Sep 23 18:00:14 2026 GMT
            Not After : Sep 24 18:00:14 2026 GMT
        Subject: CN=02c775f169369e963fa6b50aae5675b6be486cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:23:b9:32:bd:83:7b:52:2b:ec:25:ee:5f:a3:
                    ab:5f:eb:c6:ec:c2:68:bb:42:4d:b8:1e:a7:49:3c:
                    3e:31:48:89:83:80:b1:01:e2:d7:4f:76:e6:c8:a3:
                    05:d1:f3:f6:5c:f3:e6:54:56:a4:b5:06:38:7f:ea:
                    1e:c3:ee:c4:1c:13:ae:18:3f:e1:2f:87:2c:0f:74:
                    45:5d:9c:84:db:5b:29:fb:1b:53:ed:23:bc:67:ac:
                    98:75:9c:b7:8d:b1:33:3f:ce:de:fa:2f:81:4d:0d:
                    a4:e7:b4:31:7c:7a:de:2a:e6:45:38:19:fb:76:97:
                    06:c0:87:ce:e7:fa:6d:bb:6b:12:b2:f5:4b:9d:9f:
                    b8:c9:7e:93:5b:7f:91:6d:66:e0:ae:6a:2d:61:90:
                    a7:23:43:6b:3e:c0:79:70:9d:ff:e2:97:cf:11:62:
                    3f:99:04:27:5b:b4:36:61:0a:67:f5:89:01:74:1b:
                    7d:b9:c7:57:5b:64:ae:72:50:8a:d8:17:4e:38:5e:
                    d5:b1:49:ac:81:43:f9:48:9a:23:ec:ef:4d:03:10:
                    2f:32:24:dd:cb:f7:fe:e9:81:28:10:5c:5a:2b:6f:
                    82:94:f6:71:79:99:44:27:69:64:7d:ca:47:ef:49:
                    d1:f4:7f:6e:a5:b2:e0:21:f7:40:e4:6d:53:81:6d:
                    e3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C7:75:F1:69:36:9E:96:3F:A6:B5:0A:AE:56:75:B6:BE:48:6C:D5
            X509v3 Authority Key Identifier:
                keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:81:4c:d1:89:94:1a:e5:e2:8c:27:4d:db:a5:a5:31:ba:f5:
         02:e9:af:22:7d:c7:d3:57:71:11:9d:22:7c:de:fe:3d:5d:c0:
         a2:fd:60:da:c1:39:ed:c5:2c:6e:33:fa:27:d1:d3:69:bf:96:
         2f:3e:56:33:ef:9f:cf:63:e7:f9:b0:fa:37:c9:d8:98:43:3e:
         b0:89:3b:1a:1d:9b:b5:39:a8:64:4c:45:80:4c:46:64:8c:90:
         49:b4:cc:8a:13:d9:ec:d3:97:76:03:c6:d4:54:8b:b7:5c:33:
         57:83:6d:8a:15:29:95:e3:ad:fb:70:23:b6:8d:97:fa:c3:73:
         05:85:f4:54:45:03:ac:b5:fd:4f:7e:d9:24:92:ac:ed:66:a0:
         09:2a:e0:0d:2a:75:99:59:79:20:cb:59:f6:56:92:31:67:17:
         a2:7f:66:c0:9a:19:5f:1d:1e:26:5c:25:46:7c:d8:3b:94:f3:
         bb:1e:eb:81:c5:fb:d7:62:d1:15:59:4c:0e:1d:2b:0c:78:01:
         62:62:6f:d5:28:62:57:2e:b6:1a:2c:aa:38:a1:ce:cd:e8:a6:
         c3:f9:65:7d:62:d3:ea:22:b2:6c:5e:55:26:67:4f:9e:53:83:
         4b:57:59:d0:cd:fa:b8:19:25:9d:9b:81:51:f9:67:95:e7:ab:
         89:b9:22:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbODn2Hmef0QBUI5N4+oYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjJjYjA0OTMyMDYwNTY5Yzk3MjA2ODdkZWQ4OTFjMzRl
YmI2ZDUwHhcNMjYwOTIzMTgwMDE0WhcNMjYwOTI0MTgwMDE0WjAzMTEwLwYDVQQD
EygwMmM3NzVmMTY5MzY5ZTk2M2ZhNmI1MGFhZTU2NzViNmJlNDg2Y2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iO5Mr2De1Ir7CXuX6OrX+vG7MJo
u0JNuB6nSTw+MUiJg4CxAeLXT3bmyKMF0fP2XPPmVFaktQY4f+oew+7EHBOuGD/h
L4csD3RFXZyE21sp+xtT7SO8Z6yYdZy3jbEzP87e+i+BTQ2k57QxfHreKuZFOBn7
dpcGwIfO5/ptu2sSsvVLnZ+4yX6TW3+RbWbgrmotYZCnI0NrPsB5cJ3/4pfPEWI/
mQQnW7Q2YQpn9YkBdBt9ucdXW2SuclCK2BdOOF7VsUmsgUP5SJoj7O9NAxAvMiTd
y/f+6YEoEFxaK2+ClPZxeZlEJ2lkfcpH70nR9H9upbLgIfdA5G1TgW3j7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALHdfFpNp6WP6a1Cq5Wdba+SGzVMB8GA1UdIwQY
MBaAFIiyywSTIGBWnJcgaH3tiRw067bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMt
NGFkOGRhNDdjOWE2LzEvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMtNGFkOGRhNDdjOWE2
LzEvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYFM0YmU
GuXijCdN26WlMbr1AumvIn3H01dxEZ0ifN7+PV3Aov1g2sE57cUsbjP6J9HTab+W
Lz5WM++fz2Pn+bD6N8nYmEM+sIk7Gh2btTmoZExFgExGZIyQSbTMihPZ7NOXdgPG
1FSLt1wzV4NtihUpleOt+3Ajto2X+sNzBYX0VEUDrLX9T37ZJJKs7WagCSrgDSp1
mVl5IMtZ9laSMWcXon9mwJoZXx0eJlwlRnzYO5Tzux7rgcX712LRFVlMDh0rDHgB
YmJv1ShiVy62GiyqOKHOzeimw/llfWLT6iKybF5VJmdPnlODS1dZ0M36uBklnZuB
UflnleeribkiqQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:39:06 2026 by rpki-client