Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft
File:                     iljqUXnWZHGoIQxi_MhO8XvUvz0.mft (raw, json)
Hash identifier:          5iVpeZMEl3g4i3+EQ+G9TuLLBXmY/PPa8CXiNT+sQdE=
Subject key identifier:   41:65:96:92:F7:A9:7F:17:3B:0C:82:30:E0:63:60:EA:12:8E:F4:4B
Authority key identifier: 8A:58:EA:51:79:D6:64:71:A8:21:0C:62:FC:C8:4E:F1:7B:D4:BF:3D
Certificate issuer:       /CN=8a58ea5179d66471a8210c62fcc84ef17bd4bf3d
Certificate serial:       01A0D192DDA3287B27649DBED3F3BF178228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iljqUXnWZHGoIQxi_MhO8XvUvz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft
Manifest number:          0132
Signing time:             Thu 24 Sep 2026 04:00:58 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:58 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:58 +0000
Files and hashes:         1: iljqUXnWZHGoIQxi_MhO8XvUvz0.crl (hash: SoLACEVwam4t3tNNll989mTvkL65h/5goR6cx2LVKns=)
                          2: mF1RS8LnLkXN8vWWTILBQMonH6U.asa (hash: RoNJP5GISKj19rEZAkT7j2xuvCAzO+US0l9wkh11poc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iljqUXnWZHGoIQxi_MhO8XvUvz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:dd:a3:28:7b:27:64:9d:be:d3:f3:bf:17:82:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a58ea5179d66471a8210c62fcc84ef17bd4bf3d
        Validity
            Not Before: Sep 24 04:00:58 2026 GMT
            Not After : Sep 25 04:00:58 2026 GMT
        Subject: CN=41659692f7a97f173b0c8230e06360ea128ef44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:30:ad:7e:d4:50:ee:42:a0:f2:ee:ad:3c:
                    9c:bd:30:6e:f0:81:63:1b:54:eb:7e:fe:ff:05:4f:
                    4b:83:62:20:14:49:3d:0d:b9:d1:fc:3f:78:bb:de:
                    96:91:b0:23:af:49:2f:da:b7:5b:d7:43:0b:fb:d7:
                    31:2f:83:ca:87:51:ee:2a:22:f5:07:94:de:7a:91:
                    14:2d:9a:7f:e8:fd:d5:68:83:d1:d7:b2:21:ca:da:
                    f9:95:80:54:03:ac:49:47:db:11:0f:45:ea:18:e5:
                    d9:48:1f:51:b6:80:3f:bf:a2:46:be:c1:32:35:65:
                    80:9c:d7:19:c6:8c:b2:7f:63:2f:05:46:45:3d:83:
                    be:09:70:38:bc:67:96:2c:fe:f7:30:52:66:6a:29:
                    4c:78:8b:87:79:e2:5b:86:56:47:dd:ac:5b:c7:f8:
                    52:36:43:b5:28:02:7e:7a:ad:a9:0e:53:78:a6:b8:
                    d0:ec:26:c1:b1:14:fe:1e:15:77:a7:7a:2e:a9:5c:
                    54:9f:b3:b3:a5:c3:df:34:7a:8e:47:ac:fe:f6:84:
                    0e:fc:4d:10:76:6c:c7:d9:0b:3b:91:9c:63:80:a6:
                    63:22:8e:3f:69:42:fd:ce:33:b7:a7:76:62:2d:48:
                    5b:80:7c:9c:a9:de:f0:ff:99:b9:9a:8c:f8:21:0a:
                    54:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:65:96:92:F7:A9:7F:17:3B:0C:82:30:E0:63:60:EA:12:8E:F4:4B
            X509v3 Authority Key Identifier:
                keyid:8A:58:EA:51:79:D6:64:71:A8:21:0C:62:FC:C8:4E:F1:7B:D4:BF:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iljqUXnWZHGoIQxi_MhO8XvUvz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:13:a2:a9:1f:69:47:72:70:22:a5:17:5f:51:2d:cd:01:af:
         6c:b1:32:89:2b:62:31:70:bc:8b:c0:39:ed:a9:10:65:da:9e:
         da:72:a5:43:9c:db:6f:c3:e6:04:b2:9e:ee:28:28:e8:57:9b:
         8a:53:15:a1:5c:e6:7d:2f:a6:ec:86:fe:81:76:7b:b6:c9:ef:
         25:66:69:42:86:aa:a3:c7:5e:2c:68:7b:b8:92:ef:2d:86:2f:
         09:38:3d:cc:8a:e8:c5:81:6f:8c:1d:ac:e7:c2:0c:23:90:03:
         c5:1b:15:74:52:66:64:14:1b:ba:90:aa:db:ca:5a:13:56:f0:
         4d:e1:ba:fb:f5:63:0e:ff:7a:1e:d3:1f:89:54:e8:70:20:3a:
         31:f7:58:71:ad:5c:08:18:2d:bc:a4:ec:61:45:92:0e:0c:8d:
         bd:14:65:17:ce:42:59:6c:d2:96:73:57:bd:e3:e1:f9:1e:5c:
         c0:a9:2e:20:5f:d5:5e:4c:46:2a:6d:fd:76:53:a4:ba:9d:0e:
         92:01:a4:5d:e6:21:1e:c9:c8:34:1c:ec:19:b5:06:62:d4:dd:
         cf:18:f7:fc:7a:a2:47:f8:0f:9a:cd:87:d2:4e:57:67:eb:68:
         5a:de:3f:3c:97:06:49:9a:90:d6:06:ae:9c:aa:db:2c:07:d7:
         ed:20:99:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:25:29 2026 by rpki-client