Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
File:                     IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json)
Hash identifier:          4XHnlBSpVVQE9zuhhnZn7KRJ9ODMMoAJA7OqdLngczg=
Subject key identifier:   9C:01:AC:DA:31:CB:56:8A:5F:8E:77:46:D0:D8:98:C6:5B:71:C3:6C
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Certificate issuer:       /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial:       019D2DE11278387299444DCD2F785D8398DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
Manifest number:          02F5
Signing time:             Fri 27 Mar 2026 06:00:18 +0000
Manifest this update:     Fri 27 Mar 2026 06:00:18 +0000
Manifest next update:     Sat 28 Mar 2026 06:00:18 +0000
Files and hashes:         1: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: czizOk6ewVUPDKgTe9klb1yN0V/I9SorGLqrD2nSJJ8=)
                          2: VGZt16TaNbYhDiwnaWT7BIOvDLk.roa (hash: Y3ywHDxVVrMBlYasPLw8Fmqixb2KEFgEzqo4692NceY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2d:e1:12:78:38:72:99:44:4d:cd:2f:78:5d:83:98:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=225326a0b249d2109f5292961392495071d89c92
        Validity
            Not Before: Mar 27 06:00:18 2026 GMT
            Not After : Mar 28 06:00:18 2026 GMT
        Subject: CN=9c01acda31cb568a5f8e7746d0d898c65b71c36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:aa:26:17:e6:60:ae:e8:46:69:81:6b:0f:99:
                    18:1b:9d:71:72:2b:11:4f:1b:64:22:a1:4c:c8:ee:
                    1b:df:2b:88:2e:0b:a9:97:80:aa:f8:ad:48:39:f9:
                    44:26:f1:05:70:6c:83:cf:53:d3:b0:01:38:e0:bd:
                    e6:0f:82:c2:b6:87:27:f5:33:b2:98:ce:a5:f5:db:
                    b4:c8:12:77:75:21:72:e7:69:fa:01:99:f6:3d:8f:
                    44:7f:66:80:9e:72:8d:f4:5c:00:8c:09:55:d6:57:
                    71:7c:a5:ce:73:94:c0:ed:40:29:84:8f:7e:b5:dd:
                    37:e2:bd:5b:f7:08:af:1e:f3:a6:99:e0:dc:af:e2:
                    3c:3d:5d:78:25:d5:1c:2f:62:b3:19:96:45:f2:64:
                    81:25:68:8f:a2:a2:1f:7c:af:fb:f5:ed:d8:de:ed:
                    d9:61:10:ef:01:24:1b:54:ae:51:55:53:22:77:be:
                    c8:1b:a0:f4:cf:6b:7e:55:ed:27:35:67:43:ee:4a:
                    d0:f2:f2:59:5b:df:af:7f:2f:41:33:cc:f7:66:3d:
                    23:87:fb:62:2b:1e:15:24:40:52:c3:0d:63:a7:1e:
                    19:6a:c5:68:16:71:58:00:4b:4c:dc:53:fa:7e:26:
                    d8:a1:27:90:42:4c:ef:de:fb:e3:e8:15:10:62:49:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:01:AC:DA:31:CB:56:8A:5F:8E:77:46:D0:D8:98:C6:5B:71:C3:6C
            X509v3 Authority Key Identifier:
                keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:86:cf:1d:ae:89:2e:c0:ce:6a:7c:23:7e:45:dd:0b:97:ec:
         ab:c0:5b:df:3c:e3:fc:f1:d0:ab:22:8e:7c:b4:3e:40:8e:1f:
         55:9a:39:bb:1b:f7:1c:7a:b6:3d:37:70:7f:da:da:23:4b:77:
         48:e8:c3:4e:d4:31:c6:a3:fa:21:d0:50:c2:49:0b:d3:72:3b:
         78:39:c9:30:54:84:8d:3d:ae:34:82:50:ce:a2:6c:a5:1e:57:
         76:cc:d7:f4:fd:1b:19:aa:21:9c:23:1b:c0:eb:f8:74:8a:e9:
         b9:52:05:c5:61:57:2d:f3:d1:1c:c2:e4:a0:8e:61:21:25:a8:
         23:84:3c:66:21:57:f3:93:66:62:d4:47:b1:8c:b5:df:6e:03:
         c4:65:0e:b3:f3:9b:55:c7:9c:10:1a:6f:13:48:f8:ee:c0:72:
         f7:b5:63:24:76:43:54:4b:32:5f:9f:8a:77:c2:65:a4:23:76:
         af:b0:aa:0a:e0:6f:2b:22:b7:ab:f8:aa:9b:62:d1:0a:67:9a:
         20:83:22:fa:27:b4:a1:84:dc:35:82:08:47:a6:47:61:e2:d4:
         b0:52:8e:35:62:3f:b3:f8:6e:99:fb:bb:5e:b8:25:bf:14:92:
         c7:13:0b:6f:76:a8:65:0b:e6:9d:6f:d7:c5:03:bb:dc:ed:be:
         ef:c1:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:42:41 2026 by rpki-client