Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File:                     iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier:          fbRoRFYwBmLF1KlkTthzf8+uyqO++rdW9vN2NtA95mo=
Subject key identifier:   98:97:98:97:8D:77:CE:80:B2:31:F1:45:E1:94:55:4E:A2:1E:96:53
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer:       /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial:       019EC06D12C9F6073A1A6AB006FA83748C43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number:          088E
Signing time:             Sat 13 Jun 2026 10:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:34 +0000
Files and hashes:         1: gS3iiGFApTHDCIfFhx1EtF8qVC8.roa (hash: AM6jnqVpEm+WYY4ZOUaeap/f8QliHSoQXDrak2F6D9w=)
                          2: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: 8eEcVZeQCPTxkxKQ7htSZ1KF+oZXsYMe9RwJy9qQLWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:12:c9:f6:07:3a:1a:6a:b0:06:fa:83:74:8c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
        Validity
            Not Before: Jun 13 10:00:34 2026 GMT
            Not After : Jun 14 10:00:34 2026 GMT
        Subject: CN=989798978d77ce80b231f145e194554ea21e9653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:62:5f:96:4e:fd:c7:20:e6:f0:3c:2f:15:
                    f6:60:6f:3b:21:16:0b:1b:fc:d6:7b:73:f8:0a:b0:
                    df:19:2f:be:77:a0:9e:b1:7f:8d:67:12:da:ab:cb:
                    5a:6e:5b:fb:7d:95:f7:70:82:10:98:0b:be:e4:2c:
                    32:28:1a:cb:03:d4:3f:b8:ad:8c:9f:9d:24:70:54:
                    20:df:18:92:ae:ba:21:fa:5d:0e:66:23:30:e5:e1:
                    24:77:84:03:86:8e:cf:2c:03:82:9a:6d:d7:72:e3:
                    f9:dc:32:d0:e9:a0:7a:69:b3:fe:d8:65:5a:8c:c0:
                    64:77:ed:6b:9c:23:c3:a2:e3:7b:ee:91:9a:66:89:
                    95:4a:02:e7:27:ce:7f:b5:16:d1:50:a0:16:5b:0c:
                    b2:86:c4:34:73:d2:23:30:20:94:3d:e4:37:e1:23:
                    d0:90:a3:3b:05:f5:f9:c2:7a:5b:4f:78:71:0b:18:
                    02:34:f5:0d:03:89:1b:ed:ab:72:dd:4f:a0:41:22:
                    01:48:7b:d7:6b:ee:45:77:63:7c:33:9c:cf:f6:d0:
                    30:c7:6a:f6:4c:31:f0:68:52:f0:b6:65:dd:e4:c4:
                    82:38:47:68:60:72:df:60:ef:b7:78:e1:60:0d:ca:
                    ba:bb:1b:07:3a:f7:28:9e:44:36:39:ab:f9:da:d1:
                    74:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:97:98:97:8D:77:CE:80:B2:31:F1:45:E1:94:55:4E:A2:1E:96:53
            X509v3 Authority Key Identifier:
                keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ab:c7:92:b4:89:3b:d1:4c:49:34:04:bb:dc:ab:06:4b:55:
         a0:ed:c5:f4:6b:d6:2b:12:d3:cc:ac:32:83:ef:e6:d7:41:6f:
         01:72:93:ee:a2:ae:76:39:fa:d1:fe:61:92:ae:58:e1:25:86:
         1d:b9:fd:26:c6:7a:dd:07:42:80:1e:1f:6d:be:e1:eb:97:2c:
         73:fd:2b:90:37:83:f6:c6:04:27:97:59:b9:c8:27:19:aa:71:
         f8:e3:c8:44:a9:a3:fb:6a:c6:21:7f:94:e2:c4:ed:c6:96:1a:
         03:fc:10:02:11:1a:f9:48:1a:55:f4:90:26:2d:8e:88:73:20:
         47:cd:2b:80:50:be:e9:37:f2:fc:8d:cc:14:82:8b:cf:0e:db:
         64:b4:aa:65:48:6f:e0:31:af:1d:f6:7e:7f:4e:00:98:d0:a3:
         f2:1f:21:f8:03:f8:90:2f:95:8a:c2:2f:f3:39:82:1a:94:77:
         f8:33:77:ec:e6:30:ef:ea:11:42:dd:01:94:19:58:5b:4e:02:
         eb:5f:2a:9d:2c:a6:cf:fe:f1:61:9e:ca:61:8d:80:52:ae:53:
         88:f0:eb:eb:32:fc:86:22:40:62:3e:e8:68:f2:df:9a:42:f6:
         84:8c:03:84:b3:7c:f6:f0:37:a5:a1:9e:a5:f7:de:e6:62:a9:
         51:fd:be:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:19:52 2026 by rpki-client