Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft
File:                     iljqUXnWZHGoIQxi_MhO8XvUvz0.mft (raw, json)
Hash identifier:          17CzcvGMd5HB8Sbljqr0FXWNidiPuDZ7pRy7ran5Zn8=
Subject key identifier:   6B:B5:96:E7:8F:60:A3:EB:76:10:6A:91:05:D3:FA:5E:C8:D9:DC:EB
Authority key identifier: 8A:58:EA:51:79:D6:64:71:A8:21:0C:62:FC:C8:4E:F1:7B:D4:BF:3D
Certificate issuer:       /CN=8a58ea5179d66471a8210c62fcc84ef17bd4bf3d
Certificate serial:       01A0C40E42B070EBCA3B29495FE429B8FC43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iljqUXnWZHGoIQxi_MhO8XvUvz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft
Manifest number:          012B
Signing time:             Mon 21 Sep 2026 13:01:03 +0000
Manifest this update:     Mon 21 Sep 2026 13:01:03 +0000
Manifest next update:     Tue 22 Sep 2026 13:01:03 +0000
Files and hashes:         1: iljqUXnWZHGoIQxi_MhO8XvUvz0.crl (hash: 5yf6foNLarpmmx3lSsrJSfGHHnsO3Lg6eDwstBdgKM8=)
                          2: mF1RS8LnLkXN8vWWTILBQMonH6U.asa (hash: RoNJP5GISKj19rEZAkT7j2xuvCAzO+US0l9wkh11poc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iljqUXnWZHGoIQxi_MhO8XvUvz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0e:42:b0:70:eb:ca:3b:29:49:5f:e4:29:b8:fc:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a58ea5179d66471a8210c62fcc84ef17bd4bf3d
        Validity
            Not Before: Sep 21 13:01:03 2026 GMT
            Not After : Sep 22 13:01:03 2026 GMT
        Subject: CN=6bb596e78f60a3eb76106a9105d3fa5ec8d9dceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f3:cd:d3:aa:76:17:95:4e:30:00:41:86:b4:
                    9a:dc:23:cb:1c:9f:34:66:ef:62:28:2b:29:59:df:
                    22:d6:b6:8f:16:8f:5c:d1:04:1c:aa:89:72:cd:9d:
                    a3:ba:71:98:73:30:ab:63:02:f4:54:52:82:32:70:
                    9e:47:23:94:7a:a7:f1:57:76:7a:f4:30:c3:4a:44:
                    49:b0:45:a7:b5:e2:5d:1b:fe:92:7f:15:8b:4c:06:
                    96:8b:63:3c:27:43:c5:be:a0:f0:ec:be:03:aa:e6:
                    05:01:50:d7:c2:70:cf:20:b2:ea:b9:8c:02:f1:1d:
                    a9:8b:b5:ac:8b:bc:e9:f0:1b:eb:8c:39:2d:0a:10:
                    93:bc:ce:7a:44:28:ca:a5:4e:ee:d4:b5:fe:b6:fe:
                    bd:65:45:0e:5a:1b:9d:83:4a:9a:ee:00:68:de:e7:
                    3c:69:32:03:5f:f6:26:11:7b:89:71:6e:a1:05:4e:
                    bc:7e:7c:d5:9e:a4:c4:66:e7:5d:ed:d8:97:74:d9:
                    39:7d:d8:06:08:3e:77:df:dc:de:38:14:c6:e9:bd:
                    e1:dc:08:a2:a2:a0:be:9f:f5:3a:84:1c:5f:e2:3e:
                    26:99:00:b1:5c:53:cd:cd:02:f8:47:56:ff:cc:0e:
                    75:7b:25:43:e8:02:9e:65:8e:36:11:3e:7e:30:32:
                    1c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B5:96:E7:8F:60:A3:EB:76:10:6A:91:05:D3:FA:5E:C8:D9:DC:EB
            X509v3 Authority Key Identifier:
                keyid:8A:58:EA:51:79:D6:64:71:A8:21:0C:62:FC:C8:4E:F1:7B:D4:BF:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iljqUXnWZHGoIQxi_MhO8XvUvz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/32f8de-94df-40e7-bc9d-447c7c04454b/1/iljqUXnWZHGoIQxi_MhO8XvUvz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f9:91:54:47:6d:f0:7d:3d:cf:eb:de:6b:b8:d7:f7:15:c4:
         06:37:75:ef:a4:75:42:1e:ad:3d:8a:3e:3e:8f:c8:11:95:07:
         8a:30:f1:9d:03:0d:14:00:5b:db:37:31:66:7b:77:dd:da:f1:
         01:50:b1:5d:0b:fe:1c:64:09:e6:72:a5:62:74:67:a6:55:eb:
         bb:a9:06:7a:3c:38:47:b0:68:c2:dd:aa:f4:6a:a7:55:4f:52:
         e6:5f:a8:96:a6:ba:f6:aa:fe:6c:59:e2:be:82:ec:34:fb:91:
         24:13:bb:6c:7a:88:8f:ff:51:fc:f4:f4:45:c6:d5:2e:21:be:
         bf:2c:0e:0e:37:96:52:4b:bd:61:c3:a3:d7:e1:fa:7c:d0:af:
         2f:b6:44:b3:7e:f7:42:91:71:8f:c2:62:92:fe:7c:99:2f:5f:
         f2:c2:a6:72:56:3b:e4:bc:79:8a:b2:66:b0:fc:2e:0e:9f:44:
         25:4c:14:e7:e8:0f:4f:c6:99:05:08:59:69:ee:1a:da:72:d2:
         bc:9f:08:48:ca:b4:02:a3:44:30:6d:5c:33:9f:9a:00:3e:d4:
         18:81:5f:30:26:4f:16:f6:ef:23:36:99:ea:58:57:56:23:94:
         6c:05:2a:2a:49:1a:65:ac:bc:a3:5d:a2:6d:7b:0b:0b:49:fa:
         56:96:8e:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDkKwcOvKOylJX+QpuPxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNThlYTUxNzlkNjY0NzFhODIxMGM2MmZjYzg0ZWYxN2Jk
NGJmM2QwHhcNMjYwOTIxMTMwMTAzWhcNMjYwOTIyMTMwMTAzWjAzMTEwLwYDVQQD
Eyg2YmI1OTZlNzhmNjBhM2ViNzYxMDZhOTEwNWQzZmE1ZWM4ZDlkY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fPN06p2F5VOMABBhrSa3CPLHJ80
Zu9iKCspWd8i1raPFo9c0QQcqolyzZ2junGYczCrYwL0VFKCMnCeRyOUeqfxV3Z6
9DDDSkRJsEWnteJdG/6SfxWLTAaWi2M8J0PFvqDw7L4DquYFAVDXwnDPILLquYwC
8R2pi7Wsi7zp8BvrjDktChCTvM56RCjKpU7u1LX+tv69ZUUOWhudg0qa7gBo3uc8
aTIDX/YmEXuJcW6hBU68fnzVnqTEZudd7diXdNk5fdgGCD5339zeOBTG6b3h3Aii
oqC+n/U6hBxf4j4mmQCxXFPNzQL4R1b/zA51eyVD6AKeZY42ET5+MDIcbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGu1luePYKPrdhBqkQXT+l7I2dzrMB8GA1UdIwQY
MBaAFIpY6lF51mRxqCEMYvzITvF71L89MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxqcVVYbldaSEdvSVF4aV9NaE84WHZVdnowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zMmY4ZGUtOTRkZi00MGU3LWJjOWQt
NDQ3YzdjMDQ0NTRiLzEvaWxqcVVYbldaSEdvSVF4aV9NaE84WHZVdnowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zMmY4ZGUtOTRkZi00MGU3LWJjOWQtNDQ3YzdjMDQ0NTRi
LzEvaWxqcVVYbldaSEdvSVF4aV9NaE84WHZVdnowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPmRVEdt
8H09z+vea7jX9xXEBjd176R1Qh6tPYo+Po/IEZUHijDxnQMNFABb2zcxZnt33drx
AVCxXQv+HGQJ5nKlYnRnplXru6kGejw4R7Bowt2q9GqnVU9S5l+olqa69qr+bFni
voLsNPuRJBO7bHqIj/9R/PT0RcbVLiG+vywODjeWUku9YcOj1+H6fNCvL7ZEs373
QpFxj8Jikv58mS9f8sKmclY75Lx5irJmsPwuDp9EJUwU5+gPT8aZBQhZae4a2nLS
vJ8ISMq0AqNEMG1cM5+aAD7UGIFfMCZPFvbvIzaZ6lhXViOUbAUqKkkaZay8o12i
bXsLC0n6VpaORg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:49:01 2026 by rpki-client