Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File:                     IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier:          knTG3kmWlu6gvbjjNjBViWG08Lcze2pMRWqMXJgfxlo=
Subject key identifier:   12:0F:62:CA:01:DE:5C:22:17:B0:22:D3:51:5B:0A:32:63:F7:F3:64
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer:       /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial:       019D992B97F94E5E48154C2815F313809BA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number:          096C
Signing time:             Fri 17 Apr 2026 02:01:04 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:04 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:04 +0000
Files and hashes:         1: AKrnC7ODjSOXMdeL8wrToif0Wj8.roa (hash: xAW6Xh8ZxCJiYIacyACrSRCzv0AulHAv512L4kczh4U=)
                          2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: c5QwaNo7BmzCUSr5zM8B4GeHxOfh6Xapf3FSEnAqvkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:97:f9:4e:5e:48:15:4c:28:15:f3:13:80:9b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
        Validity
            Not Before: Apr 17 02:01:04 2026 GMT
            Not After : Apr 18 02:01:04 2026 GMT
        Subject: CN=120f62ca01de5c2217b022d3515b0a3263f7f364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:fd:a4:21:0f:5b:bc:3b:c2:35:87:1b:6f:
                    87:5b:63:6b:5d:c9:8f:47:9e:6d:16:4b:39:b2:24:
                    c0:f4:43:b4:64:e1:60:92:4e:6f:af:a9:8d:01:38:
                    11:c3:0e:fb:04:a4:92:5c:ff:08:a7:69:a6:9b:c0:
                    d1:f5:72:aa:e0:76:b5:dd:ef:a0:38:37:80:2f:a7:
                    b2:66:5d:38:12:ef:7f:d6:b7:fe:a4:8c:fa:d4:f8:
                    03:7f:ba:30:bb:19:94:11:77:c6:9f:71:80:74:27:
                    20:b2:97:79:77:1d:28:3b:94:e7:9d:cc:a2:23:ef:
                    a6:ed:7a:0a:8c:73:04:ff:4f:f7:33:64:1d:bc:0e:
                    46:1c:44:da:4e:76:b5:7d:44:2a:05:48:79:70:9b:
                    51:dc:4c:fa:2d:9a:be:c0:71:ca:62:a2:81:f6:6d:
                    e4:4b:90:81:25:df:21:88:43:a1:76:57:ac:f4:4a:
                    2f:2f:11:27:03:9c:5b:c2:9a:ed:a3:ba:08:ae:7c:
                    2d:e2:28:a5:09:7d:2f:88:b3:86:34:8f:cb:b8:87:
                    79:09:e7:b3:3e:26:df:a7:e2:11:4c:6c:ff:62:a8:
                    db:04:bc:e7:87:66:c3:ae:0c:da:df:18:5a:d2:62:
                    b7:22:df:69:22:8e:4b:67:82:4d:32:85:0c:e3:e9:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0F:62:CA:01:DE:5C:22:17:B0:22:D3:51:5B:0A:32:63:F7:F3:64
            X509v3 Authority Key Identifier:
                keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:1b:0c:87:81:c4:6b:f1:61:64:85:6b:22:66:18:19:cf:51:
         06:74:18:b8:0d:b7:07:e4:04:06:30:b2:ab:c9:63:60:05:38:
         14:c0:f2:79:19:f4:72:5f:4b:19:1f:45:f5:9d:e1:06:bb:42:
         ac:b1:10:5e:1b:27:d2:ff:1e:f2:c8:36:e1:3d:8d:99:17:b2:
         4a:9b:c2:d5:dd:1b:e2:70:5c:a4:52:a0:47:61:d2:d5:1b:d2:
         2f:5a:01:82:34:73:f3:06:fd:1c:6b:9a:e1:1f:0b:10:c7:00:
         d9:93:c5:a0:0c:7d:fc:c0:fc:78:6a:ad:88:6a:60:f2:9c:32:
         08:e5:b9:eb:38:1c:63:92:17:a9:4f:20:d8:f3:dc:57:8c:f4:
         0c:60:66:92:10:c0:c3:66:91:04:41:90:27:c8:cc:39:dd:cc:
         18:6a:4c:5e:62:61:6e:0d:5f:f4:86:58:4a:f9:55:fa:2f:99:
         46:7e:ff:ee:8b:8c:33:91:2e:f6:e2:cc:8d:62:c1:53:57:13:
         77:5e:76:ef:fe:74:bb:8a:95:80:ad:37:ad:25:d7:36:ff:c8:
         b6:7c:e9:66:83:d0:1f:08:be:4a:a7:9b:81:f7:37:e7:e0:32:
         a0:bf:86:0a:ad:cd:8c:2d:8c:11:c3:b0:05:46:d6:0c:b2:bb:
         53:ba:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:29:08 2026 by rpki-client