Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
File:                     il1FpMFzqusjbL6gnS6K_IBFFpU.mft (raw, json)
Hash identifier:          APMmW/sZ05i7JhbYHG0YswO2KHMo1gkXyUprsd2d79Y=
Subject key identifier:   7A:C1:CD:2A:56:20:72:2F:23:98:F9:42:7F:09:4E:49:21:84:D2:0A
Authority key identifier: 8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
Certificate issuer:       /CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Certificate serial:       019DA37858B2E9945D96C755D774E2009E8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
Manifest number:          10C7
Signing time:             Sun 19 Apr 2026 02:01:06 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:06 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:06 +0000
Files and hashes:         1: il1FpMFzqusjbL6gnS6K_IBFFpU.crl (hash: UU/kb6cOoL6UnuSBNgOk1J6wVuAOQzmQO9HyB/Gs11E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:58:b2:e9:94:5d:96:c7:55:d7:74:e2:00:9e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
        Validity
            Not Before: Apr 19 02:01:06 2026 GMT
            Not After : Apr 20 02:01:06 2026 GMT
        Subject: CN=7ac1cd2a5620722f2398f9427f094e492184d20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1b:f8:1a:77:25:ad:52:9e:00:53:39:43:de:
                    fa:8d:ad:98:90:ae:36:83:f9:a9:13:ff:3d:b2:58:
                    2b:33:94:33:d0:59:f2:7e:c6:ab:ed:b4:3d:83:d8:
                    ea:1d:b0:a0:ec:89:f2:9d:da:9e:44:bb:40:19:8f:
                    93:33:b2:4d:8a:c5:9c:6d:33:e3:0c:c4:e1:36:11:
                    4e:f7:bd:37:ab:25:ca:23:af:f6:c7:f1:03:72:b6:
                    68:b8:e7:a5:9b:55:05:8c:84:c5:62:8f:90:d3:84:
                    4a:f7:6f:8b:bd:7b:fd:1d:dd:b5:06:e3:9d:b7:7f:
                    3b:15:bb:bb:c3:5a:a4:25:c7:40:a2:b5:4d:95:50:
                    c4:63:6b:1e:41:2a:54:4e:0f:bd:a6:09:7e:18:5a:
                    f4:54:ed:dc:e8:ac:6f:f2:da:c1:ae:f1:0b:b4:d8:
                    a7:19:ef:0a:08:83:cf:f7:71:40:db:85:96:da:a3:
                    dc:ef:81:3e:8e:20:fa:e0:b7:af:8b:88:08:a2:2c:
                    5d:31:60:9a:a9:9a:a5:81:4b:94:4e:37:21:be:eb:
                    ee:40:78:8b:70:f9:17:34:99:b4:eb:fe:81:f7:e4:
                    c8:37:6e:26:3b:58:c0:43:6b:bd:4d:33:ba:b9:0c:
                    39:3c:e0:ee:e4:46:30:4f:8b:55:2f:51:92:73:71:
                    61:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C1:CD:2A:56:20:72:2F:23:98:F9:42:7F:09:4E:49:21:84:D2:0A
            X509v3 Authority Key Identifier:
                keyid:8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:6f:8e:b9:80:1a:fe:03:05:30:22:5c:cc:81:4e:ff:0b:36:
         c8:65:45:f4:cb:af:59:a5:ed:d1:d1:f4:9f:ab:e6:de:09:ec:
         61:66:75:14:1a:8c:59:fb:7f:f2:5e:97:65:a4:a0:59:ba:bb:
         66:8f:13:90:cd:ef:a2:39:5f:ae:43:82:de:d8:a3:58:66:01:
         6a:30:15:35:1f:b0:20:05:dd:e8:6e:7b:2e:31:2d:02:b6:b1:
         0b:2b:8d:42:60:05:ab:27:38:4c:05:03:0a:26:35:0d:71:e9:
         15:0d:f6:e7:e4:c3:3e:72:47:7b:9f:9f:f3:30:5d:05:85:c8:
         f5:db:df:bf:d5:b5:9e:5a:e5:e7:66:1f:3f:fd:25:b9:a6:bc:
         8d:dd:72:05:7d:26:53:b4:13:54:95:d1:0d:c7:15:73:71:2f:
         a7:43:90:fc:0c:95:90:1a:6b:77:72:18:0f:a1:dd:d6:fc:62:
         03:b0:2c:49:ab:11:0d:9f:d0:ec:64:d9:12:86:d2:67:cd:43:
         5a:8b:6e:03:94:8e:9c:bb:38:15:9c:55:36:df:55:50:36:e3:
         5a:3c:0f:d2:50:c3:97:a3:86:ec:1c:c4:dc:b7:f9:75:d9:fd:
         d5:2b:63:9d:cb:f4:e0:c2:26:93:5e:7b:14:54:09:b6:7c:a5:
         bd:a1:97:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeFiy6ZRdlsdV13TiAJ6NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWQ0NWE0YzE3M2FhZWIyMzZjYmVhMDlkMmU4YWZjODA0
NTE2OTUwHhcNMjYwNDE5MDIwMTA2WhcNMjYwNDIwMDIwMTA2WjAzMTEwLwYDVQQD
Eyg3YWMxY2QyYTU2MjA3MjJmMjM5OGY5NDI3ZjA5NGU0OTIxODRkMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRv4GnclrVKeAFM5Q976ja2YkK42
g/mpE/89slgrM5Qz0Fnyfsar7bQ9g9jqHbCg7InyndqeRLtAGY+TM7JNisWcbTPj
DMThNhFO9703qyXKI6/2x/EDcrZouOelm1UFjITFYo+Q04RK92+LvXv9Hd21BuOd
t387Fbu7w1qkJcdAorVNlVDEY2seQSpUTg+9pgl+GFr0VO3c6Kxv8trBrvELtNin
Ge8KCIPP93FA24WW2qPc74E+jiD64Levi4gIoixdMWCaqZqlgUuUTjchvuvuQHiL
cPkXNJm06/6B9+TIN24mO1jAQ2u9TTO6uQw5PODu5EYwT4tVL1GSc3FhRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrBzSpWIHIvI5j5Qn8JTkkhhNIKMB8GA1UdIwQY
MBaAFIpdRaTBc6rrI2y+oJ0uivyARRaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWwxRnBNRnpxdXNqYkw2Z25TNktfSUJGRnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81Yzg4Y2MtYmQwNi00YzNmLTkzNTYt
ZTA2YjIwNGFjNDk0LzEvaWwxRnBNRnpxdXNqYkw2Z25TNktfSUJGRnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81Yzg4Y2MtYmQwNi00YzNmLTkzNTYtZTA2YjIwNGFjNDk0
LzEvaWwxRnBNRnpxdXNqYkw2Z25TNktfSUJGRnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2+OuYAa
/gMFMCJczIFO/ws2yGVF9MuvWaXt0dH0n6vm3gnsYWZ1FBqMWft/8l6XZaSgWbq7
Zo8TkM3vojlfrkOC3tijWGYBajAVNR+wIAXd6G57LjEtAraxCyuNQmAFqyc4TAUD
CiY1DXHpFQ325+TDPnJHe5+f8zBdBYXI9dvfv9W1nlrl52YfP/0luaa8jd1yBX0m
U7QTVJXRDccVc3Evp0OQ/AyVkBprd3IYD6Hd1vxiA7AsSasRDZ/Q7GTZEobSZ81D
WotuA5SOnLs4FZxVNt9VUDbjWjwP0lDDl6OG7BzE3Lf5ddn91Stjncv04MImk157
FFQJtnylvaGX6Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:18:06 2026 by rpki-client