Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
File:                     ilUt2GldSD1Hzkz4RbkGsXUnalw.mft (raw, json)
Hash identifier:          poEHsXtP+zuEXmHIYHddKmqwiiqQh6kEUEcXPmLE9nY=
Subject key identifier:   3A:E8:89:6F:92:75:4D:14:96:42:FE:FA:69:0D:A3:E6:05:75:89:9C
Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
Certificate issuer:       /CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Certificate serial:       019EC25CDA8AF021AED9E1E997EA861E4CD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
Manifest number:          02F7
Signing time:             Sat 13 Jun 2026 19:02:05 +0000
Manifest this update:     Sat 13 Jun 2026 19:02:05 +0000
Manifest next update:     Sun 14 Jun 2026 19:02:05 +0000
Files and hashes:         1: 3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa (hash: Sh3IYzZ1zQ9r12wJte75WaIR+93O150+ToROD8zLC3s=)
                          2: ilUt2GldSD1Hzkz4RbkGsXUnalw.crl (hash: jc1Vrpheremwji7WWDdb4mI4NC0Ae1UesBrvHc5e8nk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:da:8a:f0:21:ae:d9:e1:e9:97:ea:86:1e:4c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c
        Validity
            Not Before: Jun 13 19:02:05 2026 GMT
            Not After : Jun 14 19:02:05 2026 GMT
        Subject: CN=3ae8896f92754d149642fefa690da3e60575899c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:5d:a3:8a:4f:75:09:79:52:42:3f:15:fa:
                    5f:7d:6b:6d:ea:2f:9d:01:d7:7a:94:bf:93:8a:54:
                    7c:61:52:c1:7a:39:aa:6f:86:5f:b1:c4:17:02:63:
                    a5:c9:b2:b7:14:47:e3:cc:7d:ad:3e:fe:d3:e1:d0:
                    b3:d9:4a:81:89:a1:db:bf:9c:c5:93:de:ea:4c:59:
                    d0:51:af:8e:5a:f5:c2:f8:1a:dc:51:fb:39:3a:e6:
                    c4:5e:83:e4:a7:70:bd:51:f6:98:42:d3:3e:8f:79:
                    39:2e:3d:c9:7b:7b:c7:b1:33:15:5c:07:4f:f2:fc:
                    31:ea:b2:d6:55:e8:60:2e:07:9c:0f:26:d0:82:1a:
                    26:72:79:e0:1f:bc:68:fd:d8:df:a6:97:11:77:16:
                    d0:af:2e:71:0d:8d:f1:88:a6:a9:65:ed:4a:61:b7:
                    d9:aa:b9:79:53:df:5f:96:96:42:bb:9b:e1:8a:50:
                    33:a3:2e:a6:b5:50:84:67:ca:7a:6e:0e:f2:bd:48:
                    69:c3:9c:d2:0d:e8:79:b8:24:de:f6:9a:b1:ee:ce:
                    cf:51:69:f4:74:36:ba:43:ff:ad:6d:f7:3d:1f:23:
                    32:d4:db:58:25:70:5a:64:cf:04:7d:8b:7e:5e:3b:
                    5c:f4:81:1c:30:fa:01:56:1d:27:2c:06:88:0f:94:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E8:89:6F:92:75:4D:14:96:42:FE:FA:69:0D:A3:E6:05:75:89:9C
            X509v3 Authority Key Identifier:
                keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:49:ba:16:01:2e:46:44:4d:30:35:7a:90:8d:20:a0:d9:98:
         9f:f5:7c:d5:36:79:6e:12:3a:4f:b9:3a:bc:0d:05:c2:60:44:
         32:24:e1:a8:a2:fa:0e:5a:00:60:20:a5:80:1d:23:31:4a:54:
         bc:7f:3d:67:32:b3:3e:fd:fd:5c:b7:e5:f2:0c:fb:0a:fc:f7:
         d2:c0:9f:17:99:d7:a8:71:f5:98:c5:7d:bb:6b:37:34:46:4f:
         97:0a:3b:d6:a7:27:db:ae:e9:a3:00:bc:74:b9:89:12:b5:05:
         b0:a2:f2:2b:5a:53:4f:8a:b0:72:05:e9:61:83:01:bd:b3:50:
         10:4c:43:8e:60:da:57:ca:de:b1:ee:12:fd:00:44:bd:d4:90:
         34:a2:13:22:3c:ff:2f:3e:4c:c5:eb:0d:1a:22:57:ae:80:a4:
         40:97:93:17:98:51:7e:dd:ae:9e:bf:20:18:fb:d4:69:83:84:
         eb:b6:e1:d7:3e:6a:ed:79:7e:74:f5:b6:0e:af:14:bd:56:a1:
         5b:c8:d2:8e:76:fd:95:b5:b3:f6:18:d8:6e:d1:a9:cb:bb:24:
         48:6a:53:2a:2f:fd:4b:dc:35:d4:91:21:46:c5:2d:d0:a8:14:
         e7:de:e6:fd:e0:84:10:2d:27:ef:9c:cf:88:00:0b:94:fe:c0:
         0a:0b:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:31:34 2026 by rpki-client