Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
File:                     1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft (raw, json)
Hash identifier:          ulrg71yOgewwV3P96XvUg/xyJyeJkqOq7dz7tsaVto0=
Subject key identifier:   ED:56:AA:3C:23:10:FE:E4:4A:8D:28:D4:17:70:B7:2C:32:4C:90:BF
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Certificate issuer:       /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial:       0196A6C1E01EE9021E62991545E478A5992D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
Manifest number:          0C0E
Signing time:             Tue 06 May 2025 18:00:45 +0000
Manifest this update:     Tue 06 May 2025 18:00:45 +0000
Manifest next update:     Wed 07 May 2025 18:00:45 +0000
Files and hashes:         1: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl (hash: 8RGSM1cLIFOIZI/NhHvWfGfmydATEq5q5UXu05j5Cog=)
                          2: sFqvD3DbXn90SlSxedk-_VFVTi4.roa (hash: JtGbnCe8rSKW4mIxvzXo/VN0LsuEsKsi7iRdKw/3Gk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:c1:e0:1e:e9:02:1e:62:99:15:45:e4:78:a5:99:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
        Validity
            Not Before: May  6 18:00:45 2025 GMT
            Not After : May  7 18:00:45 2025 GMT
        Subject: CN=ed56aa3c2310fee44a8d28d41770b72c324c90bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:53:9f:42:e7:f9:5c:1d:e3:07:a9:e0:b7:5c:
                    91:3c:4a:9e:9f:3d:0a:63:2c:20:51:89:44:c9:5e:
                    66:6b:1f:3a:62:0c:37:37:8d:09:c2:47:4d:6b:f9:
                    9c:cc:95:74:07:9e:5c:67:59:0a:06:58:61:b1:ac:
                    d7:f2:59:39:61:4f:de:86:04:b3:7b:63:fc:0d:2b:
                    6e:b8:03:2a:79:ef:ae:05:d8:1f:b2:5d:b7:65:9b:
                    7c:55:fa:7f:e9:58:21:d8:c9:6f:6e:d6:75:2a:82:
                    c1:3e:8a:53:11:76:d9:91:47:63:43:ed:e4:5d:51:
                    68:a6:97:fb:fd:7a:0c:a4:9d:57:4f:14:32:6c:7a:
                    d8:6d:b1:c7:fb:29:f9:00:fb:a5:92:dc:89:cf:9e:
                    60:10:a7:7f:9a:a6:14:46:f0:46:08:0d:bc:8b:e4:
                    35:8c:0e:53:8f:f9:dc:2c:9b:ce:34:85:ef:ab:05:
                    84:cf:81:7d:49:39:70:eb:24:36:a3:a0:1e:74:2b:
                    66:d2:28:af:db:25:90:c6:39:23:86:fd:7a:65:86:
                    bb:c4:d0:dd:19:10:cf:98:0f:73:04:7d:8b:bc:76:
                    51:c0:07:17:5b:04:c5:cc:bb:0b:e6:3d:1d:03:29:
                    67:ce:80:64:f1:19:1d:13:7f:a6:ac:91:5d:47:33:
                    66:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:56:AA:3C:23:10:FE:E4:4A:8D:28:D4:17:70:B7:2C:32:4C:90:BF
            X509v3 Authority Key Identifier:
                keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:b9:0c:5b:9a:08:1d:42:13:79:3b:b2:e1:fa:9e:1b:4a:33:
         de:10:b7:80:31:4c:cb:90:e2:cf:67:28:88:a0:47:53:d4:8b:
         df:4d:3a:9e:1c:3f:8a:17:e1:bc:15:26:73:05:83:18:b8:05:
         54:fd:1d:89:3d:50:02:8a:50:b9:f7:fd:0a:83:c9:f3:42:47:
         36:23:01:62:af:f4:a2:43:67:9f:32:18:1b:a5:e9:a5:2b:24:
         58:83:79:f8:70:0b:2c:b0:2b:8f:bf:f0:f0:71:4c:1c:76:18:
         5c:5a:2a:a3:b8:36:43:e0:06:63:cb:ee:a4:03:d0:85:70:eb:
         41:b0:65:72:a7:8c:31:2b:dc:2c:2c:d6:c5:46:6c:64:2d:87:
         9a:bd:54:ac:e7:a6:51:f7:28:b1:1a:64:1d:6e:1a:a7:d8:3e:
         da:cd:0c:9c:cd:64:b2:c7:3b:2b:8c:39:5c:2d:63:0d:5e:a3:
         fc:84:70:66:d3:3c:fa:4a:85:bb:91:7d:68:53:81:c2:1c:73:
         1c:c3:1e:98:13:b5:4b:1c:4a:3b:18:92:67:60:ad:7b:46:88:
         f2:e4:f1:7d:52:61:1e:70:d8:5e:24:13:b3:3b:eb:d5:ff:d1:
         29:b0:93:75:69:61:45:9a:1a:c8:33:93:6a:35:3b:23:c9:d3:
         f4:0b:96:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:37:58 2025 by rpki-client