Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
File:                     1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft (raw, json)
Hash identifier:          jd7YywnQ/hyQmWdJs3xFQxISICepHjw46VY0/ckGwwQ=
Subject key identifier:   21:75:3A:A0:58:93:03:5A:A4:71:30:9A:70:BA:E6:AB:9E:DC:EC:B9
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Certificate issuer:       /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial:       0198D4E023D34996A97DD4AD4BC0E3C9F214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
Manifest number:          0D2F
Signing time:             Sat 23 Aug 2025 03:01:55 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:55 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:55 +0000
Files and hashes:         1: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl (hash: ymFzttOy0fHfUdyVyDFCWFKfkbNeZ9QuPStxhiHSQPk=)
                          2: sFqvD3DbXn90SlSxedk-_VFVTi4.roa (hash: JtGbnCe8rSKW4mIxvzXo/VN0LsuEsKsi7iRdKw/3Gk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:23:d3:49:96:a9:7d:d4:ad:4b:c0:e3:c9:f2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
        Validity
            Not Before: Aug 23 03:01:55 2025 GMT
            Not After : Aug 24 03:01:55 2025 GMT
        Subject: CN=21753aa05893035aa471309a70bae6ab9edcecb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:97:3f:fa:44:d2:3b:d1:71:af:16:15:2d:
                    e8:5e:fb:6c:e3:96:36:27:bf:73:ed:e3:6a:dc:82:
                    33:5c:56:2c:15:18:02:9d:4e:3d:bf:f1:c7:58:b5:
                    6d:da:56:4b:46:49:c5:36:20:ec:7c:82:6e:51:d8:
                    5c:d6:02:de:f4:88:44:b9:73:de:69:8d:33:35:0a:
                    72:3c:37:74:d6:0e:ef:0a:0e:45:50:5b:d8:d7:b6:
                    69:56:56:bf:a7:08:2b:75:c2:ef:7c:74:c4:c5:73:
                    20:3a:66:38:a9:d7:fb:cf:90:f2:04:11:80:fc:c7:
                    3a:08:c1:dd:d6:cb:a6:57:5b:f9:a6:c3:f8:db:46:
                    7e:43:92:1f:56:92:a2:aa:91:73:81:03:f2:56:8f:
                    eb:23:b0:77:4a:94:e2:63:d0:d7:0c:b8:05:a5:9e:
                    f0:10:cc:8d:70:b1:eb:95:03:ca:de:6d:e9:06:b3:
                    42:bb:fc:f1:74:85:1b:bb:64:35:ee:a2:e2:88:f7:
                    4b:dc:1b:e7:eb:78:f3:43:dd:b6:e1:1c:f7:34:1b:
                    e4:7c:4a:a7:e1:3d:bd:c9:71:df:c9:4e:55:95:0d:
                    a0:e1:29:09:42:22:73:cc:42:7e:6a:84:08:52:e9:
                    37:be:b5:a7:84:19:e6:b7:6f:e9:70:ee:7b:94:e3:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:75:3A:A0:58:93:03:5A:A4:71:30:9A:70:BA:E6:AB:9E:DC:EC:B9
            X509v3 Authority Key Identifier:
                keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:40:81:82:83:b1:68:bf:c2:8d:40:59:b2:eb:d7:b4:c2:2e:
         ee:d8:64:d7:b7:1b:fb:5c:3d:dd:3f:b7:d1:a6:da:43:c4:e7:
         6d:4a:06:ec:a6:c9:32:32:b9:3d:04:a2:e4:33:e1:a6:be:95:
         0f:b3:ed:5f:06:61:a1:b4:c3:aa:68:99:fb:32:be:01:43:c0:
         5d:db:d1:8b:51:57:29:88:ae:75:45:a0:c6:3f:37:d5:cb:00:
         b9:66:a2:be:2b:2e:ab:11:3b:ab:c9:9b:77:cc:b0:1d:cd:cf:
         51:fb:ac:10:65:63:7f:56:95:ba:f5:e7:f4:2a:75:34:de:d0:
         1a:31:bd:c0:1f:f3:80:86:c1:64:3c:98:bb:62:a3:e8:a2:b0:
         68:24:61:e2:d5:68:0b:35:76:28:34:24:fb:08:43:42:c0:bd:
         a6:d2:83:88:72:17:6e:b8:9b:33:48:3e:a5:7f:37:39:2a:a3:
         14:b7:07:57:34:28:ad:35:28:f0:a7:d4:89:a9:29:85:6c:fb:
         55:9d:ed:48:a8:27:ab:39:10:d1:1a:1c:c8:ab:5c:26:9d:ae:
         db:0f:0f:cf:14:93:33:85:64:32:19:21:7a:ec:57:71:37:b2:
         c0:8f:01:29:dc:94:59:45:a9:cc:21:2c:57:2e:c4:5e:d7:e6:
         98:f6:8d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:55 2025 by rpki-client