Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
File:                     1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft (raw, json)
Hash identifier:          ibE+jEPNKss2ljDBmnCUDYnnahnfdXt7tPec28X11qI=
Subject key identifier:   61:C2:49:D9:FD:01:51:2C:F8:8B:4B:E4:54:AE:B4:47:0C:29:40:B9
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Certificate issuer:       /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial:       01A0CBFE3EC3E006A2DD5ADBDD77FF396AD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
Manifest number:          114F
Signing time:             Wed 23 Sep 2026 02:00:32 +0000
Manifest this update:     Wed 23 Sep 2026 02:00:32 +0000
Manifest next update:     Thu 24 Sep 2026 02:00:32 +0000
Files and hashes:         1: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl (hash: LX9N2MDmkbSX1wP3YfW0h3rPIr3X/weNTqFGdPnREAk=)
                          2: wJNpYH3x8JuRQe7NN2ZCV_XQmRM.roa (hash: bnv6CBVN0TxP3itZ4ZFUesEngt/ft27+17IUFJfqBMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:fe:3e:c3:e0:06:a2:dd:5a:db:dd:77:ff:39:6a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
        Validity
            Not Before: Sep 23 02:00:32 2026 GMT
            Not After : Sep 24 02:00:32 2026 GMT
        Subject: CN=61c249d9fd01512cf88b4be454aeb4470c2940b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:56:7c:bf:bb:14:46:f7:92:28:5d:92:d5:
                    e6:f3:d7:99:0d:89:3d:e9:cb:63:87:d3:f2:9d:b3:
                    06:b3:2b:87:fb:41:2e:cc:18:a4:ba:31:aa:a3:ce:
                    d1:d9:de:77:63:43:45:6f:3e:50:6f:c2:ed:b6:e1:
                    62:52:92:90:5d:33:81:77:b0:01:85:85:fc:ae:73:
                    ea:93:e1:3e:48:c5:4b:3a:49:9f:64:65:3d:77:c5:
                    fb:a7:95:d3:c2:a3:ff:d8:ea:55:af:f9:30:c6:37:
                    97:28:f4:48:1f:69:0d:5a:ef:58:9e:b2:8b:b0:8e:
                    1c:c0:b7:54:af:84:1c:bd:20:03:b4:77:6b:13:d7:
                    57:f1:a4:22:bb:67:ee:d0:02:24:e4:b7:18:71:fc:
                    0d:c0:8d:f3:3c:68:77:3e:f1:80:59:05:6d:5c:10:
                    08:6d:bc:e5:15:85:96:d2:27:eb:a4:af:c0:ef:f5:
                    e3:b2:5e:7c:3b:bd:3f:5d:76:4f:44:17:c1:31:67:
                    21:1f:4b:e3:4d:3a:f2:58:23:c5:5c:ab:8e:fb:97:
                    75:24:55:10:b5:a9:10:0f:eb:e0:d3:9a:41:e0:56:
                    9b:47:35:e4:ff:9c:ed:da:ef:cd:87:15:e4:bf:ec:
                    74:ad:75:89:9c:19:4e:92:79:c7:a9:fa:60:3b:75:
                    1a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C2:49:D9:FD:01:51:2C:F8:8B:4B:E4:54:AE:B4:47:0C:29:40:B9
            X509v3 Authority Key Identifier:
                keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:42:84:08:69:32:e0:22:3f:8d:bf:cc:3d:e4:b4:29:8d:fa:
         9e:b6:68:51:87:cd:23:f5:05:97:16:ad:7a:f3:b6:61:ff:0e:
         17:79:cd:2f:66:45:93:97:67:77:14:ed:df:87:de:3b:ba:b9:
         3b:a9:ef:27:a5:51:b5:60:f2:af:c6:ee:58:ef:68:b1:2d:11:
         3a:40:ee:c5:64:f8:d5:cd:56:26:59:4d:a6:11:0e:7c:3c:9a:
         65:8e:4e:3b:48:8c:d8:dc:ef:77:3b:04:74:9b:08:e9:83:ce:
         af:f6:11:0d:bb:92:0b:27:9e:ae:17:80:19:70:0a:c6:07:06:
         48:5a:fb:11:cf:fc:17:83:cd:75:dd:56:99:26:dc:2c:da:88:
         23:8d:55:0b:4a:a7:62:5e:b9:40:0f:98:7d:37:80:6a:a4:58:
         12:3f:4c:08:eb:c1:64:e5:cc:5b:df:ca:92:37:f6:76:c8:96:
         3d:41:eb:f8:7a:c7:41:e6:01:1d:80:40:79:4a:b0:f0:6b:69:
         fc:f2:f1:d6:52:58:f6:20:a6:e2:32:cf:44:0d:bf:51:99:db:
         df:8d:aa:2f:36:77:da:eb:4c:22:29:74:99:2a:e4:01:8e:b6:
         8b:df:df:39:f2:67:5b:ee:73:2d:69:4d:0a:ae:8f:da:4e:e5:
         d1:b4:fc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:49:44 2026 by rpki-client