Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
File:                     1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft (raw, json)
Hash identifier:          3D2iQ21EX359+WYq2dPAL7Rr1olJNZ9R5+vCJP6l76I=
Subject key identifier:   CA:6D:C4:1B:03:D7:0E:4E:C2:77:BC:B2:7E:D8:88:2A:3D:5B:87:0B
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Certificate issuer:       /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial:       019D273AA901D7FAAAC5B0972901D635268E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
Manifest number:          0F6C
Signing time:             Wed 25 Mar 2026 23:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:48 +0000
Files and hashes:         1: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl (hash: /O16omLz8JdM/P4+n4pX+3F5DCWvi+NUUGtQ2pRzjpA=)
                          2: wJNpYH3x8JuRQe7NN2ZCV_XQmRM.roa (hash: bnv6CBVN0TxP3itZ4ZFUesEngt/ft27+17IUFJfqBMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:a9:01:d7:fa:aa:c5:b0:97:29:01:d6:35:26:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
        Validity
            Not Before: Mar 25 23:00:48 2026 GMT
            Not After : Mar 26 23:00:48 2026 GMT
        Subject: CN=ca6dc41b03d70e4ec277bcb27ed8882a3d5b870b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:70:29:6e:93:f2:ff:c6:54:43:88:30:84:
                    b6:9a:12:c0:f9:07:80:b4:15:18:31:74:77:02:f7:
                    27:5b:3b:62:1d:1d:35:9a:0e:90:94:67:24:14:b3:
                    95:cd:59:f7:89:1f:a3:59:00:be:32:21:a7:64:3a:
                    04:62:c9:11:82:05:32:69:eb:a6:94:71:6b:09:49:
                    3f:3b:d9:9d:8a:ea:6a:8f:71:81:d0:ff:cf:d8:89:
                    61:02:4a:8c:74:13:59:0a:93:27:c4:ea:f9:67:de:
                    fd:aa:c4:0f:25:fe:0e:45:29:51:1d:6c:53:16:0c:
                    ac:f8:1b:25:bf:de:21:0f:c8:cb:7e:03:97:a9:b5:
                    bd:22:3f:eb:32:be:50:7e:1b:2a:d6:f1:f2:74:78:
                    bd:cf:86:78:04:d8:1d:92:c8:d8:28:cf:14:3f:37:
                    c5:5d:a7:c5:90:c2:0a:a8:71:08:f0:e4:1d:62:5e:
                    fe:92:10:19:13:3a:06:bf:ed:69:f4:04:40:57:26:
                    ff:61:de:f2:8d:bc:90:db:82:9f:70:b3:15:eb:f1:
                    bf:65:06:2b:46:a3:6b:07:08:69:4c:e9:c7:52:16:
                    44:27:f3:36:34:8b:8f:2e:8a:21:c1:41:05:59:5a:
                    b9:7b:53:11:ca:a5:e9:88:68:82:25:7c:e1:25:48:
                    5b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6D:C4:1B:03:D7:0E:4E:C2:77:BC:B2:7E:D8:88:2A:3D:5B:87:0B
            X509v3 Authority Key Identifier:
                keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8b:fd:0b:7a:4c:0c:62:37:12:3b:00:3b:e9:be:5d:d9:2c:
         61:32:30:51:7f:a6:d0:6f:f4:75:9e:25:57:8e:b5:e1:6c:29:
         58:e4:fa:72:35:dd:c9:1c:92:88:b4:3d:33:5d:74:c0:db:b0:
         1f:b4:9e:f5:d0:15:39:f8:67:02:07:6f:33:38:36:ef:02:3e:
         d0:97:a5:d6:ee:8d:77:47:d8:ec:46:7b:98:6e:e3:c3:e2:ef:
         d3:e8:50:42:bf:16:81:46:1c:2b:64:0b:a2:01:05:28:b2:03:
         83:81:02:dd:9e:f9:fa:ea:9b:3d:dd:1f:90:a5:59:da:31:a6:
         3a:6f:74:1f:41:ab:e8:53:da:b8:36:c7:56:3f:3f:a1:74:20:
         b3:ae:c0:6e:97:1d:eb:32:1c:fa:6f:4c:f9:81:5b:6b:67:a1:
         23:6c:3d:12:2f:ff:81:c4:ce:8b:0d:d9:dd:ae:00:b6:a0:1c:
         cd:25:37:fc:02:f8:f2:0e:92:8e:97:a3:63:9f:4f:3b:8c:e4:
         17:57:39:0f:0e:00:78:b2:c6:3a:b6:5f:3b:bb:bf:7c:74:4c:
         e6:31:92:64:77:e9:f6:d4:10:8a:a2:65:a9:7a:c9:d6:c5:41:
         e7:f1:90:d4:b1:0f:ad:38:02:1b:3f:9b:27:a6:f4:5b:f7:b3:
         25:b3:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:46:55 2026 by rpki-client