Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
File:                     1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft (raw, json)
Hash identifier:          pQxn61mRoZa1sImmz8yiTHrAYsNCNMm/IVvfoLPkuJ0=
Subject key identifier:   D0:90:96:3E:EC:21:FE:7A:C3:BB:75:A3:C9:29:7B:3C:8A:56:AC:9F
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Certificate issuer:       /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial:       019E1C7DA5824818BF92077EE30427D15AC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
Manifest number:          0FEB
Signing time:             Tue 12 May 2026 14:00:56 +0000
Manifest this update:     Tue 12 May 2026 14:00:56 +0000
Manifest next update:     Wed 13 May 2026 14:00:56 +0000
Files and hashes:         1: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl (hash: h/fSTINCSpdLmeigKwY00TNw24LYgwha4J/MPbO7gXE=)
                          2: wJNpYH3x8JuRQe7NN2ZCV_XQmRM.roa (hash: bnv6CBVN0TxP3itZ4ZFUesEngt/ft27+17IUFJfqBMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:a5:82:48:18:bf:92:07:7e:e3:04:27:d1:5a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
        Validity
            Not Before: May 12 14:00:56 2026 GMT
            Not After : May 13 14:00:56 2026 GMT
        Subject: CN=d090963eec21fe7ac3bb75a3c9297b3c8a56ac9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:b6:79:1d:b9:fe:a2:62:53:6c:67:7e:b3:
                    00:89:fa:34:41:f8:8b:4c:3b:8d:a9:28:c3:f2:de:
                    94:a0:e0:ba:87:01:38:f5:d8:fe:25:52:4d:ff:c3:
                    03:14:f5:80:b2:d5:e2:1f:43:c9:47:2d:89:7f:9e:
                    85:89:20:87:af:c4:e4:32:a4:a7:e6:da:af:a1:e3:
                    2e:fd:05:76:9e:a3:63:c9:e2:d1:af:08:45:96:e5:
                    32:5f:ae:55:34:d6:e0:73:06:13:45:62:1e:3b:8b:
                    5c:ef:c5:3f:59:b9:fb:d9:0e:99:0d:5f:fb:bf:b9:
                    d9:46:72:a9:1c:28:a1:7f:b7:84:6e:26:e1:2b:99:
                    e1:f7:92:2b:5e:ed:b9:3a:74:e3:fe:2d:f2:97:59:
                    fb:cf:70:74:c0:d2:3a:16:f6:80:55:7e:b4:ce:ab:
                    cc:a0:3b:e7:d1:27:3d:11:71:a6:a1:a2:ef:d1:eb:
                    f8:b0:09:ad:09:9b:8c:ae:b6:91:2d:a3:cc:e3:11:
                    aa:1f:0b:2b:0b:25:67:13:27:ac:3c:64:f1:da:cb:
                    75:8b:f7:eb:ef:5a:ca:f3:79:5c:6d:8b:71:e0:c4:
                    0c:34:79:d1:08:a7:9b:55:16:10:65:23:e6:7e:f8:
                    ed:19:f2:1d:f7:34:b9:0e:ec:b9:d9:d5:87:0d:cb:
                    f3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:90:96:3E:EC:21:FE:7A:C3:BB:75:A3:C9:29:7B:3C:8A:56:AC:9F
            X509v3 Authority Key Identifier:
                keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:66:8f:f2:eb:2f:16:91:25:ce:a7:a5:28:9e:47:15:53:c7:
         a6:b8:da:b8:4a:9a:d3:7e:fb:b4:b0:2d:29:e7:5b:11:58:29:
         af:17:8a:09:48:40:39:ed:5f:98:70:1c:2f:d0:e6:e3:f6:cd:
         d6:a8:b5:b1:c2:ac:82:b4:fc:f7:b1:4f:1a:26:93:08:d9:44:
         a7:22:c3:8f:4b:f0:66:0e:a3:98:f9:0a:ee:a1:b6:d3:c2:22:
         b2:9d:6a:49:92:33:9d:95:fc:8d:4a:28:d3:2c:d3:b5:1c:9f:
         c9:43:51:5c:6e:df:f2:56:e0:77:62:cb:4b:82:a2:d3:ec:0f:
         b9:c3:f6:5d:f2:a7:15:bd:22:bf:7f:2a:2a:86:68:2a:7d:97:
         f8:f1:95:6d:d7:bc:d9:a3:5b:e3:23:c6:9f:ce:94:4b:32:65:
         8f:48:a0:57:62:5a:33:31:bd:3d:49:45:cc:c5:3a:b0:d4:6e:
         85:c2:3f:5f:0f:1d:21:56:19:a2:c6:41:20:18:5a:a5:9a:6c:
         ef:26:89:1e:e7:7d:d7:e3:42:34:0c:38:9f:60:33:0a:9c:d1:
         b9:d4:23:41:8c:19:04:6f:10:d6:16:37:0f:a3:df:9b:66:48:
         dd:1f:47:e8:77:89:47:d3:4e:77:8e:96:a9:e3:69:e3:f4:a3:
         fa:9e:e5:6e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4cfaWCSBi/kgd+4wQn0VrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MThhNWY4Yjk1MTUwMTdjOGQ2NDg4YTlhOTQ3ZDQ4MjBi
NmZiNzkwHhcNMjYwNTEyMTQwMDU2WhcNMjYwNTEzMTQwMDU2WjAzMTEwLwYDVQQD
EyhkMDkwOTYzZWVjMjFmZTdhYzNiYjc1YTNjOTI5N2IzYzhhNTZhYzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyK2eR25/qJiU2xnfrMAifo0QfiL
TDuNqSjD8t6UoOC6hwE49dj+JVJN/8MDFPWAstXiH0PJRy2Jf56FiSCHr8TkMqSn
5tqvoeMu/QV2nqNjyeLRrwhFluUyX65VNNbgcwYTRWIeO4tc78U/Wbn72Q6ZDV/7
v7nZRnKpHCihf7eEbibhK5nh95IrXu25OnTj/i3yl1n7z3B0wNI6FvaAVX60zqvM
oDvn0Sc9EXGmoaLv0ev4sAmtCZuMrraRLaPM4xGqHwsrCyVnEyesPGTx2st1i/fr
71rK83lcbYtx4MQMNHnRCKebVRYQZSPmfvjtGfId9zS5Duy52dWHDcvzKQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNCQlj7sIf56w7t1o8kpezyKVqyfMB8GA1UdIwQY
MBaAFPkYpfi5UVAXyNZIipqUfUggtvt5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SaWwtTGxSVUJmSTFraUttcFI5U0NDMi0zay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvYjIyZDZlLTRjNGYtNDU5ZC1hMDQ4
LWRkMzQ3NTM3NjgzZS8xLzEtUmlsLUxsUlVCZkkxa2lLbXBSOVNDQzItM2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI3L2IyMmQ2ZS00YzRmLTQ1OWQtYTA0OC1kZDM0NzUzNzY4
M2UvMS8xLVJpbC1MbFJVQmZJMWtpS21wUjlTQ0MyLTNrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWaP
8usvFpElzqelKJ5HFVPHprjauEqa0377tLAtKedbEVgprxeKCUhAOe1fmHAcL9Dm
4/bN1qi1scKsgrT897FPGiaTCNlEpyLDj0vwZg6jmPkK7qG208Iisp1qSZIznZX8
jUoo0yzTtRyfyUNRXG7f8lbgd2LLS4Ki0+wPucP2XfKnFb0iv38qKoZoKn2X+PGV
bde82aNb4yPGn86USzJlj0igV2JaMzG9PUlFzMU6sNRuhcI/Xw8dIVYZosZBIBha
pZps7yaJHud91+NCNAw4n2AzCpzRudQjQYwZBG8Q1hY3D6Pfm2ZI3R9H6HeJR9NO
d46WqeNp4/Sj+p7lbg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:52 2026 by rpki-client