Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
File:                     1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft (raw, json)
Hash identifier:          RckObmw1ZqTZQdMgDqZYj3XZ8/Wqp0nklAAnLDYwc8w=
Subject key identifier:   29:4E:1F:E0:D6:49:8D:0C:B4:65:D8:3B:4E:57:CB:52:CE:72:B9:4D
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Certificate issuer:       /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial:       019849D2F8B7C522C6E5A474B607CDB6E349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
Manifest number:          0CE7
Signing time:             Sun 27 Jul 2025 03:00:19 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:19 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:19 +0000
Files and hashes:         1: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl (hash: WbeobiqBxMPMfvRs1ku1+INwL+4P5Ceeejjat9AvjXE=)
                          2: sFqvD3DbXn90SlSxedk-_VFVTi4.roa (hash: JtGbnCe8rSKW4mIxvzXo/VN0LsuEsKsi7iRdKw/3Gk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d2:f8:b7:c5:22:c6:e5:a4:74:b6:07:cd:b6:e3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
        Validity
            Not Before: Jul 27 03:00:19 2025 GMT
            Not After : Jul 28 03:00:19 2025 GMT
        Subject: CN=294e1fe0d6498d0cb465d83b4e57cb52ce72b94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:13:45:0a:09:76:7b:84:57:cb:50:91:bf:
                    8b:1f:72:73:4c:3b:b5:4e:d6:3b:79:1e:ac:93:06:
                    97:0e:b9:b7:f0:c2:5a:70:f9:a8:20:71:da:d7:2c:
                    66:de:51:aa:51:34:83:3e:2a:97:cd:83:c0:ca:a9:
                    84:20:db:34:b3:58:52:e3:70:11:ca:14:dd:61:74:
                    2f:de:28:c8:d4:ce:f9:30:c8:1c:38:7d:d0:b3:47:
                    3a:91:a6:ca:59:a0:cd:f0:8d:b1:8f:40:ee:63:83:
                    bd:29:f9:11:33:f9:20:9d:e3:f3:98:61:72:43:1e:
                    d0:d4:da:99:0e:bf:b6:bf:e4:9f:f6:a3:59:0d:3b:
                    ad:52:96:cb:fd:8c:a7:19:c7:af:93:4e:a4:36:6c:
                    22:b4:77:77:0c:f6:d7:be:ad:53:70:59:ba:c4:c5:
                    5d:2f:be:f8:b4:46:fa:62:c4:91:78:04:cb:4c:2c:
                    2f:54:0d:7f:58:c7:b7:9e:f1:5f:6f:7a:ad:a7:f8:
                    1d:ab:25:c0:76:76:2a:58:40:c3:46:97:08:c6:26:
                    c0:6c:23:26:21:e2:a9:55:53:33:43:d1:39:51:a1:
                    cd:d6:08:1e:de:5b:90:1a:4a:9d:c9:4b:13:2f:96:
                    ac:cd:f8:7f:07:d3:0b:52:26:12:5e:75:2f:46:f9:
                    92:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4E:1F:E0:D6:49:8D:0C:B4:65:D8:3B:4E:57:CB:52:CE:72:B9:4D
            X509v3 Authority Key Identifier:
                keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:a2:e8:5b:f0:23:ba:54:01:9f:31:67:48:f6:4c:09:89:
         f5:cc:0a:6d:ba:47:c6:f3:47:3a:5a:2c:a6:b7:c4:55:72:a8:
         96:f7:3a:2c:6f:32:f2:7b:c6:ba:97:02:53:d9:b9:73:85:b7:
         b1:19:d4:92:4b:52:6f:b0:f9:92:f4:61:ec:19:e2:6e:b3:50:
         c0:6c:af:23:07:96:87:e1:57:28:63:cb:f8:66:62:fa:5a:46:
         23:ad:47:b7:cc:50:95:13:92:99:0b:43:a5:b0:95:6e:a5:80:
         f9:5d:88:5b:8f:6c:41:87:3f:86:4c:ec:e9:f6:b5:85:b1:31:
         4a:23:d0:85:af:1d:2f:eb:dc:d9:c6:f5:06:94:25:60:fc:34:
         a6:e9:df:95:4e:fb:62:85:b4:e9:84:df:2a:47:87:81:83:20:
         f0:61:e7:97:43:3e:f8:98:6f:80:0a:6f:75:7e:15:71:ba:69:
         35:b8:74:87:77:3d:16:76:4a:20:d4:c2:db:9c:7d:d1:35:cc:
         f8:5e:dd:d7:4f:52:cd:a7:06:3e:e3:a8:ff:69:02:56:5a:24:
         31:88:00:7a:c3:f6:54:db:93:f5:c3:0a:c6:6d:3c:c5:06:82:
         8c:e7:b8:26:e6:c9:a4:fa:9b:ea:46:6b:2c:1e:bf:82:64:d0:
         d8:8a:7e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:58:55 2025 by rpki-client