Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
File:                     1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft (raw, json)
Hash identifier:          HMA4oVgidYJMBzPppvv8LglJLhHdRzX/8fH8hKFd5Yk=
Subject key identifier:   C4:33:91:E9:90:AF:D7:A2:67:14:82:DA:3C:75:C5:8D:63:A7:38:B9
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Certificate issuer:       /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial:       01964067F570E2BEC5955AE8C173F0FBE410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
Manifest number:          0BD9
Signing time:             Wed 16 Apr 2025 21:01:16 +0000
Manifest this update:     Wed 16 Apr 2025 21:01:16 +0000
Manifest next update:     Thu 17 Apr 2025 21:01:16 +0000
Files and hashes:         1: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl (hash: 4kHzoS9NbjCoX2eJ/OP45mzl42CFUumER3I3TRRo97c=)
                          2: sFqvD3DbXn90SlSxedk-_VFVTi4.roa (hash: JtGbnCe8rSKW4mIxvzXo/VN0LsuEsKsi7iRdKw/3Gk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:67:f5:70:e2:be:c5:95:5a:e8:c1:73:f0:fb:e4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
        Validity
            Not Before: Apr 16 21:01:16 2025 GMT
            Not After : Apr 17 21:01:16 2025 GMT
        Subject: CN=c43391e990afd7a2671482da3c75c58d63a738b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b4:df:be:53:02:27:49:a9:29:93:66:2e:7d:
                    71:52:2a:1d:b4:0b:e6:04:9e:f2:8c:98:8a:9e:0e:
                    3b:a5:cc:37:f9:58:fe:87:76:d9:ce:4c:d1:69:b4:
                    c9:a6:0a:62:c2:1f:da:6d:ee:61:cb:20:16:b9:76:
                    fc:93:b5:96:a5:38:f5:07:ca:10:62:80:70:8b:6d:
                    2e:3b:bb:75:70:63:ac:91:a8:0c:88:f9:36:99:3d:
                    ef:6c:6e:cb:7a:b9:63:8d:c4:da:0b:0c:19:22:74:
                    a1:d7:4d:28:8c:83:63:0f:c7:f3:6c:bd:1a:ae:ef:
                    d7:21:a3:1c:9f:e3:fb:9f:96:4f:0a:45:6c:cb:ea:
                    73:30:27:70:c8:74:65:63:6d:fd:87:44:7f:cb:d8:
                    f7:63:64:c7:aa:2a:04:78:4b:66:5b:aa:d2:99:e3:
                    eb:d2:db:c8:be:67:be:35:a9:43:e8:32:6d:df:a2:
                    71:97:b4:ce:f3:9b:6b:6a:59:16:e7:9a:b7:85:75:
                    1b:6f:5c:4d:84:f7:44:b2:35:6f:7d:10:52:a6:f5:
                    c0:af:6f:c7:1f:27:90:b9:54:13:e0:c6:86:ba:d3:
                    a9:88:83:bf:0b:a5:3a:7a:07:b5:ab:4e:21:c2:09:
                    73:36:cd:01:0e:42:37:af:6f:2d:66:e9:99:d6:22:
                    11:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:33:91:E9:90:AF:D7:A2:67:14:82:DA:3C:75:C5:8D:63:A7:38:B9
            X509v3 Authority Key Identifier:
                keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:84:4a:45:0d:7b:b3:67:b5:88:8d:5c:09:bc:cb:14:d6:fa:
         a2:5e:2e:d5:a9:cc:a9:b8:e9:ff:27:20:57:3f:74:d8:c0:7a:
         0e:d0:95:58:ae:30:76:cf:c3:9f:43:cb:37:40:d0:d2:2c:5e:
         db:9c:f9:2f:81:40:dd:dc:3f:fc:a6:34:11:f4:a8:cd:48:1f:
         2f:66:c9:76:19:8c:66:9f:8e:85:60:d6:55:05:bb:22:67:29:
         b9:8e:4f:52:b2:aa:4c:30:f1:d3:3b:d2:c7:5c:34:dc:ff:0b:
         6b:24:a5:b4:19:e6:ca:8e:9b:a8:63:cc:08:2d:eb:f8:9f:26:
         d9:20:09:f9:25:2a:4b:5f:77:19:a1:78:4b:6e:eb:43:75:a8:
         e6:77:30:b8:c3:08:fd:3a:51:10:52:14:77:51:40:64:fc:79:
         9a:d2:ca:79:57:9c:ba:f6:c5:05:9c:2c:b5:50:26:f4:b7:32:
         4e:5a:48:3e:f9:9a:3c:9e:21:c0:a5:65:c9:6c:dd:02:ad:38:
         a0:1f:8b:a0:50:d2:08:9b:1e:3d:6e:62:fa:23:a0:cc:e6:93:
         d4:8e:f9:cd:9d:f8:2e:80:6d:b4:96:9d:41:26:e3:f3:28:b2:
         1f:56:f4:48:22:48:ac:64:24:83:cf:da:da:6b:0f:28:8e:97:
         95:19:1d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:08:02 2025 by rpki-client