Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
File:                     1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft (raw, json)
Hash identifier:          K7SEwKsCcWuG/BtBeU994aSv735wd1cGCqAWrMlqqNE=
Subject key identifier:   6E:81:8C:E8:93:07:6A:2E:C0:42:AF:1E:8E:75:D8:40:CC:47:41:E9
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Certificate issuer:       /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial:       01A0B6BFED8B964A6605BEC9093E27E7431E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
Manifest number:          1144
Signing time:             Fri 18 Sep 2026 23:00:26 +0000
Manifest this update:     Fri 18 Sep 2026 23:00:26 +0000
Manifest next update:     Sat 19 Sep 2026 23:00:26 +0000
Files and hashes:         1: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl (hash: VDjlqQidM0L7adj0IWtcltaXBMK/5td2xmQoXb+23N0=)
                          2: wJNpYH3x8JuRQe7NN2ZCV_XQmRM.roa (hash: bnv6CBVN0TxP3itZ4ZFUesEngt/ft27+17IUFJfqBMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:bf:ed:8b:96:4a:66:05:be:c9:09:3e:27:e7:43:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
        Validity
            Not Before: Sep 18 23:00:26 2026 GMT
            Not After : Sep 19 23:00:26 2026 GMT
        Subject: CN=6e818ce893076a2ec042af1e8e75d840cc4741e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0f:42:2b:14:23:8b:b7:bf:89:3e:1b:5a:bd:
                    9a:c7:a1:1e:89:86:98:01:41:27:6b:4d:f4:51:29:
                    ae:09:27:5b:93:67:cd:b6:c7:97:41:c6:15:36:6b:
                    24:f1:3c:c2:86:a3:da:ce:71:b8:4a:63:db:ee:54:
                    5e:64:9f:65:0c:00:74:9d:b3:1d:d1:31:95:3b:84:
                    da:1e:ec:6f:1c:36:64:a8:72:73:8c:b8:6c:c8:26:
                    15:2f:95:c6:0c:5b:fa:00:5b:73:0c:60:db:48:92:
                    02:bb:3e:bb:b3:36:03:dd:40:09:61:6b:ba:1b:51:
                    96:18:7a:f7:c3:14:e5:27:e3:a2:a8:e7:1f:7a:ae:
                    81:42:aa:dc:31:74:1b:54:62:d3:f6:63:1c:27:b8:
                    74:1a:2e:d9:67:7a:a8:4b:91:ce:5d:8e:b7:ed:3a:
                    23:95:89:66:28:84:b3:4b:29:9e:84:38:83:2f:c6:
                    14:2d:b7:cf:e9:6b:a4:7c:b2:25:23:1e:d2:11:1d:
                    d3:a6:5b:9d:e3:a0:4e:ff:1c:b1:a0:d0:59:c5:4e:
                    af:16:c1:3e:a5:a0:b5:77:cd:49:49:94:bc:6d:54:
                    b5:75:79:e2:bb:c3:8e:09:af:8f:ed:19:31:86:7d:
                    86:92:16:b1:4f:77:8a:25:67:b4:4e:a2:c6:e9:8b:
                    7c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:81:8C:E8:93:07:6A:2E:C0:42:AF:1E:8E:75:D8:40:CC:47:41:E9
            X509v3 Authority Key Identifier:
                keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:80:3c:90:31:9f:73:b8:0c:06:9a:34:8f:e8:ab:97:aa:ed:
         a9:3b:49:c9:e8:b3:a4:43:8a:a9:c4:9b:d4:4a:f6:96:e1:b6:
         13:e8:99:d6:7f:65:80:39:db:b3:82:72:14:60:d7:e5:67:f8:
         88:be:ed:78:ea:b1:64:74:2c:16:ef:c4:25:bc:81:cf:43:d0:
         9e:aa:35:58:67:14:54:a0:81:8c:90:d5:43:81:6b:91:97:4a:
         42:b0:c2:0c:f5:4a:bc:2f:b2:a9:28:a4:e2:9d:39:87:be:f4:
         65:af:29:22:0a:fa:01:ac:88:20:b8:3c:64:29:95:71:d0:2f:
         e5:cb:6d:dc:30:fa:c2:2b:c2:50:b8:73:fd:61:cd:27:d4:04:
         ca:3a:dd:91:3b:ca:bd:11:86:42:b2:06:e4:7c:76:82:f6:5c:
         b5:63:e2:0d:5b:d5:df:1a:19:2f:0c:fe:10:7f:45:4a:28:60:
         0d:dc:65:8c:ec:61:f3:44:e5:9b:d2:19:2b:29:12:61:d8:34:
         cb:08:12:77:d7:6d:8d:75:f2:35:ec:c5:56:0f:9a:79:3d:7a:
         34:d1:29:7e:c4:ee:b6:df:6a:db:92:42:fe:8d:2c:26:ec:78:
         ea:c2:a7:0f:92:e8:2c:88:2c:58:ed:2d:b6:b9:30:5a:01:b6:
         e7:a8:f0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:06:20 2026 by rpki-client