Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
File:                     1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft (raw, json)
Hash identifier:          y86JuCy3hN/dXICmkFKsDmoT92/lzZjfxCWQm57k79A=
Subject key identifier:   6D:C8:B8:EC:10:CA:DD:17:58:42:4C:B4:8A:D3:B3:3E:46:4D:17:A1
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Certificate issuer:       /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial:       01A0BE79318ECB228FEB20385C66541C4E24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
Manifest number:          1148
Signing time:             Sun 20 Sep 2026 11:00:08 +0000
Manifest this update:     Sun 20 Sep 2026 11:00:08 +0000
Manifest next update:     Mon 21 Sep 2026 11:00:08 +0000
Files and hashes:         1: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl (hash: 9CoDW4QAeOyH+TbR3VF//RDOQ3aUOjwMkH2aRa4tZTE=)
                          2: wJNpYH3x8JuRQe7NN2ZCV_XQmRM.roa (hash: bnv6CBVN0TxP3itZ4ZFUesEngt/ft27+17IUFJfqBMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 11:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:79:31:8e:cb:22:8f:eb:20:38:5c:66:54:1c:4e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
        Validity
            Not Before: Sep 20 11:00:08 2026 GMT
            Not After : Sep 21 11:00:08 2026 GMT
        Subject: CN=6dc8b8ec10cadd1758424cb48ad3b33e464d17a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:72:c6:94:7b:71:cb:11:e6:f8:a3:de:ad:4a:
                    da:2e:10:11:4c:40:bf:e6:91:f2:6f:46:51:09:17:
                    cf:2c:ea:dc:43:66:ab:85:de:fa:c6:2c:47:f4:70:
                    4f:28:a1:d3:2e:66:8e:e6:e1:28:1e:e5:85:fe:9d:
                    36:bc:0c:86:28:95:4d:94:e9:10:4b:54:8e:45:4d:
                    6a:44:49:47:36:4e:bd:7f:aa:fc:c3:18:97:17:8b:
                    c8:91:1c:b1:c7:3e:9b:fa:0d:28:e1:e6:64:d9:c7:
                    2a:61:a3:de:31:3f:91:77:48:36:fc:3b:be:6d:b6:
                    5a:ba:be:6c:09:70:2f:eb:27:5e:f8:12:40:4e:bc:
                    1c:8a:05:0d:38:90:82:88:13:51:d1:3a:33:3c:4e:
                    e8:f7:04:40:fb:f1:9f:6b:76:0f:e4:f7:c8:2a:d6:
                    c8:d2:ac:df:85:a3:46:c8:1f:68:fb:51:09:b6:2a:
                    da:bd:1c:1c:ff:f4:dd:e0:b2:bd:8b:b9:5b:9c:3c:
                    59:96:74:2a:78:0c:de:79:37:8a:c1:6b:24:1f:cf:
                    66:9e:c7:2e:fb:ea:90:c4:3e:9d:0a:30:8b:79:3a:
                    1d:a2:2f:0f:df:2b:5d:ce:87:d4:bc:56:fd:80:5b:
                    f7:be:64:da:5b:87:ed:4c:3f:66:b8:fc:1b:f4:74:
                    0e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C8:B8:EC:10:CA:DD:17:58:42:4C:B4:8A:D3:B3:3E:46:4D:17:A1
            X509v3 Authority Key Identifier:
                keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a2:07:0c:89:cd:f2:1d:d9:ab:a8:5e:ff:5c:04:c2:ef:fe:
         a0:42:3c:37:5e:14:9b:c8:77:37:9d:53:e0:44:26:5d:0b:2a:
         7c:f8:b0:65:37:73:4b:e7:79:9a:e5:c2:7d:65:44:10:81:9c:
         e4:1d:6a:12:0f:ac:40:4e:6a:a8:47:b7:8b:c6:10:e5:3e:0f:
         03:aa:b7:ad:f3:b1:e7:1f:b1:15:57:c7:c3:3d:51:49:fd:f1:
         6c:76:20:84:6f:d6:54:d2:20:b1:a7:1b:b5:c9:36:aa:2a:b6:
         36:47:6c:17:b5:55:fe:d4:62:51:94:9e:4d:a7:9c:21:00:c9:
         f6:2e:60:bf:f7:7a:a9:e1:c9:82:d7:a1:ad:c6:42:47:39:5b:
         53:ee:9a:28:90:81:07:4f:cb:7c:4f:84:c9:7b:27:a5:e3:4c:
         3c:c4:33:40:28:07:28:b3:6b:e8:b9:84:20:ba:01:8a:7f:96:
         a0:02:ff:26:00:e9:74:04:0d:e7:9e:af:47:c8:0f:fa:8d:ed:
         8b:b6:4a:1e:78:3f:0b:8d:fb:bd:1a:4d:46:25:00:7c:f2:de:
         b4:93:92:ee:9b:67:85:93:84:7a:87:2b:8b:d8:e9:c3:7b:58:
         b3:2e:a1:d9:fe:37:52:d2:0e:c3:6f:e9:b2:52:cd:f5:f6:17:
         a7:7e:63:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:55:09 2026 by rpki-client