Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
File:                     1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft (raw, json)
Hash identifier:          e9nEv/nG16HkXb0rwFVGDZVLFptre5PrS/SYK6BT7DI=
Subject key identifier:   C8:59:0A:BD:18:5E:E7:7A:12:22:68:F6:BB:6D:A3:86:F9:16:CD:B9
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Certificate issuer:       /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial:       019A5150B2C7411F786C95AC7A54EC857F95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
Manifest number:          0DF4
Signing time:             Wed 05 Nov 2025 00:00:34 +0000
Manifest this update:     Wed 05 Nov 2025 00:00:34 +0000
Manifest next update:     Thu 06 Nov 2025 00:00:34 +0000
Files and hashes:         1: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl (hash: CpOmL2SvF9bPAZUj8Au0gvCjumSj/eMLvIov/tBipZk=)
                          2: sFqvD3DbXn90SlSxedk-_VFVTi4.roa (hash: JtGbnCe8rSKW4mIxvzXo/VN0LsuEsKsi7iRdKw/3Gk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:50:b2:c7:41:1f:78:6c:95:ac:7a:54:ec:85:7f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
        Validity
            Not Before: Nov  5 00:00:34 2025 GMT
            Not After : Nov  6 00:00:34 2025 GMT
        Subject: CN=c8590abd185ee77a122268f6bb6da386f916cdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e5:c9:75:42:7d:50:dd:f1:fd:c3:56:66:95:
                    cb:4d:e2:1c:8b:28:02:2b:56:6e:5e:08:c1:60:47:
                    4f:33:9f:c4:80:2c:48:37:cc:db:67:03:ba:df:e0:
                    79:64:fc:22:0f:e9:ca:29:02:0f:88:e6:45:32:60:
                    40:d5:3b:e2:86:c1:81:93:df:99:e9:e2:56:6c:d4:
                    ae:42:26:02:f6:eb:3e:e4:76:18:de:39:fe:e9:66:
                    e5:cc:84:b8:8a:a4:6c:5d:0a:35:98:c1:45:4e:14:
                    f8:9c:56:60:04:18:97:e9:bd:54:ec:05:65:4c:8a:
                    bc:8c:c5:c3:d8:dc:d2:f8:e7:f4:29:75:a5:62:15:
                    ea:8e:52:52:54:4b:90:d7:e0:5b:52:83:d0:00:77:
                    aa:30:de:d4:5f:ab:ff:b0:80:b6:c2:27:45:79:2b:
                    0a:81:e6:62:79:98:7c:43:64:fb:8b:c4:04:81:70:
                    e1:20:00:a4:8a:df:f9:8f:dc:c3:92:88:05:c3:82:
                    3a:8a:f4:e7:27:39:cc:15:bb:b5:f9:96:d5:d4:f1:
                    23:48:28:b5:63:5b:97:33:48:aa:6c:2f:5b:75:1c:
                    3e:2a:07:aa:73:2e:f0:ec:ff:7d:74:5c:89:e6:60:
                    df:25:69:bf:c7:88:aa:1b:0d:6b:56:a2:50:43:75:
                    9f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:59:0A:BD:18:5E:E7:7A:12:22:68:F6:BB:6D:A3:86:F9:16:CD:B9
            X509v3 Authority Key Identifier:
                keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:3a:7d:db:73:d0:0a:0c:02:3c:aa:36:9c:e2:58:f1:50:4a:
         a0:3e:58:e4:be:57:8a:95:40:85:a4:c7:86:bc:5b:9a:1b:b2:
         35:94:de:1f:e8:b6:da:60:b5:ab:59:e1:d6:73:e3:b1:2b:a1:
         84:23:e4:03:27:0e:d5:d5:1d:f8:cf:0e:ef:0c:d0:c8:34:46:
         59:e7:94:e6:1e:64:71:37:40:d1:49:be:f3:2e:86:7c:c8:45:
         26:7d:89:64:07:e1:a7:a9:95:e4:d5:0d:88:a0:77:ea:24:94:
         1f:04:f0:e8:89:69:09:bd:01:64:18:d1:5e:bd:15:a6:63:a9:
         02:c5:4c:d2:80:62:e1:0d:7a:4d:61:30:24:02:b6:6a:3f:1d:
         61:03:69:c8:d9:06:59:02:75:00:c6:38:0d:8a:07:a9:a4:2b:
         02:db:c4:76:ca:84:97:4d:62:dc:d0:32:f4:26:a2:00:8e:c1:
         77:3c:8b:ae:29:33:1f:6d:be:99:89:b4:59:45:fb:f0:58:54:
         71:d8:a3:7a:b9:e4:f0:5b:ac:b5:6b:3c:ed:33:8b:74:28:ec:
         7f:3e:da:52:63:8f:95:23:19:b8:d8:28:20:6e:32:bf:f0:77:
         09:ab:e8:6e:42:91:27:8b:d7:04:17:b6:9a:53:63:a6:89:62:
         b4:c8:d7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:33:11 2025 by rpki-client