Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
File:                     RLnEibS7yF3nNEF-u6ThN7F8B50.mft (raw, json)
Hash identifier:          ZON8/G8ZG+oyOz73ujLEBXNJ2Db1JTQhhF90Ccgyfz8=
Subject key identifier:   E6:44:54:FF:BE:53:AC:E2:98:EE:9C:2A:00:99:E2:F8:3F:FB:83:3C
Authority key identifier: 44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
Certificate issuer:       /CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Certificate serial:       019D269654BB0B23E01C62AA0D99BAC8331D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
Manifest number:          075D
Signing time:             Wed 25 Mar 2026 20:01:19 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:19 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:19 +0000
Files and hashes:         1: RLnEibS7yF3nNEF-u6ThN7F8B50.crl (hash: uljCEw/R4yQRz0MR8hSOnY84s7jl7/41NUzkWxOzoKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:54:bb:0b:23:e0:1c:62:aa:0d:99:ba:c8:33:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b9c489b4bbc85de734417ebba4e137b17c079d
        Validity
            Not Before: Mar 25 20:01:19 2026 GMT
            Not After : Mar 26 20:01:19 2026 GMT
        Subject: CN=e64454ffbe53ace298ee9c2a0099e2f83ffb833c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:46:80:d9:21:00:21:84:18:0d:8b:8d:af:
                    4b:a8:8a:c7:13:49:47:38:69:73:de:28:a7:c6:00:
                    19:4e:6b:11:ac:af:df:ab:4e:84:6b:c5:87:54:1e:
                    5d:e3:26:1d:1f:24:bc:5a:59:53:16:ac:df:5a:aa:
                    81:f2:6b:ba:dd:de:b8:8c:0f:53:af:a5:30:7e:92:
                    5c:05:c9:7f:20:aa:f4:9c:42:da:40:fd:fc:a7:2b:
                    f6:e2:0d:59:fe:a1:a3:44:86:f1:77:77:5b:e2:55:
                    a8:6b:8c:85:d3:5d:c6:1f:0e:03:06:4c:c9:9f:3d:
                    8e:54:14:54:69:58:9a:d5:4b:eb:b7:6f:69:55:bc:
                    30:1a:9c:8a:94:b4:6e:11:ea:9b:39:a7:1e:59:0f:
                    09:78:a5:06:29:49:46:fc:01:4a:97:4f:5c:20:b2:
                    a8:52:b9:6d:d4:d6:13:00:5e:88:6a:e0:ef:e7:f7:
                    aa:df:cb:4c:a8:0f:6e:74:42:fd:de:17:10:88:23:
                    74:27:ea:8b:ea:64:ff:e2:16:6a:76:d3:a2:c7:be:
                    02:d1:1a:82:e5:2e:8b:60:13:63:07:da:6a:dd:b8:
                    57:c1:1f:1a:e2:ba:52:47:57:fe:85:cb:07:f0:d7:
                    dd:8a:b9:1e:c2:15:4b:d2:d6:29:d2:5f:7f:53:8b:
                    88:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:44:54:FF:BE:53:AC:E2:98:EE:9C:2A:00:99:E2:F8:3F:FB:83:3C
            X509v3 Authority Key Identifier:
                keyid:44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c4:4a:07:6e:78:c2:ef:d7:f2:b8:8e:7d:31:86:27:3b:6a:
         2b:dd:9c:df:91:a2:3e:d3:e3:8e:b9:cb:21:e6:75:b2:0c:fd:
         0a:ef:be:1a:a6:c2:76:cb:42:84:f8:17:0e:a6:41:ab:85:a8:
         69:c2:ac:1e:41:eb:93:e7:25:a2:61:84:1e:88:10:4c:51:3e:
         18:6c:6d:26:7b:8b:c5:83:42:f1:50:5d:d8:7b:21:73:40:75:
         19:cf:0d:11:49:67:ab:e7:2d:ab:c7:76:7c:58:30:37:ea:71:
         9e:50:e7:4f:40:5c:f3:ac:e1:32:73:b6:b9:79:95:88:78:ab:
         5d:bf:ea:83:a4:f9:7b:93:91:b7:f6:9c:1e:c3:2c:22:ea:7f:
         16:68:cc:66:32:bc:72:d0:b0:0e:b0:b4:5a:e2:46:71:f2:44:
         e9:eb:59:ab:c6:5b:1e:42:03:5f:77:2b:d8:e4:2a:83:36:62:
         48:d2:26:10:4e:63:65:ee:0d:e5:d4:7d:2d:7c:25:0c:b8:aa:
         6d:20:b4:f7:85:55:6e:ec:d8:1f:42:95:54:f2:eb:b3:c4:88:
         87:8f:d6:2b:68:75:07:8c:2f:bb:c0:dd:e2:60:1a:4d:00:96:
         57:2d:22:0f:91:a8:6b:e1:eb:de:34:8d:ea:bf:81:b6:4f:b7:
         5f:b9:de:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:48 2026 by rpki-client