Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
File:                     RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json)
Hash identifier:          47yv9qyHslqgntk+4F814VDJLYcdDM4N82pfftwhopQ=
Subject key identifier:   F2:CE:DE:0E:65:96:81:EF:A8:4D:55:7B:77:F2:DC:43:E2:5F:D2:F0
Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
Certificate issuer:       /CN=44d2e7578aac94f42960a780d3996da8bb469477
Certificate serial:       019F965BAB4C9A2C3F38588A346B32E9B367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
Manifest number:          10B0
Signing time:             Fri 24 Jul 2026 23:00:17 +0000
Manifest this update:     Fri 24 Jul 2026 23:00:17 +0000
Manifest next update:     Sat 25 Jul 2026 23:00:17 +0000
Files and hashes:         1: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: mJwNTrTR24TgOwI207UxYuK7zc8rAFHW1LeSHNjMlQk=)
                          2: mmMBLkcfazO-0rk3Rxbyg9fkIoI.roa (hash: V44Naao5RDfVhy6IuyFd+Vu8qSPEdskdDn/73lkjw0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:5b:ab:4c:9a:2c:3f:38:58:8a:34:6b:32:e9:b3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477
        Validity
            Not Before: Jul 24 23:00:17 2026 GMT
            Not After : Jul 25 23:00:17 2026 GMT
        Subject: CN=f2cede0e659681efa84d557b77f2dc43e25fd2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0e:eb:9a:be:c5:c0:95:a0:df:eb:0d:f8:c4:
                    1f:a7:37:cf:47:3d:c7:d0:b3:d2:d7:c1:fd:9c:75:
                    10:1b:3c:6b:7f:fb:ed:ae:ba:05:61:37:87:6c:f3:
                    f3:90:72:d1:94:50:1c:80:d5:21:3b:27:67:4d:36:
                    3d:dd:10:2a:ae:d3:37:1a:40:c9:c3:d5:e9:3f:94:
                    5d:cd:18:ba:db:27:b5:8b:8c:91:f6:fa:cb:f9:19:
                    d5:3e:b6:b9:a8:b1:af:a1:37:d0:42:03:9a:4f:1f:
                    02:72:b2:8b:db:a3:9f:55:29:b4:97:b7:45:22:04:
                    c8:7e:f1:d0:f5:a6:23:91:a7:d3:74:0e:83:84:2b:
                    ea:bd:dd:d1:23:95:b0:af:bd:62:0f:39:2a:ee:6b:
                    82:73:01:c8:df:cc:26:ea:0d:44:61:65:ad:91:75:
                    e7:77:69:bb:b6:5f:3e:76:2d:19:fb:03:98:ac:0c:
                    c9:d5:01:d3:27:ca:d9:56:2a:cf:a0:65:c2:1a:34:
                    2c:09:95:3a:4e:84:c3:0b:dc:df:5e:6f:e8:d6:4f:
                    7b:d5:3a:88:0a:b3:44:9f:ec:e9:8b:c5:27:fd:8c:
                    14:8f:25:9b:5b:db:22:69:f4:60:7d:6d:e0:96:5d:
                    e5:00:fa:d9:68:00:0b:32:68:4d:65:b4:53:4e:d0:
                    0c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CE:DE:0E:65:96:81:EF:A8:4D:55:7B:77:F2:DC:43:E2:5F:D2:F0
            X509v3 Authority Key Identifier:
                keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:01:33:ae:50:68:33:30:a4:c3:8b:88:56:9b:7d:be:5d:7c:
         40:2e:f5:cd:d1:8d:4e:13:28:c2:a4:67:48:f3:c9:83:73:2b:
         bc:35:ef:f3:80:70:3e:2d:8b:dd:b0:72:fc:77:07:a0:c1:ec:
         cb:e8:d1:87:8b:2c:42:61:46:27:aa:63:37:a7:4e:f7:f7:ab:
         26:dc:70:56:47:81:84:5e:33:d1:14:d1:4b:33:61:1e:31:bd:
         d3:12:c8:0d:14:7f:dd:07:d8:36:3d:4c:05:64:f5:b7:03:16:
         4c:7e:22:f1:a9:65:60:b2:4f:1e:e2:23:a8:d0:89:05:b8:66:
         4f:9b:66:3a:a6:4c:89:bb:76:94:58:33:cb:25:c6:3e:d6:6a:
         74:6c:c9:21:71:6b:b0:b0:46:00:91:d1:42:31:96:92:50:eb:
         96:f9:f0:f0:7f:17:52:9c:b4:e2:3e:4b:c6:7a:ff:2a:40:32:
         0a:c6:98:cb:92:ce:4f:c3:08:03:cc:1e:0f:ba:43:e8:30:49:
         a7:4c:a4:03:5c:d6:98:0b:fa:53:89:3a:e1:9d:b2:3d:f0:c6:
         2c:30:ce:e1:8e:33:b2:1e:18:39:8d:c4:db:48:a7:0a:5a:38:
         4f:9a:bf:18:d4:20:bf:ac:f6:96:94:4b:cf:55:16:19:e6:54:
         c6:73:28:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:24 2026 by rpki-client