Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
File:                     RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json)
Hash identifier:          qP90rj2RpuMPNsFz5XcD88soe0dSNolA3DCiYlkE9h0=
Subject key identifier:   5C:4F:F3:A2:B9:D8:F2:D8:86:26:7A:41:38:DF:36:30:0D:DF:BE:68
Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
Certificate issuer:       /CN=44d2e7578aac94f42960a780d3996da8bb469477
Certificate serial:       0199FC8F75191D090F28E359A9644B731BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
Manifest number:          0DC9
Signing time:             Sun 19 Oct 2025 13:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:24 +0000
Files and hashes:         1: Mls2HM8_FY_IKXa_7YokWR8k2as.roa (hash: CiqhaGVIRMfnCHendb0wwlGmTiUs+e665f1gVqsw+T0=)
                          2: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: bPOEZEQL5Y5XYv2RPbF+CR4Y+diUz9P1TkA1RF9B82E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:75:19:1d:09:0f:28:e3:59:a9:64:4b:73:1b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477
        Validity
            Not Before: Oct 19 13:01:24 2025 GMT
            Not After : Oct 20 13:01:24 2025 GMT
        Subject: CN=5c4ff3a2b9d8f2d886267a4138df36300ddfbe68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:b8:d9:a0:89:51:90:cf:e5:b3:2d:d4:90:
                    02:40:98:cc:59:ef:f5:53:32:97:8b:d1:6b:1d:74:
                    24:04:56:0d:58:d0:ad:ef:1f:69:0a:ec:68:60:40:
                    6a:5f:c9:4c:22:c8:26:10:35:35:f0:b0:70:26:a5:
                    58:d0:40:27:18:5a:6f:a9:47:e8:71:24:27:4c:87:
                    27:54:8a:1f:4f:b4:21:a6:c0:e6:d8:34:08:cd:37:
                    14:3b:80:d5:67:d8:d4:32:15:0f:8a:b8:3e:89:fa:
                    da:25:58:f7:e6:cd:c1:97:7e:15:31:3f:21:cc:66:
                    79:51:3b:6b:aa:d9:15:b1:66:46:1e:18:be:56:b7:
                    fa:8d:b8:e2:58:34:b1:b9:06:84:81:3a:dc:c3:60:
                    47:10:50:50:9b:bb:65:62:ca:9f:f1:40:dc:e7:5d:
                    ea:ad:6e:d7:a6:a5:96:e6:e6:28:1a:0e:73:fa:a6:
                    68:cf:44:6b:c2:9d:ea:ef:06:83:b4:f3:22:0f:a8:
                    b3:9b:65:93:be:6c:71:c6:bc:b0:06:99:4b:7b:a1:
                    79:0c:7d:ca:73:7a:1b:c4:a2:c1:f3:37:69:f6:bc:
                    68:91:f1:ae:9f:a6:29:0b:17:2a:97:11:67:c4:9e:
                    62:5e:bc:92:94:08:37:a1:65:0c:49:7f:3e:12:99:
                    c3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4F:F3:A2:B9:D8:F2:D8:86:26:7A:41:38:DF:36:30:0D:DF:BE:68
            X509v3 Authority Key Identifier:
                keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:29:22:e2:34:88:7b:bb:43:bf:d3:8a:41:82:55:57:57:57:
         93:da:b7:6c:09:85:a2:a1:e0:e2:7c:c1:01:17:fb:47:f7:dc:
         86:64:ce:a9:dd:ff:81:2d:dc:64:6c:ce:09:7e:aa:dc:02:d7:
         be:21:e7:00:e9:e3:83:db:e5:e1:ec:71:d1:13:a6:eb:d5:50:
         ac:25:1a:02:96:6c:28:53:39:9b:99:4e:df:10:fb:36:e4:90:
         36:51:03:de:fc:5d:58:7d:f5:2c:e7:9e:9e:25:b4:76:2f:1f:
         65:bf:85:a2:24:30:be:f6:e6:3b:48:f5:42:1e:d7:b5:4f:18:
         da:c0:f8:23:dc:b8:98:97:7a:76:51:8a:0f:68:90:a8:2a:f2:
         f2:75:6b:48:27:92:02:55:ab:63:3a:09:70:d8:0a:1f:13:63:
         42:35:42:fa:fc:3b:ac:dc:25:c0:6f:e9:51:f1:ed:5e:2e:c8:
         61:ea:3b:8b:cd:1e:50:9b:56:4c:ae:44:d2:fa:84:43:8f:e7:
         05:3a:ac:2c:0d:aa:ba:3a:23:7e:6c:ec:bb:36:f0:eb:b8:db:
         5d:d1:5a:42:8c:8c:c4:13:27:f6:3f:88:d5:f6:19:e5:e0:20:
         3f:9a:62:88:c5:62:0f:b3:c6:98:cf:ce:4b:e6:66:f2:d1:4d:
         50:c6:e9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:55 2025 by rpki-client