Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
File:                     RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json)
Hash identifier:          y+nKDM9eChxnmAr9Yi1X2ig8/tpP1xSVcs1CyFBGfsY=
Subject key identifier:   A0:58:6F:06:01:8C:35:F0:D1:78:D6:4F:89:43:57:C5:D2:A8:61:0C
Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
Certificate issuer:       /CN=44d2e7578aac94f42960a780d3996da8bb469477
Certificate serial:       019D2A72BABE9E2E431FB360D9B332D7AF0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
Manifest number:          0F6F
Signing time:             Thu 26 Mar 2026 14:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:55 +0000
Files and hashes:         1: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: xk6VAR71V9Bxup/4GrMxVojeI766YPM7/RY+ojHGzeM=)
                          2: mmMBLkcfazO-0rk3Rxbyg9fkIoI.roa (hash: V44Naao5RDfVhy6IuyFd+Vu8qSPEdskdDn/73lkjw0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:ba:be:9e:2e:43:1f:b3:60:d9:b3:32:d7:af:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477
        Validity
            Not Before: Mar 26 14:00:55 2026 GMT
            Not After : Mar 27 14:00:55 2026 GMT
        Subject: CN=a0586f06018c35f0d178d64f894357c5d2a8610c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:36:f5:5b:21:3f:78:b6:68:25:c4:55:6f:
                    3b:2d:cc:fb:70:e6:72:0a:6a:94:5b:a4:8e:2f:81:
                    1b:4a:57:1a:d5:e2:4d:8d:3f:53:68:05:83:c6:33:
                    0a:66:ba:88:83:a6:f3:c3:88:0e:73:9d:9e:82:17:
                    2f:43:df:c6:5c:d7:3d:e0:74:c1:df:71:d9:0a:9f:
                    6c:93:3d:87:4a:f1:f1:6e:46:f8:ac:da:5f:31:12:
                    b5:40:c9:30:37:30:0a:e5:06:3b:44:3d:c3:45:4e:
                    84:4f:a9:3c:48:61:47:25:51:41:54:0b:96:69:e5:
                    23:c5:95:40:1c:96:bf:7d:3b:51:7c:aa:be:d5:10:
                    ed:bc:5c:85:e5:97:9f:8c:5d:f8:df:0e:b7:53:55:
                    16:1e:6f:28:73:9f:2c:1e:54:fd:11:9a:e6:29:f6:
                    c0:e0:81:f7:82:81:a9:5d:b9:ff:d0:4e:84:71:e3:
                    c6:eb:a9:b9:bb:09:7b:ac:c9:dc:9a:3b:dd:a6:e8:
                    d3:e2:15:77:99:42:51:d2:7c:ba:c8:89:d3:68:c6:
                    49:2c:c2:74:70:1a:37:72:d6:65:fc:4f:6d:ee:e3:
                    d8:c2:70:7e:22:bd:fa:85:72:60:ac:22:37:0f:5e:
                    1f:78:3a:10:6c:28:d6:f4:1a:64:f2:3a:aa:09:ee:
                    10:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:58:6F:06:01:8C:35:F0:D1:78:D6:4F:89:43:57:C5:D2:A8:61:0C
            X509v3 Authority Key Identifier:
                keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f1:fa:4a:77:09:2c:fb:88:8c:ca:82:1f:9e:18:f8:e2:27:
         73:60:41:ec:d8:eb:d3:98:77:02:26:92:75:00:9b:81:1c:ce:
         4e:37:80:7d:62:48:6b:e4:e5:90:d7:cb:bd:cb:ef:d7:04:fd:
         84:81:68:54:44:cd:18:c0:fa:a2:36:f0:bc:cb:89:cf:85:40:
         8e:3f:a5:53:4c:db:2a:ab:7e:0f:bf:50:57:db:57:82:bf:2c:
         a9:8e:a2:03:ea:8b:b4:16:8d:dc:a1:ae:81:f0:c8:67:38:81:
         6b:ee:c6:25:89:c3:56:bd:2c:54:c8:11:9d:0f:61:d2:27:73:
         86:97:22:a6:e0:1e:38:7f:b9:08:c6:63:71:a1:9b:ad:69:b7:
         8a:72:55:85:95:b2:c8:26:ac:8c:b4:39:9e:46:09:87:4d:b0:
         da:06:d2:d9:2b:75:50:a0:de:d6:b3:2b:bc:92:a1:c6:93:c6:
         b4:21:d7:12:cd:6b:9d:66:6a:32:cb:c2:cc:96:33:3f:99:e8:
         f1:25:e9:cb:52:30:a9:f9:40:f8:dd:37:25:db:0a:7f:37:ac:
         fd:d2:c8:f1:30:f6:78:a8:7d:ca:f6:63:c9:4a:53:69:67:9e:
         09:21:f9:db:9a:99:fa:7e:21:a9:e0:92:c3:58:19:58:49:6f:
         c9:eb:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:57 2026 by rpki-client