Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
File:                     RtlEd8i1TRLsiz97bZrnjlELI9g.mft (raw, json)
Hash identifier:          5mdVjNlY/NjvR5iFbudCa0ipoNQ/C7UGnmhCfxF8Zi8=
Subject key identifier:   FA:25:E8:85:AC:76:D9:E6:7E:93:6F:B9:C6:56:03:ED:9D:F9:6F:57
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Certificate issuer:       /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial:       019FA9E2D84A9BB237C96C4B9E49FC837D06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 18:00:43 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:43 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:43 +0000
Files and hashes:         1: 3CbB-gU8Fkh_ywYdbqAJCeJYWoE.roa (hash: iBZA24ojW5yz7VpoZ8gZBo7ejClO8z0JYYTLlgfEF4Q=)
                          2: 8dBWTikeSwPQrxmOaOEevN3Ky5M.roa (hash: LPQ/VxgH0ra1pTHuR48ftWH7EohOaNKkY/IoU3NZQmA=)
                          3: DbBkcBKTLwUVIRYiZoMGLtLABqc.roa (hash: nYJ7uYsvXEIvKqfy6utLXX5lQJgID0iu/HQASNofn+k=)
                          4: RtlEd8i1TRLsiz97bZrnjlELI9g.crl (hash: fj3NFB4beMDDmIR710KuHyTNi6/tdqvwWZ7vxaWSc8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:d8:4a:9b:b2:37:c9:6c:4b:9e:49:fc:83:7d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
        Validity
            Not Before: Jul 28 18:00:43 2026 GMT
            Not After : Jul 29 18:00:43 2026 GMT
        Subject: CN=fa25e885ac76d9e67e936fb9c65603ed9df96f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:96:74:db:b6:25:0c:78:94:02:b3:07:24:
                    24:b5:e0:c2:47:6c:70:75:22:af:b0:af:e1:09:c4:
                    09:ba:19:d7:6d:fe:78:98:8a:94:a5:4c:6f:f1:68:
                    b5:b9:a2:25:50:14:8c:81:aa:08:84:cb:69:67:4c:
                    5e:4a:94:0c:f1:85:06:9c:fb:b8:60:7d:44:8e:1d:
                    c8:db:2a:33:32:5e:87:ab:87:ff:8c:87:1c:1e:7c:
                    8d:e2:ac:9d:75:e5:6a:ed:f5:43:1a:34:7d:8b:a5:
                    f9:e5:12:eb:30:4c:28:13:14:d6:90:49:88:3c:cf:
                    71:32:ed:4c:63:17:18:7f:2d:6b:e2:5b:fd:0c:0c:
                    13:e4:5d:db:b6:22:9f:26:6c:60:5a:ae:9c:93:54:
                    c3:a7:19:87:b6:be:c2:62:63:ab:e9:b5:36:28:94:
                    f0:0a:ae:f5:eb:92:71:1b:53:dd:50:89:a8:91:9a:
                    eb:07:9c:a4:18:3d:ee:f8:49:d0:c8:94:72:6c:24:
                    ab:97:a1:21:e0:9d:e5:5c:f2:45:3c:5e:66:74:90:
                    b8:6d:09:70:72:e8:fa:b0:fd:76:82:8a:1a:be:40:
                    3c:6c:2a:a9:8b:c9:36:8b:f5:ba:14:99:1b:bb:d5:
                    be:63:19:d8:ae:f2:9c:9f:05:eb:70:fb:d5:a7:a5:
                    07:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:25:E8:85:AC:76:D9:E6:7E:93:6F:B9:C6:56:03:ED:9D:F9:6F:57
            X509v3 Authority Key Identifier:
                keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:82:d3:96:2a:25:ce:b6:ce:37:04:15:6f:28:2b:c1:ed:
         ee:8e:36:20:9f:c9:30:11:3a:cc:5a:03:69:34:37:f4:b7:15:
         fb:d9:f1:f8:07:74:2a:8c:51:9c:69:54:18:aa:8a:d7:39:17:
         e5:87:72:2f:e5:46:53:33:2d:b1:e1:3b:3d:79:81:d4:8f:bb:
         5e:c7:19:2b:9b:39:20:72:2b:26:ab:a9:2b:cd:a4:f5:34:be:
         28:e4:3d:84:84:84:47:a8:9e:ac:9d:fd:f3:6e:7a:2c:e6:4e:
         7d:f2:14:bb:e5:d3:2c:3e:0b:48:5e:9d:8c:03:ab:83:c3:58:
         ed:38:e0:66:89:a7:88:18:9f:fd:06:f1:26:7e:85:bb:0f:0f:
         79:6c:74:30:e8:24:1c:ae:8c:3c:30:2e:af:99:1b:6f:34:fb:
         27:28:68:54:c6:20:db:8f:7e:8b:6e:55:c1:a7:38:94:91:3f:
         b2:d9:da:13:03:d9:cf:1d:41:3e:17:5f:e5:b5:b3:ab:f0:c1:
         30:38:8f:a5:be:ef:87:93:49:2d:92:6b:47:a3:c0:98:84:fa:
         d2:44:1d:4b:ac:86:ab:5d:82:29:0e:fd:29:b3:25:e0:8c:8c:
         46:52:7b:4e:04:d3:ba:fe:36:7c:dd:7b:31:58:a9:55:a9:6b:
         9c:9b:8f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:33 2026 by rpki-client