Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
File:                     RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json)
Hash identifier:          GMBTXTw3ciPpamVgpwomn9LCG0nH9kICHlMNK4lpX5w=
Subject key identifier:   9D:9C:2F:EC:B0:BE:85:A2:73:E1:3F:84:1F:CE:EA:3F:22:26:BF:4F
Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
Certificate issuer:       /CN=44d2e7578aac94f42960a780d3996da8bb469477
Certificate serial:       019EC3DC60E3E1A2BBD6819B8A6D5FEF76C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
Manifest number:          1043
Signing time:             Sun 14 Jun 2026 02:01:00 +0000
Manifest this update:     Sun 14 Jun 2026 02:01:00 +0000
Manifest next update:     Mon 15 Jun 2026 02:01:00 +0000
Files and hashes:         1: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: wUfkpREeqEuTlQ7fel/JJ9P87C+M16sXCk3IL5EOGdk=)
                          2: mmMBLkcfazO-0rk3Rxbyg9fkIoI.roa (hash: V44Naao5RDfVhy6IuyFd+Vu8qSPEdskdDn/73lkjw0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:60:e3:e1:a2:bb:d6:81:9b:8a:6d:5f:ef:76:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477
        Validity
            Not Before: Jun 14 02:01:00 2026 GMT
            Not After : Jun 15 02:01:00 2026 GMT
        Subject: CN=9d9c2fecb0be85a273e13f841fceea3f2226bf4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:ba:f7:c8:9e:44:55:c0:eb:50:da:e4:73:
                    a6:0f:99:23:12:4a:61:2f:11:db:cd:b8:86:0d:53:
                    50:39:5d:d7:9c:90:6b:03:d1:5e:f6:08:17:b1:a4:
                    2e:b1:37:60:15:96:84:9d:e8:fe:3e:9e:bc:b3:97:
                    94:59:45:c1:0d:77:80:b3:32:71:38:5f:36:5b:82:
                    a6:88:f4:bf:dc:58:64:f1:47:d2:e8:0f:f2:5a:df:
                    13:4c:e7:fc:39:56:26:33:a5:90:c1:83:65:ba:28:
                    f1:e5:39:16:e1:84:08:aa:4d:6f:a5:5b:8b:0e:e1:
                    35:59:7d:cb:46:82:f8:43:5b:cd:c2:2e:fa:fa:b7:
                    6d:75:07:63:ae:4b:5c:d7:0e:4c:45:87:cf:a8:5a:
                    97:07:3e:fd:4a:e5:a3:9b:fd:ba:00:7c:b7:37:b7:
                    96:33:e6:ec:7a:31:67:35:0a:a8:15:05:85:55:68:
                    f8:bc:63:31:04:58:4c:18:cf:15:65:60:c4:db:e5:
                    f0:84:11:c3:f6:64:c9:2f:d5:64:b7:3d:12:ed:c1:
                    52:01:f9:b3:44:52:b6:fc:b1:48:40:36:59:1c:d4:
                    41:14:9f:4d:64:d1:2a:5d:48:fa:ae:aa:56:c8:cf:
                    25:8b:73:9a:1b:5a:de:91:16:be:da:e6:13:f3:80:
                    f9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9C:2F:EC:B0:BE:85:A2:73:E1:3F:84:1F:CE:EA:3F:22:26:BF:4F
            X509v3 Authority Key Identifier:
                keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:43:d0:24:2b:0c:bd:e5:ea:1d:e7:94:2d:89:71:34:d1:4e:
         f7:67:8f:f0:87:87:7e:a0:1c:52:9a:a8:89:35:64:39:bf:a5:
         d6:c8:04:ca:49:63:bf:35:27:2b:e6:10:2a:53:27:cd:85:fa:
         33:bc:69:7c:28:30:e2:b6:12:53:33:b5:d2:9a:37:d8:ba:7c:
         5d:bd:ff:65:d2:33:bf:1a:f2:48:c5:89:4b:f5:a6:59:38:d0:
         2d:2f:de:7c:c8:64:e9:23:da:34:51:b7:13:2f:3b:ec:01:84:
         67:e8:8d:1f:1c:05:62:0e:fd:2f:3b:36:9d:16:eb:e3:45:46:
         a7:db:66:a7:67:58:a4:fe:62:eb:c6:bf:15:8b:5a:6f:36:2c:
         89:db:37:f6:ed:97:55:8e:57:03:ef:de:04:3a:ef:01:7b:fe:
         58:39:92:da:c7:76:30:44:3f:36:be:7f:33:7d:b7:d9:2d:e5:
         7c:bf:d0:2d:fe:7a:b2:dd:9f:76:2c:e5:12:1d:f0:5d:51:6c:
         99:91:36:53:70:2a:dc:fc:ff:16:be:8b:5a:d2:94:6c:78:9f:
         87:93:51:cf:0d:8d:2a:39:e4:31:79:62:e3:bc:51:33:9c:10:
         88:83:da:b0:e7:b4:d8:13:c3:40:c9:7a:2c:42:3f:1b:84:67:
         5c:0d:a4:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7D3GDj4aK71oGbim1f73bBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZDJlNzU3OGFhYzk0ZjQyOTYwYTc4MGQzOTk2ZGE4YmI0
Njk0NzcwHhcNMjYwNjE0MDIwMTAwWhcNMjYwNjE1MDIwMTAwWjAzMTEwLwYDVQQD
Eyg5ZDljMmZlY2IwYmU4NWEyNzNlMTNmODQxZmNlZWEzZjIyMjZiZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCm698ieRFXA61Da5HOmD5kjEkph
LxHbzbiGDVNQOV3XnJBrA9Fe9ggXsaQusTdgFZaEnej+Pp68s5eUWUXBDXeAszJx
OF82W4KmiPS/3Fhk8UfS6A/yWt8TTOf8OVYmM6WQwYNluijx5TkW4YQIqk1vpVuL
DuE1WX3LRoL4Q1vNwi76+rdtdQdjrktc1w5MRYfPqFqXBz79SuWjm/26AHy3N7eW
M+bsejFnNQqoFQWFVWj4vGMxBFhMGM8VZWDE2+XwhBHD9mTJL9Vktz0S7cFSAfmz
RFK2/LFIQDZZHNRBFJ9NZNEqXUj6rqpWyM8li3OaG1rekRa+2uYT84D5JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2cL+ywvoWic+E/hB/O6j8iJr9PMB8GA1UdIwQY
MBaAFETS51eKrJT0KWCngNOZbai7RpR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yZGE0M2QtMzk5Ny00MGE2LWFjY2Qt
ZjZmZDZiZDg1N2I4LzEvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8yZGE0M2QtMzk5Ny00MGE2LWFjY2QtZjZmZDZiZDg1N2I4
LzEvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkPQJCsM
veXqHeeULYlxNNFO92eP8IeHfqAcUpqoiTVkOb+l1sgEykljvzUnK+YQKlMnzYX6
M7xpfCgw4rYSUzO10po32Lp8Xb3/ZdIzvxrySMWJS/WmWTjQLS/efMhk6SPaNFG3
Ey877AGEZ+iNHxwFYg79Lzs2nRbr40VGp9tmp2dYpP5i68a/FYtabzYsids39u2X
VY5XA+/eBDrvAXv+WDmS2sd2MEQ/Nr5/M3232S3lfL/QLf56st2fdizlEh3wXVFs
mZE2U3Aq3Pz/Fr6LWtKUbHifh5NRzw2NKjnkMXli47xRM5wQiIPasOe02BPDQMl6
LEI/G4RnXA2kYQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:37:04 2026 by rpki-client