Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
File:                     RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json)
Hash identifier:          IajqcEuRD4p/0GNcpziNPX+dADx+6mfr2OUBqi+K1dY=
Subject key identifier:   64:3F:3F:90:D6:B3:D2:09:CE:C2:31:D8:2C:29:B3:76:B5:55:6A:AD
Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
Certificate issuer:       /CN=44d2e7578aac94f42960a780d3996da8bb469477
Certificate serial:       019D9C6357695ACC96249E61E8E2F51A5319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
Manifest number:          0FAA
Signing time:             Fri 17 Apr 2026 17:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:49 +0000
Files and hashes:         1: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: 3ElaNtZ4cVeP9ReLr1NdC7+78pofiS9iB9NSkLGLfpw=)
                          2: mmMBLkcfazO-0rk3Rxbyg9fkIoI.roa (hash: V44Naao5RDfVhy6IuyFd+Vu8qSPEdskdDn/73lkjw0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:57:69:5a:cc:96:24:9e:61:e8:e2:f5:1a:53:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477
        Validity
            Not Before: Apr 17 17:00:49 2026 GMT
            Not After : Apr 18 17:00:49 2026 GMT
        Subject: CN=643f3f90d6b3d209cec231d82c29b376b5556aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:4c:0d:a7:56:77:6d:3e:45:b7:9f:77:70:
                    1a:98:e4:b8:2e:4b:7a:b7:ac:ff:5a:d6:ac:20:ae:
                    9d:60:f7:82:a8:cc:fd:8a:57:9e:0f:85:71:45:e2:
                    80:e9:7c:34:32:5e:2d:0c:a3:ed:a4:6c:77:c1:02:
                    0f:a6:1a:5b:6f:e0:2c:e3:97:55:9f:c2:08:dd:ec:
                    43:a1:9f:2e:ca:a8:c3:e0:77:f3:fe:aa:39:bd:3a:
                    ea:e7:fa:8d:f4:7b:1f:d3:37:19:5e:55:54:59:15:
                    f0:b2:9f:1d:92:a7:dc:35:71:44:1e:2e:28:ef:d1:
                    59:51:e2:0d:5d:3a:53:31:bd:1f:2d:f2:17:46:08:
                    bc:e4:37:10:c1:ad:59:53:3d:5f:08:72:8c:a4:07:
                    f4:ca:9c:fa:65:45:fd:3e:ab:7e:5a:96:ad:d3:48:
                    26:54:1c:bc:3f:19:c0:f4:dd:53:69:46:f2:a9:8a:
                    00:c2:f1:af:4c:67:82:d6:5a:71:c2:a3:a1:31:d9:
                    c0:8d:8e:32:4e:86:95:ca:79:b5:42:fb:56:64:2e:
                    b7:e0:4d:66:68:52:69:df:7f:ee:c6:46:ce:b9:1b:
                    f7:f6:8f:f3:3c:d1:b3:bc:1e:3e:6f:a1:77:38:b5:
                    59:bb:3d:14:91:02:e9:1d:fd:85:f9:7e:76:61:65:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3F:3F:90:D6:B3:D2:09:CE:C2:31:D8:2C:29:B3:76:B5:55:6A:AD
            X509v3 Authority Key Identifier:
                keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:54:ac:1b:fc:de:83:55:7d:ca:7b:49:81:3a:60:62:6e:95:
         04:11:fe:6f:0e:4d:a1:79:da:95:36:a5:1a:47:92:0b:a7:ca:
         dc:0b:53:76:34:75:a6:16:87:e4:32:4f:bf:2a:a5:6d:6d:04:
         48:7f:74:ea:c5:a8:76:9d:fd:2d:10:60:87:c1:6e:01:53:72:
         52:92:3c:0d:59:cb:8d:fc:2c:f4:f5:8f:3e:a6:fe:9d:b6:a5:
         76:9f:a7:1c:7b:2a:db:ab:e6:09:65:2d:bb:7d:d4:76:62:3e:
         97:f7:ff:07:9b:92:c8:cb:43:cb:3f:07:21:73:c9:8d:69:f1:
         38:fc:16:f0:d0:f7:9b:c7:79:a8:ff:f5:66:75:e1:40:3a:eb:
         3c:e9:90:19:84:2e:85:e2:fc:69:90:3a:4a:18:74:c1:d6:22:
         7b:50:58:02:87:c1:d9:53:4c:fc:ba:9e:a3:08:2f:61:c4:15:
         16:11:5f:03:46:6d:52:52:81:a9:2c:83:14:80:0c:65:2e:0e:
         71:08:f3:53:34:c7:7a:2a:2d:f0:47:59:91:e7:51:a6:33:37:
         17:d1:28:89:32:6f:52:02:db:56:35:26:a9:16:f3:ae:8f:06:
         70:1c:81:ef:a0:a5:e5:0e:fc:8e:bf:45:28:b2:3e:d9:f7:39:
         71:01:25:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:49:33 2026 by rpki-client