Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
File:                     RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json)
Hash identifier:          J92nwgzVeneYULTZkD3DpDh9/0ibZRx73KjFE7IP3sw=
Subject key identifier:   2C:7C:46:BF:AE:13:35:04:B1:A4:E5:CE:5B:71:F2:95:F3:9B:C6:91
Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
Certificate issuer:       /CN=44d2e7578aac94f42960a780d3996da8bb469477
Certificate serial:       019FAB9A6471F8C1A64F973AFFE8D1E32117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
Manifest number:          10BB
Signing time:             Wed 29 Jul 2026 02:00:49 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:49 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:49 +0000
Files and hashes:         1: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: rg9UPWmSs1uTYJr9Hlz9mDus5gTRsdxqC8kWu8KRL9E=)
                          2: mmMBLkcfazO-0rk3Rxbyg9fkIoI.roa (hash: V44Naao5RDfVhy6IuyFd+Vu8qSPEdskdDn/73lkjw0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:64:71:f8:c1:a6:4f:97:3a:ff:e8:d1:e3:21:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477
        Validity
            Not Before: Jul 29 02:00:49 2026 GMT
            Not After : Jul 30 02:00:49 2026 GMT
        Subject: CN=2c7c46bfae133504b1a4e5ce5b71f295f39bc691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:26:46:6f:e4:bd:5d:fe:89:44:19:3b:c6:
                    36:e4:5a:77:56:75:6b:d5:af:bd:da:4e:af:04:7f:
                    0e:71:1f:4c:e4:b5:7f:42:11:c1:68:d9:45:13:77:
                    58:74:e7:a6:15:15:a5:82:e8:53:71:0b:39:d4:11:
                    c7:b1:a1:01:ed:55:94:7b:8b:84:fe:8d:be:12:3e:
                    cd:06:4e:e7:d8:9f:e8:68:33:69:08:e1:cd:36:ff:
                    54:3d:ad:99:ae:d6:8b:84:d4:fa:72:2f:b0:9c:4c:
                    d6:1e:43:4c:ed:4c:e8:e4:d4:fc:6c:7c:f5:eb:99:
                    2e:cc:9f:fd:37:21:1b:2c:42:e5:70:e8:e9:aa:86:
                    db:f1:aa:b9:b3:4c:51:e2:a7:c7:08:fa:17:b0:9e:
                    c6:c5:a8:02:01:c2:5a:b1:d5:95:5e:35:c1:89:60:
                    16:96:75:45:ed:66:8a:a3:3c:7b:b6:ec:70:1c:a9:
                    b0:10:ba:a0:af:4f:4a:12:28:52:59:be:37:94:53:
                    13:85:e2:5c:2b:d8:a4:21:85:1f:ad:88:7b:96:45:
                    d9:28:db:af:60:25:63:a8:a9:cc:12:08:ac:2f:33:
                    68:18:c7:b9:93:9f:90:32:d7:1a:4f:bc:cf:b3:8f:
                    87:96:e3:ad:3a:25:74:5d:8d:00:83:6a:f5:37:f0:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7C:46:BF:AE:13:35:04:B1:A4:E5:CE:5B:71:F2:95:F3:9B:C6:91
            X509v3 Authority Key Identifier:
                keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:5d:c1:d4:6c:32:96:f6:ca:c1:47:6f:b4:91:aa:c1:a4:6d:
         86:f8:10:1b:5b:34:08:63:c4:c4:6b:f9:be:53:cb:dc:8a:cb:
         19:3b:84:e7:52:c6:e2:a2:ef:b9:ae:6f:1f:7a:0e:db:2a:c9:
         53:19:31:e1:a4:ca:5a:3b:d0:dc:09:69:76:5a:a3:e8:a1:b8:
         cd:49:f4:9b:78:d4:0e:0f:27:d8:99:c5:bf:f8:51:aa:17:7b:
         45:2a:0c:60:c6:11:34:11:f4:cf:31:b0:39:be:ed:aa:e8:d7:
         2c:ff:1a:95:83:c2:ac:aa:4b:57:d3:5f:d0:ed:96:9a:1f:06:
         fb:c4:69:34:49:30:ba:b8:ba:b0:f0:f6:a5:f8:17:26:dc:44:
         f0:e2:a4:63:3e:26:3d:e8:57:1e:96:9f:7f:12:22:b6:96:bc:
         25:72:20:96:0d:ea:96:0e:88:9c:5a:2b:a7:3c:a8:47:01:5a:
         2a:6e:03:06:9d:06:8b:c9:9d:b9:76:a3:cf:78:cd:38:e1:8d:
         42:80:5b:2e:8c:56:d1:9f:67:47:16:40:0c:79:8f:c1:b8:e9:
         35:0c:37:02:b6:20:3e:3e:6c:aa:04:57:70:4a:24:e4:b7:85:
         64:b9:e6:6c:6b:9e:91:8a:49:9f:24:cb:0c:9b:fa:62:13:53:
         5e:e5:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:38:53 2026 by rpki-client