Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
File:                     RLnEibS7yF3nNEF-u6ThN7F8B50.mft (raw, json)
Hash identifier:          4nzu1gaxgGMA91xF+NlKlKu6loRUVEJqOInVA44ubU8=
Subject key identifier:   CF:D1:84:73:99:67:B7:0B:5B:6F:F8:62:E1:D4:5F:03:EF:DF:9E:1C
Authority key identifier: 44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
Certificate issuer:       /CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Certificate serial:       01A08B9F7E5300C233E51E16A2879ED6D8CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
Manifest number:          091F
Signing time:             Thu 10 Sep 2026 14:01:20 +0000
Manifest this update:     Thu 10 Sep 2026 14:01:20 +0000
Manifest next update:     Fri 11 Sep 2026 14:01:20 +0000
Files and hashes:         1: RLnEibS7yF3nNEF-u6ThN7F8B50.crl (hash: tu4xmiTyhrpNrnbWWcBjCVvFfyIaDKXuIeaARXrdkSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9f:7e:53:00:c2:33:e5:1e:16:a2:87:9e:d6:d8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b9c489b4bbc85de734417ebba4e137b17c079d
        Validity
            Not Before: Sep 10 14:01:20 2026 GMT
            Not After : Sep 11 14:01:20 2026 GMT
        Subject: CN=cfd184739967b70b5b6ff862e1d45f03efdf9e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:b8:9e:42:46:95:de:3a:2b:6f:44:a9:c6:
                    71:15:cd:56:35:b0:d8:88:3d:c4:22:00:b1:22:f7:
                    7c:ae:e0:1b:41:7d:55:3c:6e:e8:4a:d8:82:66:06:
                    98:d0:18:d2:80:6a:dd:9d:0f:a0:c1:a3:7e:02:94:
                    19:96:59:ea:2e:e7:a3:ca:b5:bd:83:0e:d1:51:5e:
                    66:1a:5e:de:d0:56:7a:a3:88:dd:65:af:ca:c4:31:
                    5c:33:f6:48:59:96:8c:4c:97:bd:30:1f:51:c8:d0:
                    e7:fb:08:0d:e0:25:01:1d:53:52:09:3b:08:45:be:
                    6f:a7:19:0b:1c:3e:a1:3b:6f:5b:c9:31:4c:39:65:
                    c6:5d:35:c0:cc:eb:88:7b:10:97:b4:b9:19:0f:69:
                    6d:8c:4e:36:9c:cd:1c:3d:f5:47:6a:32:bf:36:f3:
                    2b:cf:68:f1:06:42:99:9d:32:40:33:1d:31:8c:f8:
                    61:5b:04:8e:35:3a:6c:b5:2f:1b:6f:12:77:a3:90:
                    31:b9:32:90:63:dd:0d:78:ae:77:b6:06:e8:a8:d5:
                    57:91:7a:be:84:54:7a:c6:9a:c4:48:45:7b:ea:66:
                    74:6d:a3:0f:28:1f:2f:a5:bb:87:58:51:3d:15:64:
                    99:13:0e:74:9c:19:19:a5:1f:52:e0:ba:d4:98:f3:
                    57:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D1:84:73:99:67:B7:0B:5B:6F:F8:62:E1:D4:5F:03:EF:DF:9E:1C
            X509v3 Authority Key Identifier:
                keyid:44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:74:4e:5c:83:a9:37:86:90:9c:83:d2:01:6d:19:49:d2:a8:
         73:35:f4:30:ab:a3:08:a1:79:c8:ab:74:5e:bf:34:6e:2a:9d:
         21:07:59:b1:5f:0b:ac:43:26:87:5c:da:20:e5:1c:66:b4:c8:
         06:19:3a:a4:f8:c6:eb:e8:1e:a3:4d:34:39:46:92:75:11:3d:
         10:17:c7:7d:b3:97:12:59:0f:43:6e:c6:01:ec:1c:fb:ab:70:
         ed:02:6f:b5:e7:27:33:38:32:12:9b:92:35:5e:a0:5d:05:8c:
         c8:16:eb:5c:ab:13:a9:ac:f0:36:8e:74:88:b4:77:d0:d5:36:
         21:a7:0b:e5:c0:63:c0:d7:e7:07:2d:7d:c8:49:46:69:1d:78:
         b1:58:15:fb:29:2a:1a:98:cd:e2:1a:b4:fd:b7:78:9b:4c:ec:
         f1:e7:75:36:a6:7e:fb:6f:13:5b:b6:74:1e:01:fe:ca:a0:d4:
         c7:55:fe:d9:0e:6e:dc:f7:34:ca:c9:4f:ae:a7:5f:6c:ca:3d:
         46:08:02:0c:b2:fe:7e:44:e7:14:72:29:36:74:a8:bb:cc:20:
         53:20:2e:12:9c:48:82:8c:c8:d8:84:f1:96:01:9d:82:3f:04:
         e0:3d:1f:1b:62:93:f7:a1:0e:69:a6:67:01:22:20:82:45:7b:
         61:48:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:11:55 2026 by rpki-client