Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
File:                     RLnEibS7yF3nNEF-u6ThN7F8B50.mft (raw, json)
Hash identifier:          TiFNRTXAXJCkm7QXPpm0u/yw46SD8Bp0RW8smv/F3hY=
Subject key identifier:   DF:16:6F:B1:82:98:98:EE:DE:04:C1:F0:28:2E:6E:02:77:44:F5:57
Authority key identifier: 44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
Certificate issuer:       /CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Certificate serial:       019EB845BFB534F8E99557E88E276B2353DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
Manifest number:          082D
Signing time:             Thu 11 Jun 2026 20:00:39 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:39 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:39 +0000
Files and hashes:         1: RLnEibS7yF3nNEF-u6ThN7F8B50.crl (hash: AkVBjppIj6XUZSHXUR75IZ39F07IikURrrWJEqrshwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:bf:b5:34:f8:e9:95:57:e8:8e:27:6b:23:53:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b9c489b4bbc85de734417ebba4e137b17c079d
        Validity
            Not Before: Jun 11 20:00:39 2026 GMT
            Not After : Jun 12 20:00:39 2026 GMT
        Subject: CN=df166fb1829898eede04c1f0282e6e027744f557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b9:56:fb:bc:66:fe:d1:fc:7e:3f:5f:fe:f0:
                    da:06:68:ee:96:8b:23:64:75:af:a0:e0:0e:99:64:
                    c5:0c:29:9d:00:75:5d:17:6c:10:60:74:0c:5f:51:
                    81:c6:0a:fc:72:07:b6:a9:71:ab:21:ce:13:0a:f1:
                    e0:8f:d4:34:70:12:bb:00:c6:0d:ed:22:0b:8f:ab:
                    d5:28:2b:9a:95:6e:a7:c0:7c:30:d4:65:6b:bb:f9:
                    f0:39:9a:24:79:9a:91:63:fa:a5:db:79:34:e1:96:
                    f7:2f:3c:54:25:ac:45:cc:01:fc:6c:85:24:1b:db:
                    1d:05:71:a7:06:02:dc:6a:75:a7:85:b6:77:0e:3d:
                    25:e3:28:b7:19:04:b8:30:00:e2:59:82:37:a3:11:
                    d5:4a:60:21:a9:58:7a:4c:dd:74:f2:66:5c:fc:d7:
                    a9:c5:64:28:15:99:03:11:f6:85:dd:6d:03:b0:31:
                    cb:70:d8:3c:c1:38:0f:dc:e3:4e:dd:4c:e8:71:ae:
                    85:40:68:48:ee:dc:d4:ad:0a:ca:72:50:e9:91:43:
                    16:2a:f0:3f:36:f3:0e:45:c8:ab:18:f1:f2:e0:28:
                    a3:3f:f8:bd:c3:62:bf:e9:08:ab:ea:01:02:58:6d:
                    90:32:6a:e2:2c:30:f2:9e:05:ec:8e:6a:f8:f0:93:
                    e0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:16:6F:B1:82:98:98:EE:DE:04:C1:F0:28:2E:6E:02:77:44:F5:57
            X509v3 Authority Key Identifier:
                keyid:44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:cb:75:35:22:d0:57:00:4a:9d:40:c4:3b:88:f9:99:8f:b8:
         c8:3d:6e:b6:c1:db:16:49:0e:4a:16:0b:8d:d9:73:2c:96:67:
         c1:10:50:d5:5a:b0:0f:39:c8:6b:cb:71:ab:d9:38:f9:fd:59:
         4d:d7:fa:95:6f:f1:f8:2e:9d:aa:53:2b:2a:a4:c0:ec:b6:f7:
         1a:13:80:6f:a8:ec:50:66:ea:2f:14:44:06:c7:5c:b2:69:b6:
         11:79:cc:ed:4e:34:4b:cd:63:c5:c4:9d:9e:5b:96:f5:fd:2c:
         76:85:c6:fd:4b:58:d9:64:e2:eb:14:71:82:a8:b0:bd:62:45:
         f3:cd:19:59:1e:de:a3:42:92:65:16:1c:05:8b:19:c3:36:7d:
         bc:03:27:df:2f:59:8e:99:3d:f5:2f:51:1f:f4:16:f5:5a:43:
         96:d2:96:62:2e:3f:86:0a:60:0c:db:0a:0f:55:5a:09:e8:e6:
         33:f8:70:05:63:24:3b:d0:a9:bd:d2:4f:54:9f:b4:70:15:39:
         f0:e6:68:81:8a:59:81:75:92:57:19:a3:27:51:1c:77:94:e1:
         4d:bf:85:bb:59:19:fd:ee:18:5b:78:48:10:41:78:f6:d9:02:
         ff:7a:87:d6:40:19:b0:6b:c9:f0:3c:6f:d8:8a:72:41:ef:da:
         1c:fc:26:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:48 2026 by rpki-client