Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File:                     CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier:          snOkDoiz0f8Z+MAcJVKTLbiaXI81Tc684wgX3oZ5k5s=
Subject key identifier:   9C:4A:3A:B8:6B:EF:8C:AE:06:1B:7E:BC:47:48:51:DC:65:0F:BF:9F
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer:       /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial:       019F913580906B7486E5A6EDBB341847CEBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number:          07C2
Signing time:             Thu 23 Jul 2026 23:00:30 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:30 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:30 +0000
Files and hashes:         1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: wn4b/tjhVxWwUrVGkxLEQ1Vksx9I4do0Y4bavYpY8PU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:80:90:6b:74:86:e5:a6:ed:bb:34:18:47:ce:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
        Validity
            Not Before: Jul 23 23:00:30 2026 GMT
            Not After : Jul 24 23:00:30 2026 GMT
        Subject: CN=9c4a3ab86bef8cae061b7ebc474851dc650fbf9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:d7:e3:ce:86:aa:ef:e5:61:81:42:b8:97:
                    8e:0e:ed:67:d7:7b:db:9d:6f:fb:6c:05:38:da:22:
                    8f:d2:e7:08:71:99:06:a7:b6:dd:35:b0:5d:86:d7:
                    f8:40:d4:d9:21:7e:ef:48:58:2d:89:b8:71:e2:69:
                    72:e5:5a:bb:45:ee:78:76:00:44:c0:20:00:58:2e:
                    65:f1:11:b9:54:8d:6e:3d:05:24:f8:aa:e3:9c:73:
                    f7:5e:a3:24:37:73:45:8e:5b:a7:a9:c7:33:85:81:
                    0e:c9:cd:67:d4:82:64:92:e1:3f:26:2b:71:04:8b:
                    b9:02:3f:43:30:49:51:ff:b2:5e:f2:eb:34:c9:53:
                    39:e7:ef:88:fc:c1:6f:4e:be:5c:f9:7c:d6:c5:38:
                    1d:6d:25:73:d6:28:0b:9e:45:a0:f1:b0:05:03:aa:
                    37:77:99:cd:99:8d:00:dd:50:9f:91:8a:e3:4e:3b:
                    b6:b0:5a:3f:74:b5:db:44:c7:b7:4c:8c:cb:11:70:
                    76:15:4b:1c:1e:28:d8:a2:e1:3d:b6:a2:57:5e:75:
                    17:8b:69:58:d8:5e:55:38:c3:59:01:19:58:1a:2c:
                    6e:50:0c:6e:eb:1d:e9:9c:78:aa:ca:88:a4:0f:56:
                    ec:b3:f4:1d:40:06:93:6b:cc:3f:8f:c1:38:73:b0:
                    c8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4A:3A:B8:6B:EF:8C:AE:06:1B:7E:BC:47:48:51:DC:65:0F:BF:9F
            X509v3 Authority Key Identifier:
                keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f0:51:42:7e:23:40:83:c5:e8:90:71:9b:8d:ab:eb:df:6b:
         d7:9e:42:72:a7:78:40:01:d8:bf:1f:68:ab:59:7f:ab:9b:fc:
         4c:7e:ef:87:91:18:21:a5:ae:63:0c:2c:97:46:da:d9:00:56:
         a1:62:cc:4f:f9:d6:27:f0:4f:9a:79:0f:01:08:53:75:29:ee:
         bb:47:c6:3e:f6:53:35:a9:3d:bd:5a:51:fd:f2:95:0f:9c:0a:
         75:f7:98:04:cf:aa:10:69:36:73:35:01:a8:e4:b3:5c:12:18:
         2e:2a:f1:96:60:de:02:e0:4f:09:fe:7b:4c:d7:38:4e:66:6f:
         d3:09:e9:e6:f5:08:d6:3d:ae:98:46:1b:42:23:76:81:27:e9:
         04:1a:54:70:54:58:b2:c3:88:f4:79:b2:54:b5:23:60:da:bd:
         e9:46:36:d7:d2:1c:43:dd:ad:0d:6d:89:ce:cd:70:da:11:d3:
         2e:df:23:fe:63:99:aa:97:57:61:57:da:5a:a5:8a:70:c1:18:
         fb:a8:b7:f6:bc:43:97:d7:ad:4b:9b:a6:da:6f:ed:2e:8c:16:
         d1:b7:ca:c8:b2:03:13:9e:9e:72:83:2e:ff:fe:3c:b6:f7:8b:
         10:7b:1f:12:c7:c5:6e:9f:df:3c:e4:f9:db:1b:ab:02:43:4e:
         a6:a0:56:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:45 2026 by rpki-client