Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/C0xmPnCW5eC8TL3g5K2B-RbFM7U.mft
File:                     C0xmPnCW5eC8TL3g5K2B-RbFM7U.mft (raw, json)
Hash identifier:          GHwZqh9VOlvme+LmEayJjwGWH/NLYvwrhV4cI0LqshA=
Subject key identifier:   55:27:11:16:14:D2:4E:C8:40:A4:49:25:0E:AD:FA:23:2B:5B:55:1D
Authority key identifier: 0B:4C:66:3E:70:96:E5:E0:BC:4C:BD:E0:E4:AD:81:F9:16:C5:33:B5
Certificate issuer:       /CN=0b4c663e7096e5e0bc4cbde0e4ad81f916c533b5
Certificate serial:       019F91A3DCE1C1EE98BCEA3ED17CB228B760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0xmPnCW5eC8TL3g5K2B-RbFM7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/C0xmPnCW5eC8TL3g5K2B-RbFM7U.mft
Manifest number:          2B
Signing time:             Fri 24 Jul 2026 01:01:02 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:02 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:02 +0000
Files and hashes:         1: C0xmPnCW5eC8TL3g5K2B-RbFM7U.crl (hash: OoS04xoEN/DYQDKa/YZGl4nnFMnk6ghYBLvrW7Huj5c=)
                          2: WSnucHj436-UXnc-ebuGaIpcr5E.roa (hash: o0f471E/J4jVmiTLn0Fc4NKkNap3caz1FQzKv3S5vmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/C0xmPnCW5eC8TL3g5K2B-RbFM7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/C0xmPnCW5eC8TL3g5K2B-RbFM7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0xmPnCW5eC8TL3g5K2B-RbFM7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:dc:e1:c1:ee:98:bc:ea:3e:d1:7c:b2:28:b7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4c663e7096e5e0bc4cbde0e4ad81f916c533b5
        Validity
            Not Before: Jul 24 01:01:02 2026 GMT
            Not After : Jul 25 01:01:02 2026 GMT
        Subject: CN=5527111614d24ec840a449250eadfa232b5b551d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:a7:b7:11:ea:44:5b:3e:a7:7f:3e:80:25:
                    1d:39:c7:3b:1b:8a:44:c7:56:60:34:22:53:10:80:
                    f1:9d:15:32:0d:31:e5:f8:94:93:e0:88:04:0e:1a:
                    aa:7b:20:a6:4f:5d:bd:ec:36:3e:4d:95:cd:4b:ae:
                    34:da:d2:b8:f0:c9:72:e4:04:b6:b4:f8:5d:3e:e7:
                    07:1f:bd:80:4c:ec:c1:b6:75:99:84:03:e8:29:4f:
                    ab:4f:03:28:33:4a:08:b7:ba:8f:be:b3:f2:58:9c:
                    e9:98:7d:dd:68:3f:f7:e5:8b:1f:e7:56:11:56:6e:
                    0b:44:96:8a:c3:a1:d0:b9:fb:c6:e2:00:ef:56:2e:
                    00:cc:69:ca:b4:f0:1d:44:63:a1:a2:bf:46:1d:68:
                    fd:90:e7:12:b2:be:9a:18:58:14:87:7b:39:c6:4e:
                    0a:0d:95:80:04:4f:c3:8c:86:a7:70:44:bc:63:15:
                    3c:dc:6b:91:7b:f1:47:33:49:e3:6f:52:cb:06:c1:
                    ea:3b:e2:69:4f:95:82:1b:c4:35:f7:5d:a8:8a:f2:
                    0e:e1:64:7b:4b:64:58:13:8b:57:35:ec:ec:4c:91:
                    2c:62:61:bd:a0:1d:d6:14:c5:1c:a6:e0:71:4f:4a:
                    59:30:4e:3b:3c:8f:a2:39:05:c7:7b:bd:38:eb:b8:
                    02:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:27:11:16:14:D2:4E:C8:40:A4:49:25:0E:AD:FA:23:2B:5B:55:1D
            X509v3 Authority Key Identifier:
                keyid:0B:4C:66:3E:70:96:E5:E0:BC:4C:BD:E0:E4:AD:81:F9:16:C5:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0xmPnCW5eC8TL3g5K2B-RbFM7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/C0xmPnCW5eC8TL3g5K2B-RbFM7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/C0xmPnCW5eC8TL3g5K2B-RbFM7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e4:7e:f1:36:99:4d:db:80:86:ff:96:2f:7d:16:4d:9f:42:
         6e:f7:a3:13:11:69:92:e5:e8:81:c1:db:f1:78:57:28:89:2e:
         66:4e:be:a3:1f:ce:30:cb:8b:90:1c:08:d6:49:b9:17:fc:3f:
         16:3b:34:b2:cb:af:60:b4:fe:a0:42:4e:d8:3c:f1:96:a4:da:
         18:7e:e1:1e:f4:61:74:d6:b9:b5:ae:a7:ce:d1:1e:50:2f:7b:
         2f:f6:6f:97:71:48:37:ac:77:66:7d:9b:ef:37:0b:3c:f0:19:
         7e:00:06:6f:27:5e:b3:c9:6e:4d:b9:fa:03:42:9c:4d:87:6b:
         e9:e6:76:0a:86:49:66:51:d2:50:28:08:6f:c6:e6:1b:b1:dc:
         cb:f7:d7:69:a5:7f:15:e9:35:80:3d:06:25:4c:94:d6:0e:9a:
         2c:f9:f5:4f:ce:2a:4b:4c:54:09:3a:0a:57:5a:1a:4b:17:2e:
         39:49:4e:7c:c0:89:6b:96:57:4a:cd:0c:80:3b:a9:41:4f:60:
         57:8d:2f:4b:0a:77:ae:32:de:0f:8d:38:e1:23:f0:02:3b:16:
         86:ca:c5:f1:dd:f0:01:bd:da:6d:82:dd:78:6f:5b:2b:5f:9e:
         7b:c0:4e:c1:3e:86:a1:c4:92:ec:96:47:5d:e2:dd:52:42:5b:
         5b:d4:e5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:38 2026 by rpki-client