Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/C0xmPnCW5eC8TL3g5K2B-RbFM7U.mft
File:                     C0xmPnCW5eC8TL3g5K2B-RbFM7U.mft (raw, json)
Hash identifier:          LSOXPBufb/pwC6uOqw8DPirS8f1vR1xnf32yPpsEpdA=
Subject key identifier:   7F:7B:FB:8D:9C:66:B6:BA:47:FB:30:64:26:60:30:66:09:A1:8D:70
Authority key identifier: 0B:4C:66:3E:70:96:E5:E0:BC:4C:BD:E0:E4:AD:81:F9:16:C5:33:B5
Certificate issuer:       /CN=0b4c663e7096e5e0bc4cbde0e4ad81f916c533b5
Certificate serial:       01A0CE5AEDF0308A6876EBFBC19F5875CC79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0xmPnCW5eC8TL3g5K2B-RbFM7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/C0xmPnCW5eC8TL3g5K2B-RbFM7U.mft
Manifest number:          CF
Signing time:             Wed 23 Sep 2026 13:01:00 +0000
Manifest this update:     Wed 23 Sep 2026 13:01:00 +0000
Manifest next update:     Thu 24 Sep 2026 13:01:00 +0000
Files and hashes:         1: C0xmPnCW5eC8TL3g5K2B-RbFM7U.crl (hash: ZwsJ7FKMQkOnTgjVhdw+zvhqLXnmf+Hvet2vyKcto0Y=)
                          2: WSnucHj436-UXnc-ebuGaIpcr5E.roa (hash: o0f471E/J4jVmiTLn0Fc4NKkNap3caz1FQzKv3S5vmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/C0xmPnCW5eC8TL3g5K2B-RbFM7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/C0xmPnCW5eC8TL3g5K2B-RbFM7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0xmPnCW5eC8TL3g5K2B-RbFM7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:ed:f0:30:8a:68:76:eb:fb:c1:9f:58:75:cc:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4c663e7096e5e0bc4cbde0e4ad81f916c533b5
        Validity
            Not Before: Sep 23 13:01:00 2026 GMT
            Not After : Sep 24 13:01:00 2026 GMT
        Subject: CN=7f7bfb8d9c66b6ba47fb30642660306609a18d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:24:18:77:5c:e6:b0:6a:5e:d9:72:67:0f:db:
                    2e:1f:3c:db:e2:d4:4d:2c:cc:86:dd:a8:e8:47:ff:
                    e3:0e:fc:30:6a:c4:8b:22:0b:4d:d8:d2:30:f7:5c:
                    2e:e4:3e:00:da:82:92:32:bb:1e:6e:eb:06:57:5c:
                    88:a7:a7:cc:96:60:02:67:76:de:cc:2e:bc:a1:ba:
                    ae:93:2f:d6:41:5d:c4:14:3b:e1:ad:cb:ed:64:ac:
                    3a:5d:7c:1a:53:bf:08:8a:10:8c:4d:13:7a:b5:e4:
                    a7:a2:4b:2f:21:6f:7d:c9:03:fb:b9:90:00:43:e6:
                    4e:c4:cc:b1:62:88:7f:1d:e2:a3:10:c9:0b:ce:19:
                    39:ee:37:17:bc:9e:24:36:f1:a0:93:ff:45:4e:0c:
                    9b:3a:20:3a:c3:4b:27:ed:9c:fa:6d:a3:5e:c4:c5:
                    d3:ff:94:92:19:f5:df:c0:5f:e3:ce:d5:bd:dd:51:
                    e0:c3:06:6a:94:e0:72:d8:0d:66:db:48:99:16:33:
                    fc:86:da:f3:4c:36:e0:ea:00:51:b1:22:65:16:12:
                    39:3f:9a:69:44:bc:84:06:63:49:9a:b7:7c:a9:68:
                    38:ef:f2:38:4e:a2:05:20:9f:58:e5:a4:4b:60:70:
                    a2:61:7e:b4:96:e6:ce:80:c9:9b:fc:9a:d1:94:e3:
                    32:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7B:FB:8D:9C:66:B6:BA:47:FB:30:64:26:60:30:66:09:A1:8D:70
            X509v3 Authority Key Identifier:
                keyid:0B:4C:66:3E:70:96:E5:E0:BC:4C:BD:E0:E4:AD:81:F9:16:C5:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0xmPnCW5eC8TL3g5K2B-RbFM7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/C0xmPnCW5eC8TL3g5K2B-RbFM7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c67e62-672b-4a45-bbe5-fc7bfe8c07e6/1/C0xmPnCW5eC8TL3g5K2B-RbFM7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:94:eb:50:1c:0b:43:48:29:39:c0:06:7c:7a:6e:de:e2:25:
         24:e1:79:21:df:8b:94:f4:88:90:17:e2:85:38:15:21:fc:15:
         df:ad:ac:21:81:a3:04:a6:eb:8d:8b:7d:ef:6a:88:e6:b6:41:
         7f:b3:72:a0:97:ca:2a:d5:d8:07:c5:e8:be:15:21:4c:2c:da:
         af:5b:94:a5:df:52:41:6a:82:78:83:57:6b:24:b5:4e:fe:17:
         77:13:e2:7f:e2:ed:a1:d9:24:e0:49:ec:25:dd:d0:35:91:78:
         49:d3:48:79:06:60:8e:70:13:45:ac:66:54:8c:3c:fb:cb:c7:
         76:4c:51:05:b9:0f:fa:8e:3c:8b:59:b3:1e:6b:aa:9f:73:82:
         e9:aa:4e:93:c8:9f:88:48:c3:59:36:cc:c3:8f:ea:8a:c3:87:
         73:b7:e0:3e:18:20:cb:19:4b:4f:6b:98:a4:bf:44:4a:d8:62:
         c1:a8:c2:53:67:01:35:8b:f3:55:f6:9e:01:d4:50:15:c9:d4:
         06:6d:db:03:a2:26:d9:31:be:36:18:69:d0:2a:bb:5f:1a:33:
         61:31:e6:af:b7:41:5e:58:ed:2c:a6:9f:39:78:0c:f8:ab:61:
         eb:18:b1:f5:1f:ea:26:b0:61:07:27:8b:2f:f3:f5:29:65:97:
         c2:9f:a5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:28:03 2026 by rpki-client