Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File:                     Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier:          nFAjik8EqX1EObaUZ3SsTxmcj6smpRyTCaM0vg0tzAQ=
Subject key identifier:   F3:BD:01:65:58:15:4A:C9:5C:80:F0:4A:CD:41:9A:D0:A7:4E:6E:32
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer:       /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial:       019F90FF675DB78228A65E70D1E949A1D379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number:          19C3
Signing time:             Thu 23 Jul 2026 22:01:24 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:24 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:24 +0000
Files and hashes:         1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: KvjLFnAPiHtc4Zw+8U3+tMuJgH8bxNNIv50wBzdK5Nk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:67:5d:b7:82:28:a6:5e:70:d1:e9:49:a1:d3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
        Validity
            Not Before: Jul 23 22:01:24 2026 GMT
            Not After : Jul 24 22:01:24 2026 GMT
        Subject: CN=f3bd016558154ac95c80f04acd419ad0a74e6e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e1:eb:69:32:f8:ec:40:18:54:67:8f:e6:5a:
                    f0:8a:fc:1a:20:57:b1:da:63:10:52:5f:26:62:fb:
                    31:0f:a5:6c:d9:c2:f3:af:6e:6f:4c:ed:04:01:c3:
                    d6:ee:14:35:e8:ff:cb:5b:96:4e:e6:4e:5d:55:f0:
                    26:61:08:0e:58:c0:01:88:be:59:ad:bf:20:4c:56:
                    c4:6f:a0:fa:a4:20:a5:02:e1:2b:0c:57:06:85:f0:
                    f7:e8:19:cc:c6:2f:7c:18:4a:66:91:53:20:dd:31:
                    2b:b3:8c:be:c5:a7:38:1c:e5:d5:99:59:42:3f:a0:
                    f5:58:11:b9:c6:87:3e:98:ee:f0:49:3d:c5:0a:46:
                    5f:b8:53:c1:ad:b3:48:69:47:62:48:ea:62:bf:a5:
                    65:00:c7:5b:b8:23:35:2e:97:7a:01:49:be:9b:42:
                    d9:b8:26:59:93:8f:14:53:da:c2:58:19:75:8c:68:
                    aa:7c:93:ca:a0:21:9c:57:cb:eb:94:53:c0:d2:41:
                    41:d4:a1:d3:59:6b:e0:98:56:ab:5f:f2:9e:67:0b:
                    91:a0:e3:fa:77:3e:24:3d:79:e7:e2:57:f9:3a:a5:
                    80:60:79:2f:d9:24:1d:7d:e7:f5:34:6b:c9:bc:b1:
                    b7:aa:db:a9:68:a7:72:7b:da:4d:13:3c:ef:64:47:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BD:01:65:58:15:4A:C9:5C:80:F0:4A:CD:41:9A:D0:A7:4E:6E:32
            X509v3 Authority Key Identifier:
                keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4b:30:00:a5:89:96:b8:e3:85:92:d4:5a:f9:3e:aa:ac:bc:
         92:61:3d:cf:a1:10:74:df:f7:79:9d:a0:39:1d:30:7c:64:b3:
         b1:5a:47:94:7d:d5:5a:1c:38:03:9d:69:1e:cd:30:19:83:0f:
         ad:62:bb:02:5d:17:a8:42:e8:7b:38:ed:23:31:c5:77:8e:b6:
         dc:44:65:3d:a6:2b:2c:3c:22:41:2c:1d:d7:19:03:55:04:4c:
         1d:5f:0b:c0:04:21:50:51:1c:b8:6a:be:44:55:f7:13:a2:1f:
         96:a0:e4:c2:48:c2:76:54:24:cf:fc:d0:9a:cd:d4:ab:c2:87:
         2e:d2:03:62:34:a8:a2:27:63:d3:08:5c:4c:18:98:00:3a:c0:
         e7:09:33:7c:6c:64:df:16:ca:40:87:50:cd:9a:d1:40:4b:7c:
         1b:b5:39:3f:d9:83:56:f0:0e:78:23:01:82:bd:c2:04:6c:07:
         f7:8b:59:a3:8f:b3:8d:f8:3e:63:4c:38:63:6c:15:51:d6:98:
         86:19:22:42:52:23:c1:76:fd:4a:fb:2f:35:34:e7:d2:63:b1:
         37:9b:a7:d5:7b:7b:91:9d:be:06:c8:f9:0a:0b:02:1c:f7:be:
         62:8b:a4:81:39:13:99:57:ac:2c:9c:8e:47:3d:20:75:b5:c4:
         b3:5a:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:34 2026 by rpki-client