Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File:                     Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier:          fplhKAjyPXsztECmVXBskMijs9le0cH7H6Ne9xmSgqU=
Subject key identifier:   55:26:F3:D0:A5:30:EA:4F:CF:C4:AB:6D:F5:3A:C2:3A:19:E6:D2:0D
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer:       /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial:       019E1E356F93FA9271282883E32A7305E18A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 22:01:18 +0000
Manifest this update:     Tue 12 May 2026 22:01:18 +0000
Manifest next update:     Wed 13 May 2026 22:01:18 +0000
Files and hashes:         1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: IgpkdR5xZHxK0fxf/KQPIID0Dn1eIxmEwxHD1BMRW6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:6f:93:fa:92:71:28:28:83:e3:2a:73:05:e1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
        Validity
            Not Before: May 12 22:01:18 2026 GMT
            Not After : May 13 22:01:18 2026 GMT
        Subject: CN=5526f3d0a530ea4fcfc4ab6df53ac23a19e6d20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:18:c3:ec:e1:75:0a:7f:22:cb:52:a1:19:fd:
                    ec:cf:66:3b:7a:fd:15:60:ff:e1:c9:f4:57:0f:b9:
                    44:49:4a:30:56:9c:98:23:c0:97:6a:f1:cd:7c:4f:
                    24:9e:8a:f2:7a:a9:8a:f8:fc:5d:34:b1:88:f0:7a:
                    96:f3:5c:61:05:74:1f:2a:23:c5:92:73:f1:f3:b6:
                    b4:8d:f3:c3:f8:08:f0:92:80:84:b5:66:2e:50:77:
                    53:05:e6:54:c6:e1:45:e8:1d:2b:af:8e:d1:57:f2:
                    30:9e:5e:6a:ea:a7:36:fd:97:27:9e:1c:68:0e:3b:
                    dc:fb:09:d6:7a:10:9b:27:33:9e:09:95:4d:27:d8:
                    74:09:45:2b:9a:bc:a0:8d:ec:4a:10:f0:9f:1f:4f:
                    11:48:14:7b:b6:93:43:38:83:4c:3a:26:16:b9:42:
                    be:da:fe:9f:b9:77:a7:8c:28:8a:d5:d6:95:54:d0:
                    36:0b:fd:47:e5:ff:55:34:70:d9:c4:5f:28:66:17:
                    93:0c:0d:ca:c0:dc:cf:22:09:06:2d:91:d5:90:cd:
                    a5:7a:95:75:f7:02:5a:86:7b:12:70:3e:7e:8a:be:
                    24:45:bc:a5:7e:a4:92:e7:af:4a:2b:3b:a8:3b:9f:
                    68:ef:89:e7:36:03:d5:db:23:6d:17:57:6b:10:27:
                    45:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:26:F3:D0:A5:30:EA:4F:CF:C4:AB:6D:F5:3A:C2:3A:19:E6:D2:0D
            X509v3 Authority Key Identifier:
                keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:52:a5:17:d0:49:1d:33:b3:3b:99:ca:f0:48:57:bf:0d:60:
         f8:2e:23:be:95:d1:16:f8:a1:68:2c:50:b6:50:1d:d4:81:77:
         05:7b:96:47:96:6e:98:0a:fa:bb:1a:e8:a7:e8:79:d2:16:34:
         95:2b:b1:63:0e:75:2a:f8:c9:ab:46:69:df:dc:38:25:c1:7d:
         3e:ce:5f:06:65:5f:56:89:60:6b:b1:dd:5f:0e:3e:6a:b0:b5:
         61:2b:12:b5:bf:3f:41:dd:eb:b2:f2:bc:ae:48:1a:c5:34:16:
         13:19:29:df:f3:22:7e:8c:78:e0:f1:35:f0:50:a2:1f:97:fd:
         47:5c:84:83:34:c6:db:f7:6f:b3:36:2d:9f:34:4b:47:e4:99:
         91:d7:9a:a0:82:02:f5:1b:a4:2b:aa:54:26:8f:b0:35:b1:32:
         53:4e:ec:4e:f6:f0:0d:3e:dd:5e:91:a9:69:e2:77:f3:62:92:
         3d:df:6a:58:5f:6f:66:a7:ad:12:cc:56:46:a0:bd:0c:ed:67:
         fa:2c:98:d6:57:fb:74:1c:97:a9:50:4b:81:36:37:63:6a:ee:
         a0:c4:b6:ff:70:02:34:9f:62:48:7b:de:83:ef:45:8d:a0:c7:
         24:2b:d8:8a:3f:a0:be:1b:16:09:91:82:f6:98:d6:f5:38:10:
         8f:98:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:06:01 2026 by rpki-client