Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
File:                     C8iTN1rRVbX_ztPL7iU1uGWf44k.mft (raw, json)
Hash identifier:          LkVAkLtWNAduINIiv6LSQUnUHK/y5Qnph1Gg+JYAB94=
Subject key identifier:   4C:34:9F:6E:C5:EB:F1:6D:5D:A1:C2:7E:51:3C:12:BD:80:AA:7C:29
Authority key identifier: 0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
Certificate issuer:       /CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Certificate serial:       019F905A3908CB01F3EF03BB87466A025FB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 19:00:59 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:59 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:59 +0000
Files and hashes:         1: C8iTN1rRVbX_ztPL7iU1uGWf44k.crl (hash: p3j9kwGCeA+wSMbnWjtNNpUTcAKghJ0GcJYtwjwIAjM=)
                          2: _1uaADsxq12x8Ida7C5U5GdcwqY.roa (hash: M/706uhTR0kxovup6hnBaKH4VlgykklF/JkrjqrTN+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:39:08:cb:01:f3:ef:03:bb:87:46:6a:02:5f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bc893375ad155b5ffced3cbee2535b8659fe389
        Validity
            Not Before: Jul 23 19:00:59 2026 GMT
            Not After : Jul 24 19:00:59 2026 GMT
        Subject: CN=4c349f6ec5ebf16d5da1c27e513c12bd80aa7c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:f7:26:d0:c1:a9:c6:89:c0:43:4a:07:82:
                    cd:ad:fd:a3:e6:55:be:8a:fb:98:dc:30:b8:c6:92:
                    38:3c:83:03:72:f0:d3:bf:7e:7c:25:80:a9:46:7d:
                    df:9d:52:77:e0:0f:c9:53:8a:07:6b:13:05:be:b9:
                    3c:a1:32:07:d5:63:d1:51:34:09:93:13:36:9b:61:
                    07:51:5a:b9:a6:41:9c:c3:f7:85:5f:1f:c1:f0:16:
                    a9:f9:64:f6:92:91:b8:35:d5:e5:0c:e7:68:47:a0:
                    f4:38:3f:42:97:f7:75:50:93:36:b4:81:7d:41:c4:
                    9b:7f:48:7f:40:da:a0:7c:2c:e4:48:73:26:02:d7:
                    ab:71:43:fc:02:02:56:4a:67:ea:8b:ec:d3:60:b8:
                    6c:97:65:1a:f5:63:f8:54:a8:fc:96:47:c5:74:e5:
                    56:08:71:29:bb:e3:1c:63:ba:24:e6:08:9c:07:28:
                    a1:a4:d1:4a:b8:01:c5:cb:91:09:72:b6:2c:88:3f:
                    ca:66:1c:20:00:c9:54:7e:82:eb:9f:42:5e:42:2d:
                    e7:56:fb:6d:3e:b3:2d:c8:68:10:37:07:c2:d8:d9:
                    49:50:46:76:75:b8:b3:24:8e:1a:55:ec:84:a0:d3:
                    fa:86:f1:90:b9:a7:4d:36:84:89:c1:3a:e2:bc:b7:
                    c4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:34:9F:6E:C5:EB:F1:6D:5D:A1:C2:7E:51:3C:12:BD:80:AA:7C:29
            X509v3 Authority Key Identifier:
                keyid:0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:3e:a9:a2:ea:ff:3d:f3:1c:e0:65:17:69:fe:28:30:7f:
         56:b1:50:50:ca:ad:3e:7d:47:db:64:59:80:7f:e9:56:10:c6:
         e1:69:b1:bd:43:a0:5d:f2:e2:6f:90:f3:7e:9f:56:31:e6:d2:
         38:da:ad:1d:36:51:36:13:3b:40:16:f4:8c:07:42:c7:ef:4f:
         7b:96:85:ef:ab:b5:3f:eb:f7:64:d1:62:23:65:d6:54:57:de:
         df:e1:30:47:79:73:15:b0:05:2b:44:49:65:4a:18:93:89:0b:
         12:39:03:d0:60:e5:02:dd:fb:4e:7d:c1:a2:e7:36:bd:2e:74:
         87:66:e3:86:bd:ac:09:98:87:c1:ac:8a:99:1d:7d:ed:82:cd:
         c6:94:8f:96:b3:11:27:ad:9b:e0:97:c8:fc:55:43:5d:92:67:
         2c:25:d1:3b:c9:b8:be:f3:fc:24:0c:14:8a:6c:98:d9:81:cf:
         9e:43:dc:25:6e:57:e1:f6:15:9c:d7:87:3a:e8:49:5b:a5:a9:
         89:50:d8:9a:70:42:77:7a:55:cc:e5:00:9f:a6:1f:47:05:8a:
         f6:77:d8:aa:68:57:03:ab:78:f8:44:2e:28:c6:26:33:cc:6f:
         b1:0a:52:1f:e6:74:0c:3c:18:86:da:7a:f4:65:a4:83:a0:21:
         41:c5:a3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:22 2026 by rpki-client