Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
File:                     COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json)
Hash identifier:          8ADIuv1IKBb5Ziqz6hJKDbJYTaZHEJSYprECbc3fJ60=
Subject key identifier:   3C:72:1F:6A:3A:16:A5:BE:FE:83:50:0E:42:22:30:9A:B0:16:67:EB
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Certificate issuer:       /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial:       019F9059D9DC973AC6B497F09A2A4A8819B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
Manifest number:          05E5
Signing time:             Thu 23 Jul 2026 19:00:35 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:35 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:35 +0000
Files and hashes:         1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: /1ETSc3rYQSBzanSC+GjwehZor8yCHIfzG55ROmOKLM=)
                          2: UIXAZ8txjJ28tjI6SmjoL7WxOag.roa (hash: lLU1RMXC6Ac97Z2Do9ddKzJUd44r/EFTzj2qCxh0kr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:d9:dc:97:3a:c6:b4:97:f0:9a:2a:4a:88:19:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
        Validity
            Not Before: Jul 23 19:00:35 2026 GMT
            Not After : Jul 24 19:00:35 2026 GMT
        Subject: CN=3c721f6a3a16a5befe83500e4222309ab01667eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ce:55:6e:52:8c:c2:4a:66:f5:12:c8:fd:aa:
                    3a:f2:27:81:fb:7d:85:e4:07:55:43:fa:53:f2:6b:
                    1b:69:7b:87:e1:ba:38:8a:9b:c1:c2:9c:7b:6f:fd:
                    d4:39:55:7e:04:6b:06:10:91:34:f5:04:ae:84:83:
                    7c:73:c3:2a:b5:e8:1d:91:78:d5:4c:e7:7b:26:22:
                    f5:07:9b:d1:75:21:76:71:02:58:8c:91:e2:8f:65:
                    81:38:ca:6d:b1:8e:15:b7:b4:ec:47:db:d1:98:1d:
                    23:8b:03:d9:a6:b4:99:38:e2:f5:29:d2:e1:27:3e:
                    bf:8f:f1:47:0e:20:6d:7d:11:45:90:c2:b3:d0:bf:
                    cc:04:61:49:de:09:79:8e:f9:04:67:1f:62:1f:96:
                    9b:3c:2a:0b:4a:8c:2c:64:4e:84:66:4d:4e:86:8d:
                    04:a4:b4:1f:80:24:f4:02:3d:77:3b:ca:0d:92:48:
                    7f:8d:60:78:ec:64:dc:1d:74:7c:00:79:d1:16:e0:
                    71:88:e5:27:81:f5:1e:cd:0c:19:08:64:4f:63:11:
                    e1:68:06:25:36:91:26:18:32:99:35:a6:a4:66:65:
                    65:0c:11:40:77:c2:db:79:82:5c:e0:0c:fd:7a:30:
                    bb:93:c3:d8:07:a4:e0:40:2f:f7:1b:13:c9:6b:a6:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:72:1F:6A:3A:16:A5:BE:FE:83:50:0E:42:22:30:9A:B0:16:67:EB
            X509v3 Authority Key Identifier:
                keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:53:78:36:36:b5:bc:02:65:e5:0d:0a:03:4a:68:3e:e5:f1:
         e8:26:a6:42:cb:c8:8e:f8:e4:08:42:74:10:a3:10:cc:15:34:
         32:41:ff:60:db:bf:0c:6e:a7:81:b5:89:95:98:75:7b:d7:71:
         ed:1f:bb:49:52:7c:5f:b5:f3:7a:a7:61:0c:f8:59:b4:49:4e:
         23:7c:7a:54:c3:d8:8c:90:8f:d2:87:c3:f3:da:3a:4c:6c:e4:
         66:e5:fb:40:89:31:e4:91:9f:ff:ae:a3:a5:9d:f2:19:52:d5:
         24:21:8d:d2:bd:97:ad:11:25:c9:1e:bb:be:06:5c:12:27:47:
         58:52:37:22:c5:d7:40:c4:50:5a:22:c6:5a:34:22:a4:74:18:
         7d:b2:06:a6:41:03:de:a4:02:eb:e0:f9:86:dd:07:70:38:f0:
         7f:1c:68:2a:8b:dd:81:a1:24:31:95:6b:fd:ef:5b:bb:32:36:
         1c:13:72:73:98:eb:eb:3f:2c:20:69:3c:8d:05:89:13:8c:7f:
         09:a7:8f:da:0d:fb:d6:27:e2:f1:4d:14:63:19:4c:b8:85:4f:
         ac:b8:15:15:82:ce:8b:1f:de:1f:e2:f8:66:5f:39:9e:22:d6:
         fb:51:70:76:de:89:46:87:a9:37:95:db:1b:c1:aa:45:ba:86:
         cd:3b:57:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:51 2026 by rpki-client