Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
File:                     C_08lbYJJ6X2i5lee5eeZoA8EO0.mft (raw, json)
Hash identifier:          +KiiN6xwvHTvL40rmrF65Vd7XhqnlpnXJv1kioweFbo=
Subject key identifier:   0A:94:25:32:64:9E:DA:6D:2D:46:74:04:7E:A7:78:75:B7:32:CA:BB
Authority key identifier: 0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
Certificate issuer:       /CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Certificate serial:       019D28F2CE276728655B4748723842EDBE18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
Manifest number:          0C60
Signing time:             Thu 26 Mar 2026 07:01:34 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:34 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:34 +0000
Files and hashes:         1: C_08lbYJJ6X2i5lee5eeZoA8EO0.crl (hash: 7BI+sbPR7IQWPkVaTkm8o+AjSf9aOwFTKV2+YN2HHM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:ce:27:67:28:65:5b:47:48:72:38:42:ed:be:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
        Validity
            Not Before: Mar 26 07:01:34 2026 GMT
            Not After : Mar 27 07:01:34 2026 GMT
        Subject: CN=0a942532649eda6d2d4674047ea77875b732cabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cf:c5:9c:5a:b1:ff:6e:30:3c:13:61:3a:ad:
                    a7:ee:23:9f:29:53:4c:f3:dd:ec:9c:4f:7e:86:9e:
                    63:84:b9:6e:65:d8:5c:02:3d:81:1c:12:fb:e7:24:
                    89:d2:5c:33:1b:4b:05:db:a3:ae:42:71:53:59:fe:
                    f7:fa:eb:ee:d4:56:20:58:9d:57:81:db:ea:6f:67:
                    40:e9:01:d5:52:e4:f3:be:60:5b:f7:85:60:dc:85:
                    61:c4:c2:19:09:88:1a:83:ae:bf:28:88:1b:4c:be:
                    6b:35:60:7c:e7:68:4f:06:9b:6a:b2:ba:16:ab:48:
                    21:8e:a5:fd:bb:86:6d:08:dc:22:da:b9:b1:8d:f6:
                    64:21:83:29:e9:be:59:bd:91:3d:2a:88:f0:5c:a7:
                    bd:6d:f8:62:fa:e4:48:26:8e:21:d5:72:1d:fd:74:
                    36:ca:32:e3:32:e7:00:7a:60:5c:81:fc:d6:8e:bb:
                    b9:fe:98:96:71:a8:b8:b2:36:9c:36:09:cf:eb:cb:
                    5c:71:2f:a5:fc:7a:e6:4e:ed:0e:12:16:89:dc:e2:
                    27:06:38:76:86:05:ad:ab:6f:01:32:1f:e5:0c:bd:
                    ad:87:95:97:46:9c:8d:ea:c9:91:16:c3:bb:84:da:
                    5f:eb:49:b7:05:67:95:1b:da:d7:14:ec:bf:53:4c:
                    4e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:94:25:32:64:9E:DA:6D:2D:46:74:04:7E:A7:78:75:B7:32:CA:BB
            X509v3 Authority Key Identifier:
                keyid:0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:28:62:05:c2:bf:9c:a1:5c:21:ad:84:c9:ad:f5:ba:35:db:
         de:8b:d1:c1:09:8f:0f:bd:27:cc:4c:87:1f:9b:ed:3b:3f:3a:
         c4:24:7f:de:62:8f:4d:12:45:b1:0a:df:be:ca:ec:de:06:76:
         a3:c5:20:4f:a2:30:3c:9a:2c:62:47:1e:48:e0:49:84:08:1f:
         d7:bd:3a:52:26:5d:37:b6:62:fd:c3:09:3d:30:9e:7d:76:6b:
         af:ab:5c:d7:40:2e:8d:35:b7:26:ac:3d:74:8b:36:b3:06:a8:
         f7:05:f4:d4:27:3d:61:f6:cc:c1:2f:7a:04:9b:66:d0:de:d9:
         69:e4:ba:0e:7d:21:f4:73:d4:16:16:ad:4c:39:8f:26:07:ef:
         18:6b:5a:f0:09:f3:62:21:45:3f:d1:a1:73:c2:d2:93:9a:65:
         97:98:f9:80:a3:42:97:a8:6b:fb:3b:20:0d:ce:e4:d9:5b:92:
         89:db:a8:7e:3c:fe:c0:e4:55:87:3e:3a:93:6f:05:ab:e4:ea:
         6b:f2:74:a4:7f:49:5f:85:4a:02:32:81:8e:16:bd:06:89:b2:
         c0:65:08:48:53:ed:36:16:53:4d:8b:16:cc:94:e0:78:2c:a8:
         e1:9e:09:d4:c4:79:6e:99:53:62:6b:8a:3c:6a:6b:8f:11:88:
         5b:73:a6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:38 2026 by rpki-client