Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
File:                     Co59_NIAyF6zysZvhZtxEKuZsQo.mft (raw, json)
Hash identifier:          EWOh2QE863CcL/VCGR3jza7XfIx8/dfIGp3Ua6N1F2Y=
Subject key identifier:   4B:2D:66:E8:4A:18:7F:5B:25:19:DC:47:0E:07:3C:2F:2C:6A:74:F5
Authority key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
Certificate issuer:       /CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Certificate serial:       019F92ED4BA5A9CB5BBFB39F6AA4651BA31F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
Manifest number:          06AB
Signing time:             Fri 24 Jul 2026 07:00:52 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:52 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:52 +0000
Files and hashes:         1: Co59_NIAyF6zysZvhZtxEKuZsQo.crl (hash: H/8FIiLhVAOgTkVekHrHzOV/GLGYWdKWAnayMHIknQo=)
                          2: db61oXLP39Cp59_X9LRtM_MiXZA.roa (hash: 2/tDRp+KE5yxGlSOAf8H33OyX8Awatl3Wh7fusLDcOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:4b:a5:a9:cb:5b:bf:b3:9f:6a:a4:65:1b:a3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
        Validity
            Not Before: Jul 24 07:00:52 2026 GMT
            Not After : Jul 25 07:00:52 2026 GMT
        Subject: CN=4b2d66e84a187f5b2519dc470e073c2f2c6a74f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:7c:76:36:9e:5c:45:29:89:13:99:32:99:
                    cd:c4:94:40:87:13:08:df:a1:5a:36:7d:72:5a:a7:
                    8b:6e:b4:a6:dd:cb:92:de:10:31:39:10:3d:46:e8:
                    8f:22:2d:59:e4:7e:80:fd:31:7b:01:c9:ef:8e:1d:
                    c9:9d:bb:3d:a6:c5:b3:78:46:0a:60:dc:ec:25:98:
                    86:74:eb:e2:1c:30:28:9c:7f:9c:f5:51:9b:65:82:
                    40:13:f8:56:15:8f:59:60:a3:81:65:a9:97:20:d0:
                    82:14:45:30:33:57:90:39:de:43:d8:9a:0f:a4:01:
                    1c:3d:d6:96:67:61:0e:4f:94:3c:3a:4f:a0:2e:46:
                    9d:00:be:7a:14:d2:12:69:d4:ed:1c:c8:d3:05:73:
                    81:12:6e:3b:13:be:42:f3:ee:95:24:93:f9:e4:0d:
                    2d:c6:63:bb:a4:58:6e:1f:8e:18:a5:ef:8d:96:c4:
                    eb:62:2e:b1:c6:dd:e7:00:f5:a5:6a:cf:4e:ca:a5:
                    50:30:ad:73:62:af:f7:82:9a:db:91:65:fb:94:7d:
                    30:99:07:a3:fe:6b:ec:b6:0b:13:5b:ec:c6:24:b9:
                    4a:ca:e5:f2:46:fe:2a:5f:d3:3b:c1:61:4f:94:ed:
                    41:3d:5c:bc:72:73:f3:53:a9:7e:13:6f:4b:4d:27:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2D:66:E8:4A:18:7F:5B:25:19:DC:47:0E:07:3C:2F:2C:6A:74:F5
            X509v3 Authority Key Identifier:
                keyid:0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:a2:51:e5:b0:c3:4b:bc:a5:59:c9:ef:f0:8f:f8:75:0e:c9:
         93:d4:00:a6:30:4b:6d:6b:1f:79:38:52:bb:31:81:b0:a7:6f:
         df:bd:bc:b3:7b:14:cc:7a:44:73:82:74:be:40:95:2f:fa:56:
         16:d0:e7:2a:88:79:b5:58:46:f1:cb:28:d4:19:46:a3:42:2b:
         04:62:e8:ec:47:7c:2e:04:8b:02:04:ec:c2:3b:30:8f:b2:a6:
         4f:1f:2e:fd:82:be:27:6e:6f:37:b5:65:95:8d:66:0b:dd:42:
         bf:3a:e3:eb:e9:13:3c:53:c6:93:ab:6d:d3:41:a9:f1:e7:75:
         e9:cf:86:b6:d2:b6:0d:0e:53:0c:4c:fb:cb:fc:0a:8e:5d:98:
         3b:af:5e:05:27:50:52:a5:6b:b1:05:9b:9e:da:59:ae:18:df:
         30:07:65:e2:b0:37:a3:e5:b1:af:51:78:df:35:c3:b8:78:7f:
         fe:00:70:27:d4:68:72:4a:3f:42:ad:8c:43:3d:4a:93:82:32:
         d7:83:32:66:87:f2:da:6f:f2:aa:f9:5f:7a:e0:78:6c:4c:a4:
         fb:8c:46:82:2e:e8:23:f8:3b:11:76:19:56:40:1c:58:80:8e:
         91:2f:e6:a4:5f:3e:0a:12:cc:07:e1:0c:2b:9c:da:91:96:b1:
         52:fa:37:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:18:56 2026 by rpki-client