Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File:                     C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier:          RjHd+9EEZmTSIUhqFJVrjbbaZdj2io88ieajBKgUp00=
Subject key identifier:   54:B5:5A:F7:37:02:B7:77:86:FD:4F:C8:B8:28:EC:2F:9F:31:29:4B
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer:       /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial:       01A0D5703AC40A54E282EBF6F559FF7D1F04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number:          141D
Signing time:             Thu 24 Sep 2026 22:01:37 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:37 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:37 +0000
Files and hashes:         1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: y4II2jUTSDU/Xtc3ocI37ZYt73wSOABm6MKoPX1F68Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:3a:c4:0a:54:e2:82:eb:f6:f5:59:ff:7d:1f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
        Validity
            Not Before: Sep 24 22:01:37 2026 GMT
            Not After : Sep 25 22:01:37 2026 GMT
        Subject: CN=54b55af73702b77786fd4fc8b828ec2f9f31294b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b5:d0:1e:a0:04:fd:2d:b0:b4:7b:d5:b2:92:
                    d4:8f:82:4d:c6:d7:bc:43:0d:f9:72:0a:51:da:2a:
                    9a:a0:a6:93:7f:51:92:72:a3:fd:82:5c:a9:89:12:
                    12:48:36:b9:a3:4c:82:dd:f0:f5:0c:ad:02:bf:b8:
                    5c:a5:97:b7:df:a0:83:92:6f:6b:1e:d2:60:d9:6d:
                    e8:92:38:97:59:fc:33:88:48:66:a1:42:d8:74:76:
                    ac:8e:5f:95:29:65:f9:45:77:90:28:14:5b:1f:4e:
                    69:4b:07:c4:89:c1:3c:22:80:59:9d:ef:2e:d5:f9:
                    14:35:03:c7:d6:c5:8f:2b:04:84:ff:b7:4c:04:69:
                    da:a5:2d:ee:99:ef:f7:65:59:6b:3b:9a:29:65:1c:
                    79:c8:56:3a:25:8e:a6:07:07:94:34:8e:cd:61:7a:
                    51:a1:2d:bd:31:df:d8:71:50:2a:9c:a6:d7:da:5c:
                    a9:95:ea:d3:80:7b:09:f9:d7:90:eb:42:20:3e:ff:
                    03:e4:2f:37:41:87:e5:7b:2b:13:61:47:1a:ef:39:
                    50:1d:bf:9f:e1:2f:56:d9:b7:47:7d:95:93:2c:65:
                    95:0f:8d:e7:6f:80:ed:d2:b8:23:3d:fa:9c:82:5c:
                    ba:72:b5:57:35:bc:64:c3:8d:18:d9:fc:9e:89:51:
                    d3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B5:5A:F7:37:02:B7:77:86:FD:4F:C8:B8:28:EC:2F:9F:31:29:4B
            X509v3 Authority Key Identifier:
                keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b6:d9:47:81:2d:c0:63:70:e3:f6:d2:69:1e:a0:25:57:3a:
         70:56:05:77:2a:d6:a0:23:12:f0:17:ca:0e:50:1f:82:af:51:
         f5:be:cd:ab:f8:9f:44:32:c8:c2:89:c7:7d:30:5a:bc:f9:33:
         50:c0:68:06:52:2e:b2:52:77:63:f5:87:e3:f4:2d:4b:1e:de:
         8f:7c:33:f7:25:bc:23:9c:ee:7c:61:17:6d:88:01:6c:a5:c2:
         b9:f0:a5:05:82:e7:eb:4b:2b:e0:4a:43:2f:26:c3:4b:07:c8:
         bd:1a:75:e7:a8:67:01:d6:61:d5:0c:1f:ff:6d:f0:8e:1b:b5:
         ec:79:fa:85:e2:0c:76:49:0e:07:4e:16:a0:c1:4b:5a:79:39:
         2a:ce:07:ac:aa:4d:4f:80:d8:db:1c:f6:b5:26:15:6d:5c:91:
         6b:11:23:e6:f5:5c:df:b6:3f:dd:fa:86:e5:df:82:62:f2:79:
         a4:96:a7:54:50:4d:c6:42:7d:26:a8:16:ac:6c:ed:67:1b:b9:
         0a:48:a9:97:11:a4:3e:15:6b:44:e5:e7:2b:8c:03:8e:53:54:
         3d:6d:ee:24:18:91:62:0d:e2:5a:42:c1:2e:16:e4:d3:bd:e5:
         e8:4c:84:91:cd:62:ed:ba:62:24:15:0c:06:d8:79:06:ac:d9:
         4e:c3:5e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:51:09 2026 by rpki-client