Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File:                     C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier:          bcOYt+72nu3k21/ES3dfgjXhnQCQKz5NefzRzGt3pak=
Subject key identifier:   A8:D5:F7:0C:0B:38:08:EC:85:BE:91:BB:EB:EC:53:1E:EE:18:73:D1
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer:       /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial:       019F90FF0699D9480F3F6B7B49051CA4AB59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number:          1375
Signing time:             Thu 23 Jul 2026 22:01:00 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:00 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:00 +0000
Files and hashes:         1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: 8JMz/NmOfiluO7B7CKzSm/NRSbwNs4wNV9TEdRwZwMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:06:99:d9:48:0f:3f:6b:7b:49:05:1c:a4:ab:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
        Validity
            Not Before: Jul 23 22:01:00 2026 GMT
            Not After : Jul 24 22:01:00 2026 GMT
        Subject: CN=a8d5f70c0b3808ec85be91bbebec531eee1873d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:5b:44:b1:d1:4b:e8:c1:02:91:e7:fb:d7:
                    f0:b0:b8:fa:14:de:15:28:ca:7e:1d:6a:96:c8:d1:
                    62:3d:61:fa:12:86:b5:f5:92:6b:d3:00:c6:09:42:
                    ea:ae:be:d4:5c:ab:75:34:9b:e9:4e:c4:f8:7e:92:
                    ae:0c:18:07:3b:5f:5d:67:aa:15:c3:13:c9:2e:cf:
                    c3:f8:b4:81:f9:95:bd:13:6a:7b:ad:27:16:23:b3:
                    0e:2e:22:e4:60:63:92:b4:b3:2e:cd:97:f3:ca:c0:
                    ea:de:63:fc:a3:dd:ed:6f:65:33:2d:5e:3f:ac:f2:
                    9b:52:86:1f:22:92:c6:25:15:05:c3:92:f1:63:58:
                    b0:41:a3:bc:d5:48:f3:45:58:fd:fd:7c:47:9b:b8:
                    bd:12:a6:36:d8:4b:bc:e8:8c:85:97:01:26:51:f2:
                    30:0c:d7:bc:14:91:9a:85:4d:62:b8:09:3c:cc:90:
                    a5:c0:65:de:2c:48:e6:b5:fb:d1:d0:2a:a1:b5:7a:
                    11:0c:5c:64:c0:06:c8:aa:7d:a6:15:af:ce:7e:09:
                    aa:e8:52:79:43:b0:07:c8:85:36:b6:50:14:7e:19:
                    b6:9e:7e:00:a7:71:78:66:9d:59:74:a8:bf:7a:00:
                    79:82:16:6a:b8:c4:8b:ab:0b:95:6a:04:95:e9:38:
                    3b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D5:F7:0C:0B:38:08:EC:85:BE:91:BB:EB:EC:53:1E:EE:18:73:D1
            X509v3 Authority Key Identifier:
                keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:b8:33:27:83:b8:40:3a:75:56:5d:ab:27:ac:a9:92:0c:
         32:21:f7:72:c3:98:9a:53:c7:b2:8b:d8:ce:45:c2:02:46:ac:
         16:60:36:ef:48:1a:70:78:e9:f1:bc:fc:24:dc:4e:a3:eb:28:
         84:ad:14:5d:7b:cf:3c:1f:a6:96:22:1e:c4:1f:9c:94:71:be:
         b4:15:df:63:b6:0e:08:e2:7d:d6:e1:1f:79:79:e6:be:76:5e:
         ec:34:86:3f:35:6f:35:0c:4c:cf:ac:c3:66:cd:7e:03:b1:4e:
         0e:35:6b:87:38:cf:af:41:8e:89:ff:03:db:e6:1c:af:b5:9c:
         bb:07:87:7c:c2:f6:84:16:58:b4:04:94:cb:b6:5f:05:64:95:
         53:b8:80:b5:37:99:a0:79:56:92:35:20:09:01:e2:08:03:e0:
         5b:f6:2f:2c:b8:da:78:78:f1:04:39:d0:64:18:42:67:16:a6:
         2d:32:67:71:8d:09:6b:77:c3:73:24:2d:03:e2:6b:cc:ad:ea:
         a5:b2:26:a9:00:78:a5:2f:87:4f:80:f1:72:c1:43:c5:35:ec:
         48:e7:aa:ea:51:3f:29:e3:37:71:05:06:69:14:d0:fe:3d:54:
         8d:87:06:1b:d5:bd:14:03:fa:4e:d3:f4:f7:df:db:1c:c6:fe:
         ad:2e:d2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:01 2026 by rpki-client