Manifest

$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File:                     C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier:          z2e51J5X9rKlHRAGMwcGfCgM5ssVXgbDOGJGaui/Yrw=
Subject key identifier:   6E:85:74:60:59:B8:BF:29:87:B6:A1:2F:90:87:54:43:43:4C:53:C1
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer:       /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial:       2E68105D04BAE6959D25AE975E2AB6305358294E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access:      rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number:          0509
Signing time:             Fri 24 Jul 2026 02:39:23 +0000
Manifest this update:     Fri 24 Jul 2026 02:34:23 +0000
Manifest next update:     Sat 25 Jul 2026 05:54:23 +0000
Files and hashes:         1: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: Nm5/l3YrqRb8+dNYCnzpdCe6M4M40CEq9HYSn4aDUuo=)
                          2: 326131333a376134323a3330303a3a2f34302d3438203d3e203136353039.roa (hash: OUajEHBBbRsewL9OwS+Pvj/T9rrSLXcsIY9ay83jvJk=)
                          3: 326131333a376134323a3330303a3a2f34302d3438203d3e203134363138.roa (hash: OCminjwmZh7lq+WgeZFV1Nn5NIp84rJ8qzJwmmWMbd8=)
                          4: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: wDspyvAFv0/8lKNsucjxa+vjBuKL8czWbdSSoLy0Lf0=)
                          5: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: 5OwzkaLUii9ngjYoZbrYO2htCcGwx8PARIooVDvbl7k=)
                          6: 326131333a376134323a3330303a3a2f34302d3438203d3e203537313936.roa (hash: 6Axqhyp4yqCF4rrEIoh/LCJfrbeWXodzEhXCeqZwsE8=)
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
                          rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:68:10:5d:04:ba:e6:95:9d:25:ae:97:5e:2a:b6:30:53:58:29:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
        Validity
            Not Before: Jul 24 02:34:23 2026 GMT
            Not After : Jul 25 05:54:23 2026 GMT
        Subject: CN=6E85746059B8BF2987B6A12F90875443434C53C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:26:c6:3e:a0:78:ef:66:d2:89:41:76:f0:
                    eb:cf:15:85:ca:f2:88:5c:03:04:01:65:99:0f:5a:
                    16:68:af:5d:6b:0a:e4:b2:37:de:21:8b:f8:fd:f7:
                    10:16:85:12:c2:62:23:be:fa:44:ad:1c:b5:47:d1:
                    b1:c7:98:94:59:a1:14:2f:0a:5b:9d:9b:fd:2b:74:
                    81:96:69:fd:c7:90:77:5d:63:1b:c9:ee:55:6c:27:
                    d0:37:65:00:16:8a:06:c0:49:cd:67:45:e1:df:75:
                    bb:55:9b:99:06:ff:63:73:3e:d3:42:b5:b0:74:f8:
                    a9:26:3f:35:9c:de:df:75:2e:c2:aa:e8:00:00:11:
                    c0:1d:74:4e:5f:03:42:ff:a6:2b:38:c2:77:03:95:
                    b6:54:31:f1:c7:78:cf:87:d3:40:fa:7e:4b:9b:72:
                    9f:56:00:5a:e1:6a:97:d8:94:d9:8a:76:be:8d:f8:
                    6c:ec:a2:aa:13:48:1b:6a:25:16:5b:29:ad:20:6c:
                    ef:33:75:3b:40:b0:cf:fe:39:da:20:8f:f9:55:f5:
                    60:62:99:5b:01:34:53:81:65:5a:f8:ab:37:07:8e:
                    6a:92:c9:3d:24:5e:40:02:c9:2c:9d:4a:9d:b4:94:
                    2c:4e:b9:23:28:d7:43:b4:0b:35:1e:73:b0:47:1e:
                    d2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:85:74:60:59:B8:BF:29:87:B6:A1:2F:90:87:54:43:43:4C:53:C1
            X509v3 Authority Key Identifier:
                keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:9e:ea:56:3c:26:2e:24:af:5e:df:88:da:57:1c:83:14:70:
         0c:91:aa:2d:87:66:01:aa:1b:b8:50:9d:95:61:a2:62:61:1b:
         1b:76:d3:f1:ad:32:25:a0:6f:f7:d1:01:c6:2a:26:ff:84:87:
         a7:e4:ee:70:77:9d:15:3e:c8:8b:c7:02:d8:60:7a:d8:4f:8d:
         1d:2d:dc:d8:6a:bc:0b:d8:3c:1d:65:bf:b3:7b:3b:3f:c9:f8:
         14:48:ee:63:c1:86:c7:84:28:65:db:4a:d7:63:0a:ab:62:72:
         5b:32:1f:7d:b4:70:84:0d:65:12:2a:18:51:ad:53:08:2a:4d:
         19:49:57:c1:38:b6:b5:6e:7b:67:5d:be:72:07:f9:bb:4b:98:
         98:1a:2c:d3:0a:90:3c:f5:b6:a0:a5:0a:fb:a4:df:cc:38:2a:
         55:df:b2:88:82:00:4d:01:2a:b0:30:b1:dc:01:3f:8a:86:89:
         3d:97:8d:e2:9a:5f:cb:3a:da:42:94:80:28:6b:65:01:91:e3:
         0b:e8:74:a7:a2:54:28:28:8e:91:92:90:7c:ca:bd:f0:a2:24:
         9b:c3:dd:d1:c2:da:0f:17:9d:a1:e4:75:02:6c:5f:98:9a:d6:
         30:4e:15:34:3e:e3:97:e4:5c:49:26:63:36:1b:53:08:9f:03:
         c9:05:fc:c4
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIULmgQXQS65pWdJa6XXiq2MFNYKU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzYTcxNjlmNjQ5OWRkMjgxNWM5MTc4YTg5MGJjNGMw
NTE0ZGRmOTAeFw0yNjA3MjQwMjM0MjNaFw0yNjA3MjUwNTU0MjNaMDMxMTAvBgNV
BAMTKDZFODU3NDYwNTlCOEJGMjk4N0I2QTEyRjkwODc1NDQzNDM0QzUzQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyGCbGPqB472bSiUF28OvPFYXK
8ohcAwQBZZkPWhZor11rCuSyN94hi/j99xAWhRLCYiO++kStHLVH0bHHmJRZoRQv
Cludm/0rdIGWaf3HkHddYxvJ7lVsJ9A3ZQAWigbASc1nReHfdbtVm5kG/2NzPtNC
tbB0+KkmPzWc3t91LsKq6AAAEcAddE5fA0L/pis4wncDlbZUMfHHeM+H00D6fkub
cp9WAFrhapfYlNmKdr6N+GzsoqoTSBtqJRZbKa0gbO8zdTtAsM/+Odogj/lV9WBi
mVsBNFOBZVr4qzcHjmqSyT0kXkACySydSp20lCxOuSMo10O0CzUec7BHHtJ3AgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUboV0YFm4vymHtqEvkIdUQ0NMU8EwHwYDVR0j
BBgwFoAUwjpxafZJndKBXJF4qJC8TAUU3fkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnN5bmMucnAua2kvcmVwby9jbG9ub3RoLzEv
QzIzQTcxNjlGNjQ5OUREMjgxNUM5MTc4QTg5MEJDNEMwNTE0RERGOS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL3dqcHhhZlpKbmRLQlhKRjRxSkM4VEFVVTNmay5j
ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3JzeW5jLnJw
LmtpL3JlcG8vY2xvbm90aC8xL0MyM0E3MTY5RjY0OTlERDI4MTVDOTE3OEE4OTBC
QzRDMDUxNERERjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+nupWPCYuJK9e34jaVxyDFHAMkaoth2YB
qhu4UJ2VYaJiYRsbdtPxrTIloG/30QHGKib/hIen5O5wd50VPsiLxwLYYHrYT40d
LdzYarwL2DwdZb+zezs/yfgUSO5jwYbHhChl20rXYwqrYnJbMh99tHCEDWUSKhhR
rVMIKk0ZSVfBOLa1bntnXb5yB/m7S5iYGizTCpA89bagpQr7pN/MOCpV37KIggBN
ASqwMLHcAT+Khok9l43iml/LOtpClIAoa2UBkeML6HSnolQoKI6RkpB8yr3woiSb
w93RwtoPF52h5HUCbF+YmtYwThU0PuOX5FxJJmM2G1MInwPJBfzE
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:29:06 2026 by rpki-client