Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File:                     CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier:          QNfwQr8nVB1/l5GNTrceKU0dmO5wjMjkTtGzZAYXL2g=
Subject key identifier:   03:5A:F3:EC:22:C3:E9:8D:6B:5D:E5:15:7A:E9:3C:53:CF:95:6A:7B
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer:       /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial:       019EBEB665597E582CFD6676B478DA4496DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number:          0755
Signing time:             Sat 13 Jun 2026 02:01:24 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:24 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:24 +0000
Files and hashes:         1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: hT2z/Evh5YDJkIJ4pMco+aKzkhl2mhy3nVO7TEl6pLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:65:59:7e:58:2c:fd:66:76:b4:78:da:44:96:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
        Validity
            Not Before: Jun 13 02:01:24 2026 GMT
            Not After : Jun 14 02:01:24 2026 GMT
        Subject: CN=035af3ec22c3e98d6b5de5157ae93c53cf956a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f5:fb:a8:d4:d8:b4:ae:29:e9:73:46:e1:a9:
                    b7:75:7c:a3:f6:f4:e8:f4:63:2e:49:2f:0f:5c:24:
                    c4:9c:21:ed:e6:20:d3:9d:49:49:c0:2b:4b:0a:78:
                    7b:0e:e6:ba:39:71:18:ea:1c:86:50:c8:c0:4a:f9:
                    a8:19:be:f7:ec:14:75:06:ef:0b:fb:d2:38:09:a7:
                    ff:f2:de:cf:ab:3e:10:18:8e:98:4b:d1:23:c0:0d:
                    b7:24:64:6d:ae:d7:35:eb:1f:ee:be:31:bf:0c:70:
                    ba:c9:b0:fc:22:42:5f:7a:7e:02:4d:18:9b:a3:ac:
                    9f:50:a1:84:ec:bc:e1:be:4a:ac:68:2d:de:0e:11:
                    b8:69:77:aa:f6:da:d2:3c:69:9a:59:63:66:b6:d5:
                    6a:54:3e:e8:52:9e:6e:68:cc:e8:01:a9:ef:bd:6c:
                    42:af:47:54:d8:29:c2:41:43:13:9e:1f:af:eb:73:
                    21:e1:a2:8b:b8:62:53:14:ef:08:1d:4a:6f:7d:07:
                    b8:c4:91:6d:e0:a4:7e:da:35:f6:2e:cc:98:dc:e4:
                    cd:e2:2f:07:43:36:14:d8:74:a2:62:49:d2:36:68:
                    ef:c8:50:4a:94:cc:15:74:a3:91:f5:70:ca:7b:11:
                    77:70:aa:ce:37:6c:d9:07:6b:c8:3d:c9:47:1f:bf:
                    3d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5A:F3:EC:22:C3:E9:8D:6B:5D:E5:15:7A:E9:3C:53:CF:95:6A:7B
            X509v3 Authority Key Identifier:
                keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:30:35:07:1b:1e:8d:f6:2a:d9:c4:af:d4:c9:02:41:6d:d4:
         83:39:14:03:4e:7e:ab:b9:68:44:a9:18:79:a5:61:85:02:7e:
         f1:f6:06:00:07:74:19:94:98:00:3a:03:c3:5c:e2:63:83:2d:
         24:8f:6d:69:ba:48:ee:6a:8e:16:c7:d7:ce:c7:54:8d:f6:f6:
         e5:2c:36:78:d4:0a:10:4d:a7:2d:0d:55:5d:e8:2e:28:6d:98:
         6f:ec:e0:f0:d7:e5:9e:c5:11:4a:9d:17:c8:27:50:93:b0:c7:
         68:12:df:cb:4e:74:ad:a6:6b:d8:8a:5a:fe:b7:3b:42:d9:12:
         6f:8a:3a:c5:49:d4:8e:9c:00:7c:12:e3:16:7f:1e:df:2d:20:
         5d:5d:45:64:2a:0f:fe:76:ce:71:f3:e2:27:ef:ab:33:2b:f6:
         07:0a:bb:ce:05:08:77:79:69:60:c1:c0:01:43:39:76:9a:17:
         9a:3f:f0:79:e4:93:7c:42:fc:29:30:75:1b:da:03:62:46:c4:
         9d:df:78:dc:02:ad:5b:d0:23:de:39:07:c7:e5:25:33:96:28:
         ec:2c:3b:94:de:4d:66:15:66:d9:d7:79:c0:57:cd:07:b5:3d:
         38:ce:7d:d8:7e:e0:b7:cb:5f:07:eb:e7:15:39:dc:e4:88:5f:
         50:2d:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:49 2026 by rpki-client