Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File:                     Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier:          zXVsRtQwGR3KZ0RJ0hMrN+a9/qY4phOw3CwW8U+jm4o=
Subject key identifier:   AE:9D:2D:30:E0:A7:42:95:5F:BC:40:6C:29:2F:E9:67:B0:84:CB:2A
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer:       /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial:       01A0DB3B531D4067233A0AAA0EA77ED5B84F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number:          1A6E
Signing time:             Sat 26 Sep 2026 01:01:33 +0000
Manifest this update:     Sat 26 Sep 2026 01:01:33 +0000
Manifest next update:     Sun 27 Sep 2026 01:01:33 +0000
Files and hashes:         1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: B4pGgUzJxs+ftfkgs+6R2TgJ159XhgTwM1/WKNrqMrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:3b:53:1d:40:67:23:3a:0a:aa:0e:a7:7e:d5:b8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
        Validity
            Not Before: Sep 26 01:01:33 2026 GMT
            Not After : Sep 27 01:01:33 2026 GMT
        Subject: CN=ae9d2d30e0a742955fbc406c292fe967b084cb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:28:93:bc:07:77:42:d6:27:e5:eb:9d:e4:74:
                    34:05:cc:82:24:cc:82:15:b6:16:3f:2d:08:38:33:
                    fc:65:fc:25:2d:d0:b1:2e:10:f4:73:3f:17:9c:96:
                    e5:84:ab:5c:fa:de:67:6a:27:18:18:81:b2:c6:81:
                    ad:38:60:92:92:b9:18:19:a4:dd:96:44:a6:93:ed:
                    bc:87:54:d3:cf:2d:56:5f:43:a2:8e:ee:ba:a3:89:
                    0e:23:4b:b9:6c:a0:2f:a8:2e:87:ea:84:cc:e5:11:
                    30:49:aa:79:31:05:39:09:5c:8f:e6:4c:29:f6:7d:
                    42:18:13:13:f8:32:28:37:f0:33:c0:1c:bc:91:12:
                    77:51:6d:7f:17:0e:a4:13:1a:d8:9e:b5:bd:b4:7c:
                    21:02:6a:c0:d5:9e:c3:f0:d2:e4:93:dd:07:46:78:
                    fa:8e:a7:2a:5a:95:04:85:3b:9d:29:88:7a:eb:71:
                    68:c9:78:4a:0b:a9:7d:28:e3:38:22:8a:e1:7e:33:
                    01:4e:ee:f8:5e:8b:31:06:11:9b:ec:e5:dc:81:05:
                    6d:58:32:ab:6f:16:a7:03:b4:55:d7:ef:d0:2a:5b:
                    e7:8f:21:61:05:4e:97:d9:ea:76:9f:09:3a:41:ce:
                    b9:47:5c:dd:2d:b2:67:61:20:bc:b1:7b:74:21:bb:
                    71:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9D:2D:30:E0:A7:42:95:5F:BC:40:6C:29:2F:E9:67:B0:84:CB:2A
            X509v3 Authority Key Identifier:
                keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:25:d4:92:04:7c:6b:24:21:12:83:88:49:23:2c:f8:29:f8:
         76:fd:29:55:97:b2:5f:a3:27:37:14:a2:0e:c9:13:a5:df:43:
         9b:b3:e7:fa:33:26:89:72:c9:5a:9d:f1:6a:29:36:d9:04:2c:
         72:40:53:b7:36:11:79:e2:e8:ee:0b:cb:34:b9:26:0c:77:45:
         23:4a:e1:fb:e8:35:a5:14:ec:bd:5f:bb:4c:38:28:1f:4f:fb:
         da:f4:99:d9:38:61:18:8a:bc:58:7f:cd:1f:63:8b:81:50:d2:
         fb:64:47:37:20:90:1b:6f:38:5d:d5:bf:84:66:0a:3d:fd:f0:
         8c:14:04:02:41:91:06:6e:9c:5f:d4:2c:d4:f6:4d:80:20:0e:
         0c:24:ab:06:fd:2d:f6:3c:cc:72:c6:0d:8e:df:99:e5:cd:f2:
         65:95:0b:65:c8:88:a9:e2:ce:1d:10:29:f9:ce:dc:64:f9:1c:
         e3:85:7b:5e:88:3d:e6:a8:84:ba:af:45:54:e1:0e:81:7c:cc:
         4d:3d:7d:88:c2:9c:b7:c7:c1:9b:74:92:50:7e:4f:0b:95:81:
         2b:2a:4a:2a:06:c3:76:25:d1:b3:1e:8f:96:d8:ac:c3:4a:46:
         75:eb:f9:28:0f:62:81:30:dd:fd:7c:62:ac:99:91:84:ca:49:
         4b:51:e1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:05:22 2026 by rpki-client