Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File:                     C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier:          c6W0D5IpjYv35qvgzSxE6FJC43EZ69Dj1dK2uMNh/Sk=
Subject key identifier:   C0:6E:0D:86:25:C0:D8:97:EA:E2:5A:D8:B3:48:97:41:87:84:92:1B
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer:       /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial:       019EBE7F5A0BBAC4A209B1B022516017F259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number:          1308
Signing time:             Sat 13 Jun 2026 01:01:17 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:17 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:17 +0000
Files and hashes:         1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: 6W5XAwTCQcREF6zUSd1iCKQzHQGKWP2g8HdAyrTosas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:5a:0b:ba:c4:a2:09:b1:b0:22:51:60:17:f2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
        Validity
            Not Before: Jun 13 01:01:17 2026 GMT
            Not After : Jun 14 01:01:17 2026 GMT
        Subject: CN=c06e0d8625c0d897eae25ad8b34897418784921b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:71:07:9d:b4:a2:73:95:46:5c:31:04:6c:
                    d3:52:48:3e:bc:c2:6a:17:0e:b4:ee:68:41:b9:ac:
                    7e:c5:16:96:be:3d:13:20:60:83:a4:87:60:71:1c:
                    2c:2a:85:68:55:eb:bc:48:29:84:25:15:e8:1b:3c:
                    35:0b:64:ee:38:60:99:e9:1e:b4:6c:17:ae:20:40:
                    ab:18:74:e3:3d:a2:2d:33:d3:99:0d:b4:f6:6f:42:
                    22:27:1f:f8:18:53:c7:c0:72:5b:9b:fa:63:ed:57:
                    ea:6c:70:46:6c:4a:95:1a:9a:8d:32:af:ea:36:a9:
                    41:b7:2e:13:8d:af:f2:f5:88:fc:09:76:20:3f:0e:
                    5e:53:37:81:f2:f5:d0:f7:83:a8:3f:79:2f:2c:8d:
                    08:93:6b:6c:8e:bb:7f:05:b6:b0:45:51:8f:6f:d3:
                    14:1c:55:f0:af:8d:97:5d:6b:91:e2:54:e8:d5:4d:
                    1e:4c:4b:af:24:9b:fe:31:f1:60:25:43:46:46:f4:
                    a5:3c:02:55:df:28:23:53:c3:44:a1:e7:86:19:0b:
                    9d:52:08:5e:11:3c:fe:7a:30:01:73:f4:9e:ad:d5:
                    d5:20:9b:2d:70:b6:84:bf:48:9b:08:95:47:1f:ba:
                    7d:00:cd:ff:2f:46:d6:7b:60:a6:40:a1:4d:ea:70:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6E:0D:86:25:C0:D8:97:EA:E2:5A:D8:B3:48:97:41:87:84:92:1B
            X509v3 Authority Key Identifier:
                keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1b:5a:40:a1:ed:85:56:50:3d:1a:b9:98:34:fb:25:5f:61:
         9f:5d:b0:6c:3b:d4:f2:24:89:da:ee:50:a3:a2:a1:af:9e:fe:
         8e:6f:53:0d:ee:6c:9b:08:79:70:60:a5:51:69:49:e5:87:b3:
         c3:0d:d1:b4:d3:ba:1f:2f:51:68:18:38:da:8e:30:7f:e2:16:
         d5:f3:85:14:fa:5a:8d:34:a4:50:a2:48:a8:f7:2c:26:91:70:
         08:b8:8c:69:80:ad:59:db:48:38:94:02:7a:ac:cc:ea:02:b4:
         ed:fb:64:09:3c:e2:f2:bc:4a:a5:80:2f:fd:68:d9:38:b9:57:
         a5:87:58:63:ba:78:e1:7d:da:84:28:5f:5f:83:aa:19:54:bd:
         fa:43:bd:f4:89:f8:ae:91:b4:64:71:09:11:00:24:e0:23:8a:
         dd:69:f9:70:48:d2:78:eb:f3:ac:3d:20:29:b8:27:e3:a5:3f:
         83:57:9b:57:8e:11:8f:f5:ef:54:0f:89:af:2f:08:2f:53:2d:
         45:96:ff:4a:60:95:a9:ba:c5:9e:e1:02:ac:a1:e5:cb:b7:a0:
         d7:c6:b6:7c:2c:09:83:0c:c8:42:1a:86:0f:fa:c9:aa:96:b4:
         9b:72:24:d1:72:16:6a:e2:d5:6a:ad:33:75:4d:33:2a:15:90:
         e0:9a:8b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:50:54 2026 by rpki-client