Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File:                     Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier:          ByFJYUkyCmKH1wrFXayfd+C5uYkGbV2TZdLenLFkEIE=
Subject key identifier:   C6:65:05:CD:29:AE:89:8B:62:67:CF:37:DE:17:27:C9:6F:AA:88:A7
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer:       /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial:       01A001018ADD7C4E1FDD75C65D595F3F10A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number:          19FD
Signing time:             Fri 14 Aug 2026 16:01:13 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:13 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:13 +0000
Files and hashes:         1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: 1IiXwjbUc0C9mQ3sBSkm/cIkWPp8OzWSoWYchybMXbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:8a:dd:7c:4e:1f:dd:75:c6:5d:59:5f:3f:10:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
        Validity
            Not Before: Aug 14 16:01:13 2026 GMT
            Not After : Aug 15 16:01:13 2026 GMT
        Subject: CN=c66505cd29ae898b6267cf37de1727c96faa88a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:66:c6:5b:e9:5d:cb:66:ef:3e:9f:88:1b:
                    53:fc:b5:bf:3e:7d:d2:b1:a1:95:d2:ff:7d:13:2a:
                    45:81:cb:70:1d:9a:79:c7:33:83:52:29:ec:a2:58:
                    b6:d6:83:7d:29:69:f2:02:48:b4:8f:37:48:42:4c:
                    71:f0:7c:c2:88:4a:19:07:e0:ae:6e:73:05:be:07:
                    e7:9a:3c:f5:bc:bd:fa:d6:8e:82:6f:76:89:9d:02:
                    62:21:d4:f7:c9:8d:7d:d0:6d:e3:c8:d7:30:ca:98:
                    e7:88:4d:47:99:53:8a:b5:c8:e2:33:52:81:43:16:
                    02:01:57:6a:bd:f9:47:f3:b7:a8:ab:67:3c:ab:75:
                    f0:a3:9b:8a:84:03:eb:29:2f:66:d1:c7:be:c1:75:
                    e2:f1:de:c4:48:d5:4c:1f:dd:b2:91:6d:c9:f3:b6:
                    61:d0:74:73:05:81:8b:5c:4b:6d:15:59:ee:e7:ef:
                    53:0f:dc:72:5f:da:ee:e6:ff:14:69:73:aa:62:0b:
                    2b:1e:15:e7:a9:f2:ca:98:f3:5d:35:92:c4:b6:fe:
                    7a:69:ba:99:a6:67:1d:69:5a:8c:18:fb:92:57:f9:
                    c1:69:10:fc:cd:c1:3c:30:72:17:48:f9:fe:72:ad:
                    44:2b:e8:67:1e:36:ea:85:a4:63:3b:11:5b:f6:96:
                    25:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:65:05:CD:29:AE:89:8B:62:67:CF:37:DE:17:27:C9:6F:AA:88:A7
            X509v3 Authority Key Identifier:
                keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:75:f7:00:be:d7:e4:fb:db:4b:4e:e6:e3:2a:54:0b:a7:49:
         5f:a7:44:09:44:14:01:a7:88:c8:fe:47:c5:00:fb:a7:ce:71:
         cb:e3:90:94:7a:4b:08:05:a6:44:43:bb:95:aa:b6:65:95:d0:
         f9:bc:99:35:80:40:d5:82:cc:d5:28:52:70:6c:44:80:a4:5f:
         44:ad:8b:8e:11:db:1f:6b:a5:7e:5e:33:7e:30:34:01:41:57:
         bb:65:55:32:8a:15:94:c9:39:f4:67:62:70:a5:69:db:4d:5a:
         bf:c5:cc:4b:bd:79:5e:90:c1:33:e4:9c:1c:ca:2a:50:c6:a7:
         be:68:40:4e:6a:0b:f1:fa:31:a3:5b:b3:ea:2e:fe:1f:16:3b:
         b5:06:97:86:d8:ad:b9:8b:31:b4:f1:56:3f:e1:8e:ba:da:90:
         33:f0:d8:3e:f0:43:26:1f:6a:f4:6e:81:f9:f2:f7:c9:7f:15:
         ae:cd:ad:fd:e1:c1:17:68:6f:1a:fd:64:aa:1d:22:99:22:cf:
         1d:8d:99:f2:1d:11:c6:21:36:72:1e:3e:d3:9d:21:4f:59:5f:
         8e:2f:71:c6:1e:42:37:67:2c:46:65:6e:4d:b4:ac:3a:ea:ed:
         e8:7c:10:61:10:e2:1e:6c:fd:16:e2:4e:03:33:ef:62:3b:ef:
         f4:79:fe:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:00 2026 by rpki-client