Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
File:                     xc_pCq_i6Ahev28AU5YLlrd4BJE.mft (raw, json)
Hash identifier:          SMLw61nLX8aJBUSpHgddxTzbFjxN0F8q0/DHPqaKeZQ=
Subject key identifier:   E8:A2:8A:8E:21:F2:0F:B1:74:21:2E:F5:F2:27:F6:A2:56:2F:A3:2F
Authority key identifier: C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
Certificate issuer:       /CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Certificate serial:       019FA304F15870902014E44A3116906444F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
Manifest number:          0BDF
Signing time:             Mon 27 Jul 2026 10:00:37 +0000
Manifest this update:     Mon 27 Jul 2026 10:00:37 +0000
Manifest next update:     Tue 28 Jul 2026 10:00:37 +0000
Files and hashes:         1: xc_pCq_i6Ahev28AU5YLlrd4BJE.crl (hash: Q5vkMcV2QBT+6whXc0MtRjjBuzOFj9ISHMwXuwnjvB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:04:f1:58:70:90:20:14:e4:4a:31:16:90:64:44:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
        Validity
            Not Before: Jul 27 10:00:37 2026 GMT
            Not After : Jul 28 10:00:37 2026 GMT
        Subject: CN=e8a28a8e21f20fb174212ef5f227f6a2562fa32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c6:0e:bf:3c:f7:f8:58:8e:70:65:bc:67:7b:
                    b4:34:f7:ba:7d:1e:37:1e:58:29:0f:e8:17:1c:66:
                    8d:68:e4:41:b4:02:48:7e:bd:57:ab:56:a7:73:18:
                    ba:02:2d:88:41:d3:cf:8f:80:24:f6:f4:1a:8c:fa:
                    bb:76:ab:5f:55:cf:17:6b:5e:7b:32:f9:46:22:7f:
                    02:f6:c7:4d:d9:82:57:fe:b8:d1:7a:e6:05:d3:c6:
                    b7:d5:24:50:5d:c6:34:63:72:56:eb:53:a7:78:ce:
                    dc:43:15:7f:d0:a4:61:2f:b1:a8:4b:2d:e2:b5:5c:
                    80:b1:14:75:0b:e8:bd:24:f5:dd:7c:34:34:ad:91:
                    20:3f:b1:f0:d4:bb:ad:01:bc:85:7d:40:f6:7f:a3:
                    b7:c1:b9:98:24:a4:c5:22:20:f7:48:70:f5:d8:51:
                    d0:d7:39:3e:80:c7:0b:31:10:57:48:c4:c3:a8:61:
                    1d:11:1b:2c:b2:42:b2:5d:b7:5d:fe:28:45:e6:d9:
                    cb:0b:af:10:4c:9e:a9:33:ab:f1:46:44:83:1d:dc:
                    1d:63:31:62:66:ec:49:88:c4:c2:c2:8d:3b:fc:0a:
                    d5:eb:5c:37:aa:cf:f4:aa:1b:f2:ff:e8:ad:7c:3f:
                    aa:fd:c0:5f:26:8d:d2:97:ce:33:a8:bd:30:00:3d:
                    77:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A2:8A:8E:21:F2:0F:B1:74:21:2E:F5:F2:27:F6:A2:56:2F:A3:2F
            X509v3 Authority Key Identifier:
                keyid:C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:53:80:b9:42:a1:17:3e:ad:2c:29:9d:48:48:12:e9:e1:7b:
         bd:63:a8:15:92:59:43:fb:28:ff:bc:ed:08:4b:4b:d6:31:e6:
         47:c4:79:ac:45:34:7a:51:34:7a:42:93:26:bc:48:32:72:56:
         8e:4d:9f:39:a0:20:c6:0a:28:c3:54:f1:25:8c:bb:2d:be:3c:
         bf:76:44:14:b9:f3:46:41:e9:08:96:61:07:b1:98:15:32:51:
         53:41:9b:87:64:1f:85:8c:3c:60:94:6b:43:8a:c5:92:bb:49:
         c3:e8:81:a8:13:07:52:5a:a6:fe:ef:39:96:bb:f7:4f:82:c4:
         39:eb:e4:f9:45:b5:7a:df:19:0d:fc:07:b5:93:69:9e:d4:d0:
         69:de:07:7f:54:eb:bb:58:9a:b1:42:db:f7:96:19:20:f7:1c:
         10:bb:6c:7b:b2:5e:cb:82:de:85:75:66:79:44:e2:32:66:4d:
         fd:2e:6d:26:74:1d:e8:e6:7e:72:f5:1c:9f:a5:26:ba:7d:4f:
         e8:c7:f3:b4:16:83:3b:8b:3f:99:7c:89:aa:59:dd:87:32:a0:
         9b:0a:00:5c:26:06:b7:6e:6f:54:48:e2:3c:68:2f:88:9c:69:
         61:4f:14:06:b5:d7:1c:96:c7:7f:ad:05:ea:87:0c:3b:c2:a9:
         b8:02:93:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:16:47 2026 by rpki-client