Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
File:                     C1XbSaXB_JAcoahcjSXxPxhuL_o.mft (raw, json)
Hash identifier:          aTb2QA9ceVUmmJA1gq/igTQh6g86gB6UG/j4nt3PY4Q=
Subject key identifier:   86:B4:E6:17:8C:01:7B:6A:CE:37:83:34:20:FE:2F:5F:D5:D2:FF:DA
Authority key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
Certificate issuer:       /CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Certificate serial:       01A0016F2786BF9886BAB01D311445C3173F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
Manifest number:          19FD
Signing time:             Fri 14 Aug 2026 18:00:56 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:56 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:56 +0000
Files and hashes:         1: C1XbSaXB_JAcoahcjSXxPxhuL_o.crl (hash: 27qEsrJajIlyDtr/gRD+r+wr1A/TcT6a9DdvzL6+Hv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:27:86:bf:98:86:ba:b0:1d:31:14:45:c3:17:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
        Validity
            Not Before: Aug 14 18:00:56 2026 GMT
            Not After : Aug 15 18:00:56 2026 GMT
        Subject: CN=86b4e6178c017b6ace37833420fe2f5fd5d2ffda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c0:81:18:f0:02:38:26:f0:ce:f0:c6:09:c0:
                    bb:33:2a:3a:e0:59:a7:cb:34:6b:e8:71:ac:7f:b5:
                    cd:27:d7:a4:cc:2a:9b:9e:01:be:e5:3b:9a:90:b8:
                    51:15:36:8c:28:87:14:17:20:dd:ce:0c:b4:69:77:
                    c2:29:a3:4c:d6:91:24:e5:de:70:cf:de:3e:26:3d:
                    3d:02:78:23:0a:1b:fc:0c:99:9e:07:cd:56:b1:dd:
                    98:f1:10:ed:33:33:a9:1d:38:42:46:71:d5:4f:e0:
                    8b:41:c8:99:14:bf:b0:2d:eb:be:bc:94:70:f9:de:
                    1e:1e:a3:6d:82:2a:70:56:f0:cb:e1:10:b5:f4:12:
                    b4:b3:52:cc:f8:50:3c:47:21:c4:ab:db:57:88:ab:
                    56:8d:12:3e:09:a6:97:7d:52:7b:5e:a9:74:f8:aa:
                    d7:7b:ee:66:87:f1:20:e2:9b:7e:43:06:72:0c:73:
                    46:af:07:54:ec:80:d5:e3:e7:fb:0c:1d:6e:e8:e8:
                    03:05:a9:02:09:bc:57:3d:0b:04:75:cd:59:70:b7:
                    f1:e2:36:a1:ab:bf:02:00:01:d5:99:5e:57:db:3f:
                    f1:62:26:6e:c3:27:6d:12:40:27:4f:04:8a:ea:0d:
                    5c:de:ea:47:11:02:7c:f7:0c:f0:ba:bf:9b:f2:06:
                    5a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B4:E6:17:8C:01:7B:6A:CE:37:83:34:20:FE:2F:5F:D5:D2:FF:DA
            X509v3 Authority Key Identifier:
                keyid:0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:18:73:c0:e1:77:a4:1c:d9:b7:eb:12:d9:b7:44:16:8f:22:
         7f:c6:89:c4:20:52:2c:f6:0a:94:bf:84:5e:bf:e4:35:82:4f:
         be:67:8d:c9:40:c7:7e:23:c0:d4:e8:3f:ec:57:df:78:93:88:
         7f:8a:f7:27:62:dd:d2:3d:4e:9e:24:55:25:d9:ed:30:81:29:
         28:02:8a:a3:fb:b5:3c:3c:64:4c:30:14:6c:30:08:fa:fd:24:
         a1:5b:ea:f9:4a:3a:6a:4c:ad:21:79:c5:7d:d6:43:e6:d8:3f:
         47:a8:3f:c2:a4:96:2a:6f:cf:6a:76:77:f6:e0:7e:1c:6d:79:
         56:94:bf:7f:47:aa:fc:89:2b:30:b1:15:2e:66:c1:86:4e:e8:
         41:bf:9d:09:e9:df:2e:16:3f:76:3a:49:3d:ec:73:5b:c6:37:
         17:bc:d8:86:e8:0f:0d:9a:2c:b1:77:c6:f8:2a:10:bb:98:2f:
         93:8b:0d:51:23:d1:de:87:44:87:c4:d3:e1:c0:ec:6a:20:6c:
         cb:45:0f:1b:b7:2b:d9:e2:c5:d1:4c:76:58:ed:4c:11:6a:ad:
         f5:d0:3b:d8:83:aa:2c:28:e9:17:d1:bf:4f:d5:37:f1:e2:7a:
         b9:db:1f:e6:b8:d4:ac:7c:00:26:06:18:14:94:c8:1e:42:0c:
         d0:25:0e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:00 2026 by rpki-client