Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
File:                     CPRr-iBG-8mOYn9ANIMnESO-ygo.mft (raw, json)
Hash identifier:          dPKK40n0xgxRI4DRAJ4+c1ydDR+lVPueQ+MebOKiU30=
Subject key identifier:   51:A6:66:76:C7:70:F8:73:68:12:85:F9:8A:D4:5A:4B:F7:CE:E6:50
Authority key identifier: 08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
Certificate issuer:       /CN=08f46bfa2046fbc98e627f403483271123beca0a
Certificate serial:       019DFC16EB5B114153D2A64EF2D71FFF033B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
Manifest number:          01C6
Signing time:             Wed 06 May 2026 07:00:53 +0000
Manifest this update:     Wed 06 May 2026 07:00:53 +0000
Manifest next update:     Thu 07 May 2026 07:00:53 +0000
Files and hashes:         1: CPRr-iBG-8mOYn9ANIMnESO-ygo.crl (hash: Q70ttBXjDgA/fuAWSjoI8RLjavV3DhOJecuA0n9dYfI=)
                          2: pfoAptjf90KHppVYfbniqr79bWQ.roa (hash: nzU7SasV7epGNnZEN6voJrWpKWaW62VKhMj/SG20B44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fc:16:eb:5b:11:41:53:d2:a6:4e:f2:d7:1f:ff:03:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08f46bfa2046fbc98e627f403483271123beca0a
        Validity
            Not Before: May  6 07:00:53 2026 GMT
            Not After : May  7 07:00:53 2026 GMT
        Subject: CN=51a66676c770f873681285f98ad45a4bf7cee650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:93:82:31:c0:9e:e4:3e:55:bd:02:23:67:
                    18:ea:9f:73:36:bf:e6:26:0a:24:a2:ac:9c:4e:77:
                    00:1f:be:ce:b9:6f:46:05:ab:0e:45:79:d2:c8:af:
                    af:d1:ae:8e:9b:64:33:05:f8:18:b5:a1:35:dc:5c:
                    4f:b3:7f:7a:f5:47:93:bd:fa:2d:b7:bf:dc:6a:2a:
                    57:93:74:63:61:0c:a8:6d:b7:78:27:51:5f:58:08:
                    74:ff:ba:73:3e:83:20:8b:cd:65:8b:fe:61:53:d6:
                    38:4c:9f:6b:bd:8d:cf:0f:d9:e9:9d:a4:eb:9d:92:
                    d4:eb:54:a8:0e:78:31:83:9b:d1:ca:b4:17:c7:24:
                    3d:c9:55:2c:67:b9:da:6c:0e:21:1e:e5:8a:e4:49:
                    d8:03:d4:c0:42:66:05:4a:0a:99:5f:d1:9d:88:1c:
                    b0:d2:c6:9b:70:9c:0d:e6:b4:09:67:d0:ab:bb:c6:
                    49:c3:69:36:99:c9:cf:07:e3:1f:ce:6c:35:b2:fe:
                    ce:b2:23:65:f7:10:77:43:ce:b9:fb:10:36:28:7b:
                    b5:5f:4f:bd:b4:84:f3:33:bf:c6:92:b4:29:e0:9c:
                    2a:84:0e:f9:83:24:73:67:a9:9b:57:e4:c5:48:b0:
                    63:2d:d6:4c:ef:f5:5b:48:37:b2:e4:02:35:e5:66:
                    9d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A6:66:76:C7:70:F8:73:68:12:85:F9:8A:D4:5A:4B:F7:CE:E6:50
            X509v3 Authority Key Identifier:
                keyid:08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:22:70:5d:bd:f4:55:7f:59:6d:84:e2:d7:7a:bd:d4:fa:71:
         46:8a:04:b8:84:76:7a:b8:85:fc:ee:7e:64:b6:b4:ee:aa:ef:
         f6:82:97:8a:6b:27:3c:77:ef:6d:f0:df:ef:22:94:34:79:39:
         14:63:20:22:45:a5:38:f6:c1:48:d7:cf:1b:53:c5:9b:52:4f:
         5e:6c:94:1c:b8:86:03:23:66:f1:bc:e4:f5:f6:b3:7b:8e:03:
         30:fd:14:36:99:05:c7:88:f6:35:2c:fe:67:a4:8f:8e:83:f4:
         b9:6f:9e:b7:b9:fc:87:f6:f4:44:71:65:ec:7a:04:cb:4f:5b:
         45:35:09:08:29:5e:5c:01:d3:fb:29:83:7d:22:81:65:90:ac:
         9a:56:c2:4e:77:2e:f0:d7:e8:76:83:e6:17:22:82:72:67:c1:
         d5:ca:25:f2:31:90:1a:33:53:3a:17:da:5e:3b:ac:31:2e:21:
         6c:d4:7c:3d:88:38:30:2d:12:0d:7f:80:70:ae:75:f6:88:fe:
         03:7d:f8:a6:26:2d:48:c0:c4:61:06:4d:65:53:46:ab:28:99:
         b4:c2:bc:37:17:6c:1f:fc:c4:cd:ac:71:1a:29:05:73:f6:81:
         1b:71:9a:09:e2:68:49:6e:d0:9e:58:4c:6b:8d:e8:00:65:28:
         3c:b7:c3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 13:23:54 2026 by rpki-client