Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
File:                     CPRr-iBG-8mOYn9ANIMnESO-ygo.mft (raw, json)
Hash identifier:          UOlla/uwId0g9FWwIw4l5JXq+CJGyf2PcGVzrC6NwgE=
Subject key identifier:   90:B3:27:11:D5:66:9C:4D:6E:C4:99:8A:5D:52:C7:E6:E5:71:1E:C1
Authority key identifier: 08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A
Certificate issuer:       /CN=08f46bfa2046fbc98e627f403483271123beca0a
Certificate serial:       019FD15EA7BD30D95886FA8244E23B59EF38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
Manifest number:          02B9
Signing time:             Wed 05 Aug 2026 10:01:09 +0000
Manifest this update:     Wed 05 Aug 2026 10:01:09 +0000
Manifest next update:     Thu 06 Aug 2026 10:01:09 +0000
Files and hashes:         1: CPRr-iBG-8mOYn9ANIMnESO-ygo.crl (hash: VKAeVSG79pHCQYQJzkO3Jw8FiP1pFCPZ5M5+OkGa9CU=)
                          2: pfoAptjf90KHppVYfbniqr79bWQ.roa (hash: nzU7SasV7epGNnZEN6voJrWpKWaW62VKhMj/SG20B44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 10:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d1:5e:a7:bd:30:d9:58:86:fa:82:44:e2:3b:59:ef:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08f46bfa2046fbc98e627f403483271123beca0a
        Validity
            Not Before: Aug  5 10:01:09 2026 GMT
            Not After : Aug  6 10:01:09 2026 GMT
        Subject: CN=90b32711d5669c4d6ec4998a5d52c7e6e5711ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:1d:a1:82:b6:2e:aa:b8:2a:15:5a:ce:bb:
                    2d:34:e8:f3:67:8a:47:5c:90:d7:b9:d1:56:00:cf:
                    b9:bd:bd:34:cd:ab:1b:36:0f:58:6f:3a:7b:f8:f7:
                    51:3b:70:bb:33:56:9f:b2:ac:b0:26:78:98:60:16:
                    2c:50:91:a4:90:1c:f2:fc:cd:fa:a4:03:b3:ca:b4:
                    5e:61:63:7a:22:5e:70:8f:3a:2a:68:bc:cb:0a:f8:
                    e0:24:47:c0:72:37:0e:6e:aa:89:f8:ca:7a:31:02:
                    ba:97:3b:bf:c8:5b:ad:59:2c:e6:19:ff:e1:7a:ae:
                    36:69:d8:24:93:aa:f7:37:89:54:a2:7d:09:ae:a5:
                    fa:b9:55:e9:ca:3f:40:b2:58:79:d1:36:0e:c8:5d:
                    2b:a9:df:38:f2:43:66:1a:70:27:9d:dc:60:66:87:
                    85:d7:9c:d8:75:49:9d:f0:48:88:8c:62:c9:34:77:
                    4e:05:88:34:eb:85:ef:6c:fd:5f:a4:7f:84:92:3e:
                    85:9a:ec:27:49:3a:75:9e:2a:7c:9a:b9:a2:21:9b:
                    ca:20:c3:6f:45:81:f2:69:48:5b:9c:3f:fc:3e:1e:
                    ec:af:a9:68:aa:a8:63:72:5b:8b:d8:49:01:52:52:
                    90:22:6e:e9:37:35:12:a6:42:5c:f6:72:02:0a:06:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B3:27:11:D5:66:9C:4D:6E:C4:99:8A:5D:52:C7:E6:E5:71:1E:C1
            X509v3 Authority Key Identifier:
                keyid:08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:96:64:e7:1e:48:84:99:b6:f6:aa:1d:44:ae:41:fd:63:0c:
         2a:78:77:47:cd:9c:2e:93:0b:e2:d1:3f:ce:b3:d0:02:22:cc:
         39:6f:e1:b0:45:46:b8:cf:c8:c2:cc:e3:6d:c2:38:ef:74:29:
         6b:5a:81:ea:e0:92:c9:f8:41:4d:de:19:aa:b2:dd:7b:9f:d2:
         3e:52:8d:53:8a:f6:b6:3b:12:c4:c7:50:07:5d:f5:52:15:6f:
         75:37:60:d5:23:6b:a2:27:8e:db:9d:48:78:83:b2:8e:e5:f4:
         14:13:39:9e:9e:8c:ea:6b:af:b8:17:ae:4f:e8:a4:6c:e0:10:
         8f:a6:fb:91:b6:95:70:29:6f:2f:41:4e:33:66:9a:7a:94:5f:
         74:a1:7a:6e:66:73:24:84:ca:61:7f:f8:c8:0a:c6:ff:1a:02:
         fa:3f:c4:8d:06:00:e0:44:ec:18:a4:d3:b2:9b:fb:cc:11:96:
         74:b3:e9:b9:8e:1c:60:d2:bc:f2:fa:4d:e4:20:c4:31:87:fa:
         18:07:3c:48:89:07:01:9d:e4:ae:b8:17:89:07:ab:0c:eb:d0:
         1f:b5:d7:06:2d:8a:90:3b:8e:6e:70:c7:9c:2b:84:cd:47:fd:
         ab:d6:d8:c7:52:25:29:df:13:9d:a8:fa:59:1a:24:37:38:fb:
         ed:20:bf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 18:58:39 2026 by rpki-client