Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File:                     CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier:          9oaUD0YfwpDp5QEvHahoYMg7hXLm6wHnDr/RIL8YmQk=
Subject key identifier:   18:7D:76:FF:F2:93:F3:22:7D:A3:D6:BF:8D:31:E7:E1:43:C1:2B:22
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer:       /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial:       019E1EDA0239F4CF317F5267686B40747EA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number:          1301
Signing time:             Wed 13 May 2026 01:01:04 +0000
Manifest this update:     Wed 13 May 2026 01:01:04 +0000
Manifest next update:     Thu 14 May 2026 01:01:04 +0000
Files and hashes:         1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: tS9xD3P+2oa2LNICi8FMSWFzhv7J2GRJMDuWnZB4cRI=)
                          2: WHVnB7K1cz0iVc9Ds9i0qMLmFrc.roa (hash: QD8EoQ/Mss8g3Q2xXeraMyDtX/0gt24YRG6MYFXgiKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:02:39:f4:cf:31:7f:52:67:68:6b:40:74:7e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
        Validity
            Not Before: May 13 01:01:04 2026 GMT
            Not After : May 14 01:01:04 2026 GMT
        Subject: CN=187d76fff293f3227da3d6bf8d31e7e143c12b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:25:73:db:e3:5b:24:10:82:1d:25:74:74:75:
                    9a:45:18:c0:56:5f:0e:b2:d5:cc:07:e9:58:bb:db:
                    6e:ce:b4:90:41:23:6b:a7:92:59:dd:01:0e:07:c8:
                    76:c1:2d:ea:7a:fe:b4:2a:f9:d2:f3:fa:04:f0:0f:
                    9c:62:d5:a8:84:ee:3d:2a:bf:3f:f1:f1:f5:38:6c:
                    f0:a0:a8:c1:e9:ea:54:56:9a:70:2e:1d:bd:1e:b3:
                    d5:e1:bb:0f:b9:27:0c:b6:ba:c8:6c:f4:fb:b0:66:
                    90:bf:01:fc:a8:da:dd:1f:94:03:9d:11:7c:ff:70:
                    1e:87:3b:0f:3a:e1:38:08:fa:cf:4a:af:15:47:ff:
                    7a:78:9f:eb:fe:30:00:64:12:94:7a:b4:8b:ac:fa:
                    6d:45:55:86:ec:39:9d:9d:1e:d5:b6:af:d8:d1:67:
                    4e:12:9b:8a:3d:f1:d0:75:15:06:24:7e:18:7f:ff:
                    6d:8f:4d:6b:f7:e4:bf:ea:7d:95:03:14:55:84:bd:
                    97:cb:71:b7:14:a2:27:b3:50:47:f6:95:7b:27:a7:
                    9e:e3:1c:c9:30:67:14:1c:7b:f8:d9:d5:d7:c4:89:
                    4e:61:b5:3e:89:bf:0a:8a:3c:cc:d9:9d:64:86:9f:
                    d0:dd:cf:af:05:12:15:7b:c0:c8:03:4c:11:e3:f3:
                    84:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7D:76:FF:F2:93:F3:22:7D:A3:D6:BF:8D:31:E7:E1:43:C1:2B:22
            X509v3 Authority Key Identifier:
                keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9a:70:d7:93:bd:eb:63:be:8d:d7:2e:e6:a0:1c:d7:75:cc:
         72:1f:d8:2b:26:3b:42:02:5c:7b:d1:65:de:0b:be:05:dc:06:
         dc:c9:a9:45:c9:86:36:f2:67:fc:03:12:b3:8b:18:e9:6b:a3:
         94:54:ee:9f:de:84:81:8e:80:7e:1f:20:3b:e7:8d:1a:d8:6e:
         b2:48:2c:5a:d1:91:cd:32:fb:0e:5a:c0:93:bd:91:b0:78:09:
         88:92:af:fb:57:46:69:18:1c:43:b0:9e:dd:eb:b1:81:e2:d2:
         b5:c7:5f:9e:6e:52:18:17:d5:0e:17:19:07:3d:3d:9f:09:c8:
         26:7d:b1:1c:8c:7e:c3:7a:71:92:28:f8:b3:05:df:1d:7a:d8:
         5c:f4:7b:3d:0a:73:a0:26:a6:30:2e:75:79:bc:34:61:21:d4:
         be:25:d7:1d:7c:f7:2b:64:04:25:fa:e6:08:01:86:6a:ed:1a:
         45:d0:6f:8e:71:d4:40:ab:df:ee:bd:3d:be:58:77:ee:0b:f5:
         db:21:f1:93:4f:14:62:65:bc:83:a3:1c:f4:da:72:d9:3c:7c:
         f4:36:64:11:d9:fb:b8:08:d0:c7:15:e5:d9:f3:38:1f:ae:ad:
         b1:3b:92:16:e4:29:41:d8:66:fa:49:1e:0e:87:e6:9c:45:47:
         67:69:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:15:29 2026 by rpki-client