Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
File:                     CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft (raw, json)
Hash identifier:          hg4QwWwid1Bn+UQL7u0xS0qBW0LRuzbmAxqTJd4yP9g=
Subject key identifier:   4E:A5:4F:B4:7D:B0:FD:DF:75:F4:A4:DC:EB:7C:6E:96:FC:1C:D3:29
Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
Certificate issuer:       /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Certificate serial:       01A0D57044982961EB9815C0546194D877E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
Manifest number:          16E6
Signing time:             Thu 24 Sep 2026 22:01:39 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:39 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:39 +0000
Files and hashes:         1: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl (hash: fyZM3sHTgzYqul28KYRFaNVgXEuAxXQ8lNjAJzsMw7w=)
                          2: G6T7iY18AmWrc0ZPUvjorjLJ-K4.roa (hash: oTA8FwhjnbIoX7c5WvPkKFNUfSdjruTbOwpXjsdRvKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:44:98:29:61:eb:98:15:c0:54:61:94:d8:77:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
        Validity
            Not Before: Sep 24 22:01:39 2026 GMT
            Not After : Sep 25 22:01:39 2026 GMT
        Subject: CN=4ea54fb47db0fddf75f4a4dceb7c6e96fc1cd329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:d0:1e:bd:6f:d4:c5:66:67:26:fe:58:3a:
                    06:54:ec:f7:c2:f6:22:98:4d:1a:7c:81:2b:c3:a0:
                    38:0a:ce:50:44:f6:40:75:80:53:19:2b:b6:0c:32:
                    e3:3f:54:49:34:0c:15:3a:b1:43:60:11:e5:62:83:
                    81:10:aa:d9:f1:da:86:f5:72:52:9e:b6:ea:d3:13:
                    c2:6b:dc:c5:c3:69:3e:fe:77:ca:76:07:7b:d9:43:
                    55:05:1c:ca:aa:a2:9c:94:b3:21:03:8b:df:94:05:
                    25:fa:74:f6:bc:bf:ce:35:d4:fc:e3:ae:7c:cf:5d:
                    4c:a0:0e:44:6a:db:5d:89:4f:b3:dd:3c:fa:c9:8c:
                    ed:ee:37:fd:ec:da:0c:aa:d2:df:f9:1c:0b:73:ba:
                    6b:9c:18:0d:64:a0:38:5f:a2:84:ae:3e:50:ff:1a:
                    e1:f9:a1:0f:e1:9b:91:28:43:a3:3a:f0:f8:b8:f2:
                    e9:d8:a7:f1:4f:5f:35:f6:5a:74:ce:d3:41:75:ec:
                    5a:5a:56:de:5f:70:f6:1d:90:43:c7:59:59:27:27:
                    b8:10:d1:84:b5:be:03:1a:cb:16:52:91:4e:a1:39:
                    a6:8a:85:2c:d2:b7:eb:c4:0f:39:c7:ce:b2:e3:28:
                    12:51:6d:a9:6b:ed:24:6a:9f:74:1f:49:c3:21:51:
                    2e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A5:4F:B4:7D:B0:FD:DF:75:F4:A4:DC:EB:7C:6E:96:FC:1C:D3:29
            X509v3 Authority Key Identifier:
                keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7e:d9:5c:fd:44:7e:e8:33:9d:4a:24:8c:46:41:04:12:c8:
         f8:ed:d2:61:6a:31:fc:43:42:0f:14:36:74:a6:f9:fa:d6:63:
         2b:64:91:1e:a8:2b:61:87:9e:b7:32:18:ac:49:75:bc:82:68:
         f5:d3:bc:52:bc:ad:82:ce:d7:ec:3a:48:36:08:30:aa:f4:54:
         c8:79:2c:b6:eb:a6:f1:97:01:6f:b3:ef:b6:c9:cb:20:57:bc:
         8a:75:d1:2b:7d:4d:22:05:ad:95:43:59:cb:26:b0:9f:59:ef:
         26:97:42:d6:49:e0:23:a0:03:4e:80:57:72:af:ab:f8:15:76:
         bf:a9:d1:45:9d:d3:f5:10:9a:8a:1f:c3:99:5c:09:cd:b3:e7:
         88:c5:d1:e0:c2:59:31:e5:95:ac:0d:bb:30:71:3f:57:8e:93:
         77:83:2d:07:01:af:47:67:ff:81:c0:b9:31:c3:2a:35:4a:eb:
         04:41:6d:60:de:aa:69:41:60:5d:f5:a4:1e:83:76:86:2a:64:
         a6:f6:c1:bb:25:7a:b6:12:aa:c1:56:59:db:cf:17:b4:cc:d5:
         af:c0:28:e5:7f:81:10:0e:a8:0c:af:8e:60:7d:90:10:01:fe:
         46:32:c8:ae:51:41:c6:b2:1e:8a:23:b3:6c:3e:ce:41:9f:3c:
         58:9f:ad:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:32:24 2026 by rpki-client