Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
File:                     CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft (raw, json)
Hash identifier:          6gOc1R6ADYosaoOFvvdaWsr0GVBtH5xoZ3CSLzkjZtY=
Subject key identifier:   09:8C:83:2A:13:68:F2:F1:F4:33:0D:87:4E:89:53:B9:9A:98:36:37
Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
Certificate issuer:       /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Certificate serial:       019F9135A3E65FDDE1F54626A59602EC6C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
Manifest number:          163E
Signing time:             Thu 23 Jul 2026 23:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:39 +0000
Files and hashes:         1: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl (hash: mvniRhiF9UMYTSKRCKWirX+Xp0K+5L9Y6tSv4FMu3sU=)
                          2: _LogJ5TTm-YKHsd3WnMm0NAuJ3w.roa (hash: O4S4fljr93AbzCU3et6i3bfKYTRHViAV0Kj/p7btiD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:a3:e6:5f:dd:e1:f5:46:26:a5:96:02:ec:6c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
        Validity
            Not Before: Jul 23 23:00:39 2026 GMT
            Not After : Jul 24 23:00:39 2026 GMT
        Subject: CN=098c832a1368f2f1f4330d874e8953b99a983637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:fb:e6:60:0a:1b:61:f0:2d:d0:46:cf:44:
                    3e:af:f8:a8:a8:53:5b:ae:8a:30:fb:70:ad:b9:55:
                    94:fc:8d:78:11:4e:0a:98:d7:d5:10:ea:fd:49:0a:
                    57:5c:c5:9c:f2:d3:8e:f0:63:8e:76:ad:b3:26:17:
                    86:08:4f:de:d4:83:0c:62:9b:55:fd:04:e6:74:ed:
                    c6:bf:b6:68:6e:05:51:c2:8f:9c:6d:fe:36:28:fa:
                    6c:8e:43:a2:9a:f1:78:00:91:15:09:ab:0d:20:1c:
                    fa:2f:66:b4:94:c0:24:15:13:8a:2f:2c:1c:74:b5:
                    1c:7b:ce:b1:56:f2:71:7f:79:e4:a4:4f:df:39:dd:
                    9b:79:3a:72:1e:3a:82:ec:b1:88:d0:da:7a:0f:cc:
                    c1:2d:88:e6:f4:8e:a3:e3:ad:9e:6b:c2:7b:ba:b2:
                    40:7c:07:22:b7:92:a3:43:fc:fa:82:55:91:2e:2b:
                    78:a2:46:ca:41:3c:f9:a3:24:06:0e:86:3d:54:49:
                    37:2d:66:61:76:24:c7:dd:32:35:b5:11:00:6b:f7:
                    35:3b:ec:20:a5:d1:ea:ac:17:6d:0b:06:67:0f:69:
                    b6:fa:14:16:d3:2b:5b:6a:90:14:17:f2:68:ac:39:
                    d9:cc:4c:d0:1b:3d:d4:cb:d8:74:e8:37:45:6d:10:
                    f6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8C:83:2A:13:68:F2:F1:F4:33:0D:87:4E:89:53:B9:9A:98:36:37
            X509v3 Authority Key Identifier:
                keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:48:2c:51:7f:30:5d:78:5c:68:17:60:15:ef:4b:07:c1:ea:
         bc:40:d5:4c:84:70:62:7e:91:d5:5d:c2:12:48:7e:5c:9c:0f:
         53:d1:80:96:b6:b8:f2:24:59:ba:07:1b:90:5f:39:f2:32:4e:
         37:36:b9:9e:9f:94:0e:cf:da:e0:6d:fe:5a:cc:89:7f:d7:1d:
         3e:ab:69:05:ba:e8:58:ab:62:af:13:a0:de:ce:c5:4e:e5:47:
         68:f0:cf:42:95:d5:24:a6:31:d2:71:36:18:75:28:2c:fa:ec:
         bb:88:80:66:a4:1b:b2:b3:d6:3a:f7:e7:b8:e2:e9:f7:0e:77:
         c8:38:d6:04:03:fb:d4:72:0a:8f:16:79:d4:2e:2f:d2:b3:fa:
         11:77:56:1c:e2:e8:22:10:5c:4b:eb:da:45:72:40:d5:ba:b5:
         61:b2:4f:42:3c:fb:9f:7c:52:70:46:0f:26:2c:67:ee:0c:6f:
         6f:c1:64:29:23:f6:c0:50:3d:de:9e:75:8a:68:d4:9a:78:a0:
         75:df:06:49:f1:97:a3:48:d4:8f:dc:ee:70:28:15:6d:3e:74:
         97:06:8c:4e:af:b1:93:96:b0:2f:27:a8:48:de:f8:f2:d6:64:
         b2:bc:66:79:bd:5b:fc:28:2f:39:bf:05:bd:73:b0:75:5a:53:
         7b:56:07:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:13:48 2026 by rpki-client