Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.mft
File:                     CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.mft (raw, json)
Hash identifier:          Cx6ycUNCa9RKXbJlUEU9x7/OmPev2df/QeiS/RdbvAg=
Subject key identifier:   F6:BF:99:89:5D:45:D4:1F:8A:AA:E0:E6:D7:53:82:05:24:C3:CC:26
Authority key identifier: 08:42:91:FB:02:92:A3:C8:EC:A7:FF:98:E7:39:6B:41:91:A6:7C:B4
Certificate issuer:       /CN=084291fb0292a3c8eca7ff98e7396b4191a67cb4
Certificate serial:       019F913547FA539247F658D4C152C6E603E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.mft
Manifest number:          EA
Signing time:             Thu 23 Jul 2026 23:00:15 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:15 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:15 +0000
Files and hashes:         1: CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.crl (hash: 89C2UtFb6aINBSmXXDzhA07yTbh08FRJVje9imOUyFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:47:fa:53:92:47:f6:58:d4:c1:52:c6:e6:03:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084291fb0292a3c8eca7ff98e7396b4191a67cb4
        Validity
            Not Before: Jul 23 23:00:15 2026 GMT
            Not After : Jul 24 23:00:15 2026 GMT
        Subject: CN=f6bf99895d45d41f8aaae0e6d753820524c3cc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:22:b6:9e:d6:d9:32:e0:74:82:59:b6:85:
                    1e:17:67:d9:9d:94:8e:38:93:d1:f5:97:01:8e:ea:
                    5c:e2:8b:04:19:dc:42:a4:fb:0e:97:6d:dd:0f:89:
                    41:ef:c9:39:24:6b:0e:b7:04:89:c9:ec:72:4c:7f:
                    08:f9:2c:a6:0d:3f:80:4e:cb:6a:8b:5f:1b:cf:1a:
                    55:35:fc:aa:7a:ab:14:dc:f8:ab:41:87:f2:26:56:
                    68:a0:31:45:57:75:1b:f5:26:37:fc:26:ab:f3:13:
                    75:95:20:e8:f8:50:5c:5d:cd:87:d5:0c:59:24:ce:
                    72:2f:53:65:56:57:86:c1:c7:66:35:08:21:40:59:
                    50:1d:ca:78:8f:68:56:dc:e0:2d:ef:78:9a:98:55:
                    c4:fd:26:66:99:83:4d:35:38:9f:8f:4c:9f:cc:77:
                    80:9d:05:c9:1d:53:5a:ca:de:4a:09:91:b4:bf:12:
                    57:27:55:83:a8:e2:ff:e9:bf:bb:50:2e:92:06:f4:
                    66:71:c0:e7:f6:1c:5b:15:f4:9c:c6:72:76:6d:f0:
                    b3:ca:e2:e1:c3:e8:39:bc:b4:e0:9f:02:10:54:bb:
                    20:ef:a6:83:a7:46:db:81:5c:cf:32:6d:e0:5e:03:
                    7c:d8:91:15:b0:88:02:ec:6a:59:2f:7d:56:98:fa:
                    c6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BF:99:89:5D:45:D4:1F:8A:AA:E0:E6:D7:53:82:05:24:C3:CC:26
            X509v3 Authority Key Identifier:
                keyid:08:42:91:FB:02:92:A3:C8:EC:A7:FF:98:E7:39:6B:41:91:A6:7C:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:30:3c:14:9f:66:f0:0d:6c:92:b4:1a:75:8a:d3:44:14:79:
         48:81:85:50:35:6f:27:8e:94:ad:ff:5c:22:bd:2a:2f:e7:ff:
         bd:64:ef:e2:7e:2c:b9:ef:ba:c6:8d:52:2e:ac:72:f9:97:78:
         3d:6b:42:45:2f:ee:98:30:53:16:54:58:a5:94:11:40:4a:b3:
         1c:94:c0:b5:2e:18:a2:94:f3:d2:73:56:05:a6:af:a7:5b:34:
         0a:ae:1e:97:b3:cd:bd:33:26:95:49:8f:7e:e7:bb:6c:5c:03:
         58:3b:e4:41:38:dc:c8:4e:23:2f:46:dc:dc:6f:7c:db:85:6a:
         9b:58:b8:54:c6:44:8a:0c:61:6e:43:9c:be:67:23:3e:b4:20:
         b2:0b:1e:ad:05:9b:9a:17:18:4f:6a:a4:00:d7:4d:d2:90:46:
         f1:0c:8a:de:09:50:a8:90:1f:a9:19:4e:0d:c1:62:16:bb:04:
         04:41:77:f0:25:14:5c:2e:da:7a:5b:35:4e:77:cd:ca:9a:e3:
         f4:6d:1c:51:36:5e:77:74:66:78:08:ca:37:fb:b1:ab:a4:5f:
         8b:ed:63:40:4d:3f:6a:ff:33:8f:a7:c3:d3:98:a8:8b:08:7e:
         16:01:b8:25:fc:d0:6d:2b:2d:9c:32:7f:60:64:e2:98:44:ce:
         3a:2c:97:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:46 2026 by rpki-client