Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.mft
File:                     CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.mft (raw, json)
Hash identifier:          N2+ats3T405AtGqfTtW/8vDYFbPlRjlJ82D0sTTF0Qg=
Subject key identifier:   01:22:C4:5A:EE:1D:F4:B2:DC:81:FD:10:16:47:41:62:21:33:56:99
Authority key identifier: 08:42:91:FB:02:92:A3:C8:EC:A7:FF:98:E7:39:6B:41:91:A6:7C:B4
Certificate issuer:       /CN=084291fb0292a3c8eca7ff98e7396b4191a67cb4
Certificate serial:       01A0CBFE59E4856DBB526E48C8512CBDEC3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.mft
Manifest number:          018D
Signing time:             Wed 23 Sep 2026 02:00:39 +0000
Manifest this update:     Wed 23 Sep 2026 02:00:39 +0000
Manifest next update:     Thu 24 Sep 2026 02:00:39 +0000
Files and hashes:         1: CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.crl (hash: rh5NV3rVbvQNk4qQCfgmkF15+g9pUPcZlLchqDrvv2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:fe:59:e4:85:6d:bb:52:6e:48:c8:51:2c:bd:ec:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084291fb0292a3c8eca7ff98e7396b4191a67cb4
        Validity
            Not Before: Sep 23 02:00:39 2026 GMT
            Not After : Sep 24 02:00:39 2026 GMT
        Subject: CN=0122c45aee1df4b2dc81fd101647416221335699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:1b:2f:17:b1:05:ca:62:a7:25:0b:ef:4c:
                    95:57:ef:8d:16:6a:ac:e2:d3:1c:e6:52:9e:87:ad:
                    cb:25:3f:24:56:ee:26:55:88:f9:56:23:5c:61:06:
                    94:f6:76:51:e4:2c:26:c0:42:c3:7c:cb:67:db:a1:
                    ad:55:b6:0f:f4:33:21:27:85:db:80:e0:b0:db:56:
                    25:9e:c7:89:3a:56:ef:91:ea:16:50:73:eb:17:e4:
                    c8:0e:58:19:31:76:c2:96:a6:c5:17:65:34:53:a2:
                    44:1a:08:89:4f:fc:81:73:c1:36:ff:2a:b4:e8:56:
                    7e:c8:7a:9c:fa:48:99:94:b1:36:6f:cd:a9:bb:74:
                    55:a1:7c:9a:83:cc:1c:77:58:fa:93:28:3d:4e:3a:
                    92:1a:3b:44:69:16:2e:62:46:53:22:37:7b:f8:53:
                    bb:b6:8f:5a:45:2c:1e:77:f1:45:9a:d8:e6:a2:6d:
                    8f:e7:3c:36:24:cd:01:bc:0c:3c:80:f2:d5:4f:cf:
                    d0:c9:8b:e6:79:f6:73:e8:3a:67:37:54:1a:30:07:
                    b8:b2:fd:29:e6:33:25:33:98:de:54:4e:f8:c7:1c:
                    c4:de:45:8b:76:a4:ea:1a:a3:5b:f3:c2:14:c3:55:
                    4a:79:2c:20:0d:bd:b8:b9:38:fb:2c:b6:e5:6e:0b:
                    f8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:22:C4:5A:EE:1D:F4:B2:DC:81:FD:10:16:47:41:62:21:33:56:99
            X509v3 Authority Key Identifier:
                keyid:08:42:91:FB:02:92:A3:C8:EC:A7:FF:98:E7:39:6B:41:91:A6:7C:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:5d:92:ea:fe:d4:92:5e:9d:a7:fa:10:8c:2c:c4:68:41:c3:
         a5:4d:22:7c:ce:d9:82:21:c1:aa:d4:ca:0d:67:92:26:da:e5:
         fd:9e:d9:62:cd:95:cb:31:66:5c:c3:7f:28:57:44:f2:07:bc:
         b7:0b:43:aa:b2:1f:83:f0:96:8d:fb:14:93:e8:1b:2f:8a:f1:
         98:c1:ef:ce:0d:2a:34:8b:cd:3b:aa:86:66:25:b1:aa:a8:e2:
         81:5f:f7:01:c0:96:e3:7d:bf:aa:4e:1c:08:ec:6f:34:1e:f7:
         05:8a:89:f4:ff:5f:c8:35:8a:e6:8a:f6:b9:6c:25:e3:fa:11:
         71:58:97:6f:0b:3a:0a:fb:49:d4:9a:cb:6c:90:6c:5b:93:51:
         9b:e0:a6:e6:be:e2:15:b6:0c:71:22:a9:11:57:95:bf:35:9f:
         bb:7a:98:ec:c7:67:75:34:00:8c:cc:af:e9:25:e2:2f:98:a1:
         bb:b9:82:7b:3c:6f:65:d4:84:00:f4:66:e4:96:cd:c4:fc:f8:
         e4:c7:c6:8e:30:89:16:e5:d3:45:18:b0:b8:3f:a8:de:88:f3:
         ad:62:fd:5c:08:bd:ac:2e:11:9f:0d:5b:d4:da:4e:b0:44:ad:
         c0:0e:23:cb:fd:18:7d:d3:c6:96:32:64:55:81:95:a1:55:6d:
         13:a1:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:19:56 2026 by rpki-client