Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.mft
File:                     Ce9ptw76WDK2FamN-djuSvWg_rY.mft (raw, json)
Hash identifier:          Lkvj7tKMdRBNS6PR/orgkKjhufCIaeYqR7UF+F6T2+E=
Subject key identifier:   C0:CB:4F:E8:2D:BB:97:33:32:EE:62:46:D9:11:7B:FA:3B:82:97:E6
Authority key identifier: 09:EF:69:B7:0E:FA:58:32:B6:15:A9:8D:F9:D8:EE:4A:F5:A0:FE:B6
Certificate issuer:       /CN=09ef69b70efa5832b615a98df9d8ee4af5a0feb6
Certificate serial:       01A1DFF1847FBED54FB79AFD66250130BE84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce9ptw76WDK2FamN-djuSvWg_rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.mft
Manifest number:          02C5
Signing time:             Sun 15 Nov 2026 16:01:49 +0000
Manifest this update:     Sun 15 Nov 2026 16:01:49 +0000
Manifest next update:     Mon 16 Nov 2026 16:01:49 +0000
Files and hashes:         1: 6FnXpjQ59g5sXxs58-cmakXFI6c.roa (hash: 7jdSARNoDZ421UFIkyjxe0IGl8Z6A3h2G9Qzi9YoQnU=)
                          2: Ce9ptw76WDK2FamN-djuSvWg_rY.crl (hash: mfXSK4LYLb9YZCcuyemThACKhmWxNZ5WguMWa/FZkKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ce9ptw76WDK2FamN-djuSvWg_rY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:f1:84:7f:be:d5:4f:b7:9a:fd:66:25:01:30:be:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ef69b70efa5832b615a98df9d8ee4af5a0feb6
        Validity
            Not Before: Nov 15 16:01:49 2026 GMT
            Not After : Nov 16 16:01:49 2026 GMT
        Subject: CN=c0cb4fe82dbb973332ee6246d9117bfa3b8297e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b4:54:96:22:91:ab:b3:ee:c4:d2:96:56:f1:
                    15:38:6b:91:24:36:b7:b6:36:06:0f:3b:34:b6:cb:
                    74:61:3d:e5:7c:3a:b0:39:67:91:06:ed:1e:8d:27:
                    ae:c9:29:86:2d:b3:d6:2a:b8:e9:19:fc:8b:9f:cd:
                    cb:20:41:6b:b8:22:6d:28:3c:16:e2:38:d3:33:84:
                    0d:f4:f4:6e:df:21:82:54:3f:90:5c:e2:67:cf:77:
                    a8:3e:31:a0:f1:cb:ad:45:6d:a2:c6:76:69:f0:20:
                    40:8e:75:3a:65:52:05:c7:33:74:66:3c:7d:f2:89:
                    c5:28:45:bb:3f:89:ca:fd:4c:8e:af:20:b2:d4:42:
                    04:0d:88:55:f7:a1:2f:0e:75:52:20:b3:16:23:6d:
                    9f:3d:d2:88:f1:80:80:27:d1:4b:bd:f0:22:5a:17:
                    81:bf:00:a3:fd:24:5d:fe:a3:1c:c4:01:04:8d:b3:
                    82:e4:43:6d:9d:00:21:5a:9d:bc:f5:96:f4:fc:96:
                    74:68:b8:8b:cd:9f:00:57:42:6a:93:7e:2c:f9:09:
                    51:44:fe:76:b0:61:e5:9e:f0:cb:98:a4:20:86:bb:
                    25:d4:61:ae:c9:4d:23:94:62:79:19:df:ea:71:71:
                    43:a2:7e:0e:ee:04:68:51:88:2b:3a:a7:7f:0e:44:
                    d1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CB:4F:E8:2D:BB:97:33:32:EE:62:46:D9:11:7B:FA:3B:82:97:E6
            X509v3 Authority Key Identifier:
                keyid:09:EF:69:B7:0E:FA:58:32:B6:15:A9:8D:F9:D8:EE:4A:F5:A0:FE:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce9ptw76WDK2FamN-djuSvWg_rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:09:27:9d:6a:49:10:7e:d9:e8:bf:6a:f1:f4:e0:a7:b8:05:
         e9:aa:af:9f:32:0d:82:a8:3e:05:42:ce:17:2e:b0:c2:55:5a:
         e0:bf:10:5c:3b:3e:72:24:4e:80:48:54:72:3b:68:a0:ec:ea:
         7f:df:73:8b:90:c5:6a:67:80:12:10:62:14:a1:dd:12:32:4c:
         24:7f:17:e2:a8:78:48:95:02:0c:7b:1b:8d:39:36:26:ec:92:
         f2:bb:67:35:7e:7b:22:6e:5f:4e:a1:1b:b3:dc:07:53:fd:b6:
         41:59:00:de:93:a0:16:77:9a:57:03:4c:6d:48:d9:0f:1b:92:
         3e:16:fb:9f:c1:41:d2:20:6d:ff:24:68:dc:fa:d3:11:8b:b9:
         2f:b3:99:4c:12:da:af:fb:f8:19:08:ee:ee:f2:42:d2:d2:64:
         9c:07:35:79:ea:da:97:89:15:c6:65:17:ff:20:42:d2:1c:b4:
         59:14:a7:f9:45:41:9a:cc:22:cd:21:b7:45:fb:9e:50:bd:80:
         3e:03:95:31:b8:37:b8:2d:e9:d8:bc:1e:cb:bf:10:f4:49:0f:
         de:2b:16:ea:97:19:7f:71:ab:a7:26:5e:ab:ee:68:7a:30:4a:
         fa:05:58:0f:77:e4:1d:4b:6b:ec:c5:3e:f5:83:f4:21:4e:83:
         18:13:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:20:05 2026 by rpki-client