Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
File:                     CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json)
Hash identifier:          z9yOTTgya4ExiZbZL8ZH2VxhkAyn27HtiVMkpj3Y0iU=
Subject key identifier:   06:00:B8:25:83:60:62:5A:3E:FB:D9:B9:62:CD:DE:9E:83:2F:CA:7B
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Certificate issuer:       /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial:       019F916C534616F048AC4438F1C832F1B067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
Manifest number:          143C
Signing time:             Fri 24 Jul 2026 00:00:23 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:23 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:23 +0000
Files and hashes:         1: 44Stl3msveF1YCvCfN2G3HepMdM.roa (hash: iIzD2FPw/U9HcxD97jOSbgMNqhLuJ3ohKRTz9ioUa1s=)
                          2: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: 3ZT+F88J6AzUFN6WlpZE5S3Pxbl506wQFhU7jUa2Y9Y=)
                          3: oOxUVzAK0hDvaSyyxd4ItdCNzlk.roa (hash: z2hGxtDc3xsCMxUAYZ0wzFuiPIpWeNKitXxT4Qhak2E=)
                          4: qWMcoazuJWd0mzovPbjclSWnCpk.roa (hash: nWdd8YlV26SHwkLvSuGYiscACa3svh/Yxd8Z+LoR89Q=)
                          5: r2dMo2_D-Dbh-yqi6VAZ1meJk-s.roa (hash: ICU0J+ujal+UqVKVSbOsudUv0G3UkLSD3WQWpN8VVhQ=)
                          6: tjYT-uHNpnFgFGTdE6itSftZVqY.roa (hash: KHqysYVsduT2z29K9pGLDzRY8wOYildZ8N84ngXiOeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:53:46:16:f0:48:ac:44:38:f1:c8:32:f1:b0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
        Validity
            Not Before: Jul 24 00:00:23 2026 GMT
            Not After : Jul 25 00:00:23 2026 GMT
        Subject: CN=0600b8258360625a3efbd9b962cdde9e832fca7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1f:a1:24:6c:f3:66:d4:a1:1d:8e:5d:59:a4:
                    93:27:59:2f:82:fb:02:ec:2c:4f:f3:2c:df:73:c8:
                    e8:e6:18:8d:be:64:0b:f5:fe:d1:87:a3:9e:ac:9b:
                    9f:f4:f4:af:16:06:3d:69:82:3b:42:1e:d4:8b:11:
                    cc:9a:34:b2:9a:b8:44:25:0e:51:21:f0:26:5a:1e:
                    66:15:ab:de:e9:82:e8:a4:af:de:64:31:03:cd:1e:
                    fd:ae:40:94:f2:9f:90:4e:14:a1:42:b5:4b:f1:ac:
                    1f:4a:8e:99:b3:3c:4f:5f:4c:3a:48:1f:0f:e9:f1:
                    11:7a:f8:f1:5b:77:2e:23:ad:8a:cc:df:9e:07:69:
                    8e:55:0d:21:51:60:06:11:50:08:c9:b9:a0:30:0b:
                    e5:d3:a7:67:19:76:b7:35:c2:1b:fe:c5:0e:eb:e6:
                    09:66:a1:50:66:ea:88:bd:b8:36:7c:32:88:90:3b:
                    29:6b:bf:4b:6e:6b:4e:a2:fd:5d:20:17:66:f8:de:
                    a6:ad:e1:89:56:ec:10:94:e9:56:50:28:44:21:33:
                    8e:e5:b6:39:45:71:59:54:7b:42:2c:d6:d6:75:0e:
                    b4:f0:ff:c3:d5:58:72:00:6d:0c:e0:20:a8:85:dd:
                    4f:95:fc:92:d3:92:44:1f:a0:93:d5:75:3a:1b:73:
                    35:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:00:B8:25:83:60:62:5A:3E:FB:D9:B9:62:CD:DE:9E:83:2F:CA:7B
            X509v3 Authority Key Identifier:
                keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d3:d1:6a:a4:65:c2:14:01:95:ab:80:6d:9f:11:ec:99:4f:
         9d:7f:ca:8e:6c:ab:7a:df:35:9e:c3:9c:44:30:9f:45:79:37:
         e1:7d:43:49:1c:de:b4:35:88:a4:46:9a:53:f1:d1:7d:74:36:
         df:74:c9:7a:bd:5b:0f:b5:8c:02:e6:53:64:87:4f:b4:05:4a:
         5e:b1:23:2a:5c:06:f8:7f:ba:6e:b9:0f:10:77:8b:00:68:e9:
         b3:20:64:eb:3b:09:e8:de:71:5f:1f:42:24:e9:57:37:c5:81:
         88:5f:f4:60:aa:88:70:b4:68:30:99:05:b4:48:89:4f:ef:33:
         d1:1b:04:5d:9f:90:70:92:c5:f5:61:9d:f5:b6:f7:cc:fc:e7:
         83:04:7d:e2:84:51:52:0e:c3:e3:99:2c:48:81:a2:51:ed:e2:
         74:ac:86:68:ed:57:33:f0:61:53:91:0c:f1:e1:b2:38:0e:79:
         98:b5:e8:37:28:3e:65:a1:20:5b:48:36:c6:30:dd:c1:cc:ca:
         2f:d1:a9:df:c4:51:a1:55:aa:6c:ea:40:11:60:53:8b:8a:40:
         54:ee:ed:a2:62:49:3b:64:93:e4:12:89:00:01:d6:5c:ae:8d:
         67:a6:81:16:21:03:c0:f9:6a:24:a3:70:11:a3:80:14:7d:b8:
         3a:10:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:27 2026 by rpki-client