Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
File:                     CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft (raw, json)
Hash identifier:          ujZm4ctprX2zZ36++XMLeouoKTnspgJT0uoDWAkM6Ig=
Subject key identifier:   C9:36:75:CA:84:29:15:44:DE:F5:F4:4A:AC:89:90:22:1F:1C:38:0E
Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
Certificate issuer:       /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Certificate serial:       01A08C0D555E6037C9DD4AB35765C7085861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
Manifest number:          16C0
Signing time:             Thu 10 Sep 2026 16:01:18 +0000
Manifest this update:     Thu 10 Sep 2026 16:01:18 +0000
Manifest next update:     Fri 11 Sep 2026 16:01:18 +0000
Files and hashes:         1: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl (hash: zuJAQFUsUFuCnWhG9fgZopsREklu1SklUXsqmE6dH54=)
                          2: G6T7iY18AmWrc0ZPUvjorjLJ-K4.roa (hash: oTA8FwhjnbIoX7c5WvPkKFNUfSdjruTbOwpXjsdRvKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0d:55:5e:60:37:c9:dd:4a:b3:57:65:c7:08:58:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
        Validity
            Not Before: Sep 10 16:01:18 2026 GMT
            Not After : Sep 11 16:01:18 2026 GMT
        Subject: CN=c93675ca84291544def5f44aac8990221f1c380e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:79:27:5e:ab:71:85:27:e9:10:0b:4c:8e:
                    f4:47:ea:23:00:73:9f:fa:4e:87:ba:9e:d0:09:26:
                    7d:d9:a1:fc:72:fa:13:39:20:a7:73:07:5b:f4:49:
                    27:94:96:4c:19:ad:4f:dc:9d:84:45:08:8a:e5:7e:
                    60:8e:f4:cf:bc:65:d5:d2:da:b2:04:8a:30:ea:9b:
                    e1:ac:32:6e:19:4b:11:a5:85:1e:89:35:39:d7:74:
                    c0:47:60:7b:33:bd:e2:32:1b:e8:90:cb:46:85:56:
                    62:9d:10:6a:b8:e1:09:2a:2e:1e:79:66:e5:26:30:
                    99:7d:51:f4:a0:c2:bf:91:98:3e:af:69:81:dd:6a:
                    ec:dc:2a:d7:ab:86:55:25:ad:44:4c:45:d1:58:34:
                    26:7b:1f:dc:7a:17:bf:eb:19:36:ec:4d:f0:a7:d9:
                    4f:c0:eb:b4:93:92:47:7f:21:16:3a:c1:b4:c9:1c:
                    a5:74:26:f6:6c:9a:0b:db:62:aa:b1:9f:8a:e1:d2:
                    53:6b:c0:fc:aa:60:ab:43:1c:87:ac:a3:67:e7:43:
                    22:44:e1:4b:c6:66:6d:14:05:7e:fc:55:31:70:fa:
                    e6:ed:87:7a:c4:24:5e:b3:57:37:d0:db:e7:e9:eb:
                    99:40:0a:5b:99:1a:0e:9a:43:27:11:50:82:88:f0:
                    71:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:36:75:CA:84:29:15:44:DE:F5:F4:4A:AC:89:90:22:1F:1C:38:0E
            X509v3 Authority Key Identifier:
                keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:05:6b:86:13:1d:d6:e2:cc:99:52:dd:ed:26:27:5e:c4:25:
         53:ce:eb:b5:d8:82:dc:71:21:69:0d:64:ab:dd:ac:79:f8:d7:
         58:b3:d3:20:9f:3a:dc:f9:8c:de:47:7b:17:0f:c8:be:87:62:
         22:62:cc:e9:3a:f9:2a:f8:f2:7e:09:0b:49:a1:b7:c3:5c:37:
         7b:4e:0d:19:6b:1e:da:89:6f:67:2f:59:60:43:31:33:df:e2:
         e5:a0:bf:a8:b7:18:ee:82:11:70:ad:8f:aa:0d:7e:bf:af:48:
         57:8f:41:03:71:50:e0:b2:2a:e9:7c:e8:3d:68:56:f3:ff:73:
         8d:9c:e8:80:4f:68:88:c4:ba:ea:3b:3c:bb:0c:0e:fe:cd:18:
         91:57:d7:00:55:60:93:4e:65:ed:f7:e7:da:75:5c:46:a8:9c:
         ea:0b:79:a7:0e:ba:72:de:4d:30:2c:a9:30:ed:57:10:a7:03:
         06:d9:1a:66:95:52:c3:00:58:75:54:23:6a:d9:32:4d:80:59:
         11:4a:61:ec:e6:d0:64:c2:9f:cb:d6:a1:9b:e1:cd:d0:fe:f0:
         5d:a2:79:4b:56:d7:71:6b:85:d0:4d:69:64:2c:43:05:51:ee:
         e2:67:a9:70:86:c1:e1:70:e9:67:52:f3:ca:92:92:fe:b7:b2:
         03:61:4f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:26:15 2026 by rpki-client