Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File:                     CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier:          vWaySIj/X2Qz+16mCKrfQVQD5nphpns3pC66tZDxliU=
Subject key identifier:   39:57:0B:0B:3A:D3:B6:45:62:80:B1:9C:0B:F3:30:5A:D1:2D:B6:30
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer:       /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial:       019EBD3575452576D9293598CE4A1C449AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number:          1353
Signing time:             Fri 12 Jun 2026 19:00:57 +0000
Manifest this update:     Fri 12 Jun 2026 19:00:57 +0000
Manifest next update:     Sat 13 Jun 2026 19:00:57 +0000
Files and hashes:         1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: 3593ky9Ob59lipqk5SLl+h6Y0qfgvPszZrCWXyRq3ZU=)
                          2: WHVnB7K1cz0iVc9Ds9i0qMLmFrc.roa (hash: QD8EoQ/Mss8g3Q2xXeraMyDtX/0gt24YRG6MYFXgiKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:35:75:45:25:76:d9:29:35:98:ce:4a:1c:44:9a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
        Validity
            Not Before: Jun 12 19:00:57 2026 GMT
            Not After : Jun 13 19:00:57 2026 GMT
        Subject: CN=39570b0b3ad3b6456280b19c0bf3305ad12db630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:ac:f2:10:d9:71:b7:0d:69:10:25:25:e0:
                    63:c3:54:19:9a:86:5d:bc:1a:c5:15:06:da:2d:f3:
                    fb:09:a8:1b:91:ed:15:f2:6f:8b:f7:01:a0:69:07:
                    40:18:79:e0:5f:4e:a8:dd:32:39:aa:7f:0e:85:64:
                    a3:16:39:57:f5:4d:5d:bd:e1:eb:dc:c6:ef:02:a4:
                    c4:11:98:e2:15:b0:ca:d0:be:da:82:63:90:b6:4e:
                    3b:bc:8e:32:cf:dd:69:11:a3:d9:77:c4:e9:50:56:
                    1e:c5:e8:31:7e:34:8a:b3:54:62:28:22:e4:62:61:
                    5c:fa:e1:f1:68:be:5d:a0:ff:8c:79:63:9f:28:56:
                    b9:9d:18:e5:12:b7:66:5f:7b:f8:f9:12:6c:70:c0:
                    a8:aa:18:c9:ce:5f:a9:3f:29:77:64:d1:ad:db:a9:
                    77:85:1f:ed:69:ed:9d:a4:ab:4b:3d:4b:ff:71:75:
                    a5:3a:01:40:97:e7:f6:fb:99:b5:b1:f0:2e:15:ef:
                    5d:03:ff:ab:49:ca:ca:c8:d9:a0:86:f9:7f:6f:85:
                    e9:9a:9b:8e:24:71:09:8d:25:77:1c:2a:f7:6a:f1:
                    e1:ab:84:3e:4c:67:cf:bd:ab:ef:a3:6c:50:83:04:
                    fc:9d:ff:e0:e5:35:6a:b5:2c:97:e1:60:cd:f7:87:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:57:0B:0B:3A:D3:B6:45:62:80:B1:9C:0B:F3:30:5A:D1:2D:B6:30
            X509v3 Authority Key Identifier:
                keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:2b:f2:7c:e0:84:18:63:2b:51:fa:69:3c:d6:86:c7:de:4e:
         7e:23:b4:06:b3:7e:01:17:74:9b:46:f2:85:f1:f4:6f:48:7d:
         95:23:42:8e:29:74:f7:b1:fe:43:a1:91:80:1a:2e:d6:5a:a4:
         14:9c:6d:3b:53:04:f4:61:be:33:fe:c5:80:b2:ac:38:58:fb:
         8e:8b:9a:50:6e:98:2a:70:a0:de:d1:25:41:71:8d:40:85:de:
         ff:fb:68:72:bd:2c:da:c8:6a:2e:1a:81:0f:30:f4:dc:73:bd:
         91:17:28:d0:5c:e9:fb:fa:8e:36:a4:8b:56:de:8f:f7:a5:4c:
         5a:3c:1c:ea:9b:ad:86:64:22:15:5c:25:95:f2:50:7e:42:88:
         c0:b1:03:67:42:8d:c3:e8:34:05:32:57:b4:16:63:85:95:e9:
         78:74:6c:32:46:db:34:d9:b3:f0:d2:7f:21:43:e6:f2:e7:b5:
         e5:21:7b:77:10:1d:51:e0:a9:21:55:bb:a1:30:82:72:07:70:
         39:fe:61:c5:32:ed:cb:aa:0e:e1:b7:26:e0:4f:b4:f3:8e:31:
         bf:6a:0d:19:dd:ac:e9:ec:e2:36:69:d4:c5:2c:ad:fc:a6:ec:
         6c:66:a2:78:b6:ec:9e:d4:23:d5:33:a5:e4:3f:42:1f:65:38:
         1a:da:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:58:40 2026 by rpki-client