Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File:                     CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier:          i+IVbbGK+1/1VETPZQ5NWmmzmJuGlsbPG5VxPLNdUD0=
Subject key identifier:   62:25:35:D0:2E:F6:F5:86:23:75:BA:DE:D6:FA:56:17:01:33:2B:C9
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer:       /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial:       019FA8D08C3144D2233973D76278901A86B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number:          13CD
Signing time:             Tue 28 Jul 2026 13:01:07 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:07 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:07 +0000
Files and hashes:         1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: vx5BQSDWfzKTuKd/jwJXdVz/RVJZEo0G9LD1hO1yACw=)
                          2: WHVnB7K1cz0iVc9Ds9i0qMLmFrc.roa (hash: QD8EoQ/Mss8g3Q2xXeraMyDtX/0gt24YRG6MYFXgiKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:8c:31:44:d2:23:39:73:d7:62:78:90:1a:86:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
        Validity
            Not Before: Jul 28 13:01:07 2026 GMT
            Not After : Jul 29 13:01:07 2026 GMT
        Subject: CN=622535d02ef6f5862375baded6fa561701332bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:e2:be:d8:79:f2:33:e0:66:33:f1:6c:24:
                    63:3c:25:66:83:b4:1b:d0:0e:55:57:59:dd:dd:b8:
                    15:01:f4:a0:52:e8:57:1b:c5:30:0e:e1:95:6e:81:
                    3e:41:e8:b0:59:a2:ea:f8:4d:a6:36:bc:e8:d1:f7:
                    34:33:6b:dd:f4:2b:67:36:7e:21:a8:11:fa:41:1b:
                    73:52:1d:bc:f2:83:29:ec:7b:55:53:12:72:19:8d:
                    76:03:2d:6d:83:0c:d9:c8:c5:82:b0:3d:e8:e1:4e:
                    35:3a:d4:ab:06:ae:51:4d:4c:6e:3d:47:f3:f6:c9:
                    9e:6a:82:70:c0:da:bb:ca:d0:a7:2f:a7:b5:a9:60:
                    b3:84:41:28:6b:66:a1:48:f3:e7:16:d2:4b:cd:05:
                    4a:98:82:5a:9e:3a:fa:d7:b2:e2:a2:8c:25:fe:2f:
                    22:12:07:02:39:d5:0b:37:60:d5:b7:cc:40:43:1c:
                    ea:3a:b1:ad:4e:7f:b9:80:1a:7b:c2:8e:1b:58:22:
                    b9:6c:0e:7e:5e:75:b6:f6:40:23:65:bb:15:ab:ac:
                    0a:cc:6d:f4:5a:9f:40:82:b9:ae:ef:76:bd:0a:02:
                    3c:18:b7:ad:30:26:11:4b:41:4b:3c:92:0a:30:f2:
                    74:a0:29:b9:af:ae:80:ec:a8:b7:48:25:4d:ad:93:
                    1d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:25:35:D0:2E:F6:F5:86:23:75:BA:DE:D6:FA:56:17:01:33:2B:C9
            X509v3 Authority Key Identifier:
                keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:14:5c:bd:4c:19:94:3b:aa:db:38:eb:8a:0d:08:0a:99:8a:
         ae:66:9a:11:98:1d:ca:84:29:36:6b:a4:8a:5b:2e:15:d7:5c:
         40:7e:1e:b2:1c:3a:35:2b:80:e0:54:19:ee:d6:e0:54:27:3f:
         2b:53:2b:8a:50:5f:20:b2:69:43:d9:5d:b7:c5:ad:34:3b:d5:
         45:df:89:70:2d:90:10:cf:b8:98:ab:f2:5b:74:b2:bd:68:8a:
         22:f5:10:65:03:e5:02:5f:bb:af:67:a4:f2:51:ec:27:88:97:
         18:33:2f:b5:bc:b6:97:08:06:2e:dd:ae:f4:1e:cf:36:af:d9:
         b4:f5:ad:0f:31:7a:7d:7c:2b:de:62:9e:0c:68:34:78:91:66:
         45:ce:26:2f:7d:17:f3:15:f7:bb:1d:14:d6:d4:24:fc:a1:6f:
         20:68:1f:b9:ff:10:f8:10:1d:87:19:ab:05:24:24:7d:ad:68:
         eb:ae:34:bb:9f:89:5c:26:8c:14:f5:23:36:28:6e:40:c4:12:
         58:4e:e0:b2:06:dd:e0:30:1b:24:a9:9f:3b:50:09:78:ea:47:
         56:c3:4e:28:71:f7:a8:1a:ad:8c:fa:a3:9b:48:bd:83:aa:4b:
         c6:2e:2e:31:87:b9:90:b3:b6:ab:70:a7:2b:db:f5:b7:1a:48:
         ef:9e:01:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0IwxRNIjOXPXYniQGoayMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzI4MmZlM2YzZDdkNDZiZDFiMWNiNzdiMmZlYzM3ZGVl
MDA2NjMwHhcNMjYwNzI4MTMwMTA3WhcNMjYwNzI5MTMwMTA3WjAzMTEwLwYDVQQD
Eyg2MjI1MzVkMDJlZjZmNTg2MjM3NWJhZGVkNmZhNTYxNzAxMzMyYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0bivth58jPgZjPxbCRjPCVmg7Qb
0A5VV1nd3bgVAfSgUuhXG8UwDuGVboE+QeiwWaLq+E2mNrzo0fc0M2vd9CtnNn4h
qBH6QRtzUh288oMp7HtVUxJyGY12Ay1tgwzZyMWCsD3o4U41OtSrBq5RTUxuPUfz
9smeaoJwwNq7ytCnL6e1qWCzhEEoa2ahSPPnFtJLzQVKmIJanjr617Lioowl/i8i
EgcCOdULN2DVt8xAQxzqOrGtTn+5gBp7wo4bWCK5bA5+XnW29kAjZbsVq6wKzG30
Wp9Agrmu73a9CgI8GLetMCYRS0FLPJIKMPJ0oCm5r66A7Ki3SCVNrZMdXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIlNdAu9vWGI3W63tb6VhcBMyvJMB8GA1UdIwQY
MBaAFAkygv4/PX1GvRsct3sv7Dfe4AZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mYTcxOTUtYTBmZS00Zjg0LTgxM2Mt
MmE3NzZmNzg3YTFjLzEvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mYTcxOTUtYTBmZS00Zjg0LTgxM2MtMmE3NzZmNzg3YTFj
LzEvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBRcvUwZ
lDuq2zjrig0ICpmKrmaaEZgdyoQpNmukilsuFddcQH4eshw6NSuA4FQZ7tbgVCc/
K1MrilBfILJpQ9ldt8WtNDvVRd+JcC2QEM+4mKvyW3SyvWiKIvUQZQPlAl+7r2ek
8lHsJ4iXGDMvtby2lwgGLt2u9B7PNq/ZtPWtDzF6fXwr3mKeDGg0eJFmRc4mL30X
8xX3ux0U1tQk/KFvIGgfuf8Q+BAdhxmrBSQkfa1o6640u5+JXCaMFPUjNihuQMQS
WE7gsgbd4DAbJKmfO1AJeOpHVsNOKHH3qBqtjPqjm0i9g6pLxi4uMYe5kLO2q3Cn
K9v1txpI754B6g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:26:24 2026 by rpki-client