Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File:                     Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier:          meQcwoleCOo8dwqqRM4IlpVTshM+q3y7bn1YpAKqKUE=
Subject key identifier:   F6:F3:13:22:DC:41:9E:11:E4:5D:7C:FA:4E:64:1D:A9:96:CE:C3:E1
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer:       /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial:       019FAAF5E5B6CD6FCDD4E6FD8CCA30D4D840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number:          06C7
Signing time:             Tue 28 Jul 2026 23:01:09 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:09 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:09 +0000
Files and hashes:         1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: VqvGEVx63XO/GabGgb4l4u0JPPpDt4WaOfYExCJ34aE=)
                          2: Db42gVIOc-r6U0XdkPGEkaUQ_F8.roa (hash: +dorelrzD6UM9OjrHdBTn8xKkODdpeZOExmq1+y6uHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:e5:b6:cd:6f:cd:d4:e6:fd:8c:ca:30:d4:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
        Validity
            Not Before: Jul 28 23:01:09 2026 GMT
            Not After : Jul 29 23:01:09 2026 GMT
        Subject: CN=f6f31322dc419e11e45d7cfa4e641da996cec3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:17:40:20:d1:b0:e6:62:82:1b:84:3d:96:
                    25:77:ce:12:77:9d:b7:82:fc:bc:c2:a1:55:b5:bc:
                    2d:68:ef:8f:3b:7c:15:9a:97:f5:2f:c3:2d:0f:c0:
                    41:39:e8:ce:a5:f0:46:33:d9:9e:13:d0:fd:03:c8:
                    71:e8:ea:7d:7f:d5:c5:79:91:c6:29:56:71:88:5c:
                    dd:b2:55:df:21:9b:ac:38:b3:74:a0:7f:b6:d1:f1:
                    31:d0:5b:3a:7f:e5:04:34:7a:1a:bd:d8:34:29:9a:
                    f6:89:dc:54:f6:93:d2:12:3e:36:9e:e3:06:2a:f8:
                    d1:3c:79:e7:c6:2a:c4:3d:c3:34:57:2a:88:ac:b8:
                    7c:c4:c1:67:c9:02:7d:1d:ee:8f:8f:5e:11:80:9c:
                    4d:71:e5:c7:9f:00:cb:af:26:61:b7:64:66:09:08:
                    a4:f4:87:97:28:44:4d:de:89:a8:7c:04:99:cb:75:
                    dc:2a:6b:e9:d9:48:38:90:db:5d:50:75:77:de:b3:
                    d1:42:1a:9e:5b:19:26:7b:03:58:28:a4:2e:95:8d:
                    f5:42:df:25:28:a9:16:06:16:5d:c9:3f:30:e2:e4:
                    5a:12:b9:b7:e2:a4:62:f7:22:5b:3b:38:43:4a:5f:
                    1e:2e:88:ec:18:28:cc:20:93:b7:3b:e2:13:9d:e4:
                    42:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F3:13:22:DC:41:9E:11:E4:5D:7C:FA:4E:64:1D:A9:96:CE:C3:E1
            X509v3 Authority Key Identifier:
                keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ad:f5:bc:1d:18:6e:df:36:d9:72:44:f2:49:74:c8:42:55:
         e8:58:82:c2:39:53:29:65:b1:45:77:9a:8e:98:77:71:b6:42:
         4e:0f:03:a2:9e:98:bc:7f:67:22:15:af:a2:3f:70:fa:53:42:
         53:6e:31:d9:60:36:3d:5f:21:44:d3:bb:e5:df:c2:86:0c:75:
         e3:2d:4e:99:b4:b2:97:86:77:42:b2:a1:94:1f:12:06:ee:4a:
         61:23:86:1b:cd:a1:42:09:7a:5f:77:0a:7c:c6:47:5c:1a:75:
         e9:84:3d:75:7b:5a:b2:af:47:0f:07:5f:60:3b:5c:97:88:b0:
         76:63:2e:30:8c:d9:a4:a5:41:d8:fe:74:46:ea:01:cb:7b:cd:
         6f:aa:fd:10:da:73:89:8d:f6:e6:e3:1e:bc:06:d7:78:1c:fe:
         59:39:fe:a0:e3:29:fd:72:59:99:3d:49:e7:65:7b:05:b7:f3:
         d0:da:b4:6d:a4:63:e6:97:f6:b9:ca:8c:dc:ff:7e:30:58:9c:
         ea:64:fa:3b:b3:cf:77:46:f8:fa:67:57:c8:f7:83:c7:1a:8a:
         56:22:8d:7c:08:f0:5f:3b:67:55:86:14:c5:a5:48:55:28:ef:
         b0:6e:3e:a9:cf:54:f9:04:a9:6f:61:8d:a0:bd:66:f9:eb:8e:
         8e:53:b4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:12 2026 by rpki-client