Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
File:                     CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft (raw, json)
Hash identifier:          TU3Icb7pb4VQbRTq/df3aPfpcUfRxXJYckCUmmrcChM=
Subject key identifier:   EB:5D:89:C0:FC:6A:B0:11:25:7E:E7:81:69:8C:A6:A9:2C:FA:82:AB
Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
Certificate issuer:       /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Certificate serial:       01A0C9D92674D71DD2E9E276F8B62891FF91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
Manifest number:          16E0
Signing time:             Tue 22 Sep 2026 16:00:46 +0000
Manifest this update:     Tue 22 Sep 2026 16:00:46 +0000
Manifest next update:     Wed 23 Sep 2026 16:00:46 +0000
Files and hashes:         1: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl (hash: moFL9qbLrjOJ9eX1ECO8hLaIwAQtBXRIXlMzMyRPgUk=)
                          2: G6T7iY18AmWrc0ZPUvjorjLJ-K4.roa (hash: oTA8FwhjnbIoX7c5WvPkKFNUfSdjruTbOwpXjsdRvKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d9:26:74:d7:1d:d2:e9:e2:76:f8:b6:28:91:ff:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
        Validity
            Not Before: Sep 22 16:00:46 2026 GMT
            Not After : Sep 23 16:00:46 2026 GMT
        Subject: CN=eb5d89c0fc6ab011257ee781698ca6a92cfa82ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b8:60:3e:48:4c:66:a5:8c:45:e1:c7:f0:d8:
                    5c:6d:10:dd:5b:fc:41:41:ed:1f:5c:3c:5a:73:e1:
                    68:1b:0c:1d:f5:21:84:7e:9b:76:85:e4:43:c1:65:
                    37:dd:32:3c:42:1e:8f:4e:3f:67:36:ff:0f:63:aa:
                    11:df:7b:52:dd:7e:ef:ed:5d:36:04:ec:01:c1:cc:
                    73:8d:49:83:8b:d4:2c:1f:ed:ad:c7:6e:4c:e2:73:
                    ed:f1:01:14:48:10:64:63:4e:8f:af:50:14:10:21:
                    52:77:1d:cd:9c:ab:bc:9d:62:7c:ea:f1:bd:83:d6:
                    4e:d2:85:c8:e8:64:f4:73:58:3c:4f:cd:90:96:94:
                    0b:2b:9c:67:9b:b1:ea:c4:75:bd:50:12:d7:9a:eb:
                    ae:62:30:8d:80:22:c5:7b:f6:f3:ae:bb:14:74:50:
                    39:2c:8f:67:5b:cc:9b:d4:cf:cc:cd:68:d8:30:44:
                    3d:00:7e:a0:7f:b0:28:98:ba:da:9a:aa:94:82:13:
                    62:82:a4:19:dc:2f:ed:89:ba:23:dd:48:60:a1:57:
                    a1:db:74:a0:f1:73:6f:05:82:13:29:21:0b:cc:3b:
                    8d:ac:3d:9a:93:8e:9e:1f:c8:9d:8f:42:f8:2c:84:
                    9f:88:76:1c:09:c6:98:41:43:15:f6:fd:4e:d4:c2:
                    d1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5D:89:C0:FC:6A:B0:11:25:7E:E7:81:69:8C:A6:A9:2C:FA:82:AB
            X509v3 Authority Key Identifier:
                keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:14:a5:53:13:16:b4:89:0f:10:3d:fb:e8:84:a6:00:f1:13:
         06:79:b4:6d:3f:3c:f3:42:6a:41:20:90:d7:e4:e8:88:5e:60:
         c7:c0:25:a3:33:46:45:16:f8:ac:72:d3:3a:54:23:3a:01:ef:
         94:f2:be:ae:a9:c1:63:f7:60:d9:fe:ac:13:14:3d:c7:8f:27:
         82:e3:55:ac:93:5e:93:b0:eb:44:b9:36:63:93:91:2a:11:01:
         54:89:10:39:04:b1:ff:e5:11:ad:47:11:dd:21:00:de:09:ed:
         60:9e:a4:fd:bd:a2:49:16:b8:02:65:7a:6a:00:1a:e8:a5:21:
         3c:92:04:42:e0:83:8d:55:94:42:27:a5:7b:1c:8f:2b:b2:c9:
         6f:cb:c5:f3:84:eb:13:40:99:15:08:c4:8c:ac:fa:01:87:c5:
         80:b4:5c:9a:7e:cc:35:93:49:83:53:f7:5d:0b:4c:3e:e6:24:
         86:6a:fd:b1:e2:55:b5:ca:7d:b1:ea:fe:b5:0f:58:fa:5d:d9:
         73:1a:c5:6f:6e:3f:9d:60:b4:37:9c:b6:92:29:fa:42:3e:2f:
         b4:bc:48:86:5f:50:de:29:75:f5:87:bf:9a:5a:94:62:ac:ba:
         8a:53:52:13:2c:8a:ae:eb:b1:51:b8:1d:96:39:5c:b3:97:c3:
         36:f1:fd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:43:31 2026 by rpki-client