Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File:                     CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier:          Yv0rO6hh+9kJAYdv6lvZgLlO8u9AbTXsGjQT7tZfzs8=
Subject key identifier:   45:18:A4:BD:D8:CA:A5:8A:90:75:4E:54:2D:4C:01:65:6C:DC:2B:86
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer:       /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial:       019EC1119D7113C98ABCBE36A5567E13E871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number:          1922
Signing time:             Sat 13 Jun 2026 13:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:17 +0000
Files and hashes:         1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: 5SKXj7Z34la9sGvMLj0jiS7JcPV6+prfBkkhTeK6Xec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:9d:71:13:c9:8a:bc:be:36:a5:56:7e:13:e8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
        Validity
            Not Before: Jun 13 13:00:17 2026 GMT
            Not After : Jun 14 13:00:17 2026 GMT
        Subject: CN=4518a4bdd8caa58a90754e542d4c01656cdc2b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:cc:3f:64:9b:f9:27:e3:41:3b:8b:8f:0c:
                    86:de:57:45:ca:93:b6:29:99:ff:23:9a:ac:a2:0c:
                    01:56:42:33:75:5f:f0:a2:4c:f6:ba:b8:0e:a5:c8:
                    37:43:b5:f2:9c:ac:39:bf:44:74:86:bd:2a:72:4f:
                    cb:99:83:ef:6e:3d:be:2c:60:b8:cd:67:93:39:23:
                    18:3d:56:21:0f:7f:bc:3f:2f:2e:83:20:0a:f9:14:
                    4e:ee:e4:00:bb:6d:f5:32:e1:67:9d:84:6d:fa:cc:
                    a3:7b:49:1a:9e:07:ac:08:2a:50:94:2d:73:d1:5e:
                    07:06:d3:cc:e4:c1:68:67:4b:3b:e7:3e:4f:22:88:
                    01:f5:06:4b:ee:2c:d7:5b:a1:6a:ef:95:a7:c0:f5:
                    d6:2c:47:fd:30:6c:2a:b5:10:8c:db:ec:25:9c:3e:
                    bf:fc:61:79:a2:9e:35:9e:78:a2:fd:cc:fd:68:c5:
                    9e:f7:f1:35:3b:b4:b9:02:2a:9f:18:2b:b0:aa:4d:
                    51:4e:50:87:06:27:23:d2:85:c2:22:2a:e6:9d:58:
                    a9:d0:8e:57:07:42:7f:b7:41:e2:6d:00:ed:b2:28:
                    a6:69:fa:c9:aa:b1:45:a5:59:20:45:c9:dd:41:fd:
                    a4:96:58:5b:79:28:d2:b8:2e:a0:c5:6b:5e:0e:47:
                    4c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:18:A4:BD:D8:CA:A5:8A:90:75:4E:54:2D:4C:01:65:6C:DC:2B:86
            X509v3 Authority Key Identifier:
                keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ea:e4:ec:1d:73:4d:ab:17:57:e5:18:9b:9c:b6:8a:36:3b:
         e5:55:11:3e:55:60:d7:a8:eb:94:21:27:d8:55:17:e3:08:b3:
         15:45:bb:2d:93:7f:d2:bf:97:6e:e1:8c:80:8d:65:bc:16:db:
         8c:0c:98:a9:c9:ee:a7:73:49:f4:c7:66:ec:56:e4:bf:63:75:
         74:0f:0b:f6:f2:11:b4:0e:33:ad:9a:69:b7:7e:e0:24:64:c5:
         c5:25:28:f9:9f:95:46:ea:93:75:93:c1:b6:79:7f:85:4d:13:
         a7:2f:15:d4:33:38:cf:be:ea:3a:95:d1:74:a2:9f:2c:79:0b:
         16:35:e2:c1:fe:89:69:e3:5d:dc:85:44:90:a8:58:19:33:f8:
         c7:04:e4:c6:e0:ea:7b:3f:98:cf:65:59:03:96:fd:1d:a5:e8:
         57:e5:93:01:5e:5e:d6:fc:43:02:08:fe:cf:f6:89:6c:da:6d:
         88:ee:b3:93:6a:bc:88:d7:d6:d8:95:20:80:69:18:eb:f2:38:
         6e:ea:d9:85:d6:4e:66:65:c7:83:84:f4:64:44:4a:05:65:93:
         80:f1:f3:d4:9d:ad:f7:a4:1b:63:e5:c6:2b:0c:83:db:90:a1:
         76:03:8a:48:22:5f:a0:8f:6f:e4:12:aa:99:5d:18:ac:6e:94:
         ca:52:91:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:42 2026 by rpki-client