Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File:                     ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier:          oX8Iy3rKUFUVIpqWyy+gpp3FGZADxZINtMr4Svr3eKs=
Subject key identifier:   2F:13:7D:E2:CE:BB:2F:7E:F3:B8:21:2E:43:9E:80:88:5E:D3:B9:8B
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer:       /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial:       019EBEECB664712F4CDF9B42C75615EE8DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number:          1243
Signing time:             Sat 13 Jun 2026 03:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:44 +0000
Files and hashes:         1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: 0ceF6MBFOcxaJoEWjiU8poJ/+WiKLAXdrUEMb2+JFJk=)
                          2: PtloqyiZbbnOWREO8NaRPMXJYjc.roa (hash: Uge7+7ajlI43nf85To0akQVcLl5k7mGSDfVfABa+GiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:b6:64:71:2f:4c:df:9b:42:c7:56:15:ee:8d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102282537eb00130b79651f408000edca56450ea
        Validity
            Not Before: Jun 13 03:00:44 2026 GMT
            Not After : Jun 14 03:00:44 2026 GMT
        Subject: CN=2f137de2cebb2f7ef3b8212e439e80885ed3b98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:83:f0:20:a0:64:6f:b6:08:50:84:5f:af:
                    1d:2f:0f:24:33:86:2f:2f:c0:d9:95:34:e9:62:30:
                    fb:6b:38:86:e7:c9:f2:d3:e0:38:ed:84:6b:87:7a:
                    ec:2f:a5:50:9b:a6:97:20:c3:8d:87:62:42:76:df:
                    e0:4b:f2:7c:4d:f8:30:bc:c8:dd:b2:73:02:88:86:
                    8b:0e:7c:0e:cd:0f:a4:d3:65:59:78:39:a5:de:bc:
                    15:4a:74:39:fb:4c:07:d3:49:ac:fa:d0:ba:5f:97:
                    49:e6:65:30:55:f2:90:c2:13:cb:b6:55:4a:a2:3d:
                    42:4f:38:09:f0:85:0d:4b:69:36:04:d9:24:ef:83:
                    38:88:5d:c8:bd:ea:b5:70:ba:23:2d:52:e1:35:18:
                    b8:80:e1:03:8e:d6:ed:bd:40:df:9e:0c:d9:66:a1:
                    27:12:23:e5:7b:b9:04:5d:d4:aa:aa:f1:39:b4:fb:
                    68:95:24:39:88:34:c0:09:d9:03:9f:24:b4:11:44:
                    e7:f8:23:3a:26:45:bd:0b:56:e2:b3:de:dc:a6:cb:
                    42:7e:35:ab:c4:1d:eb:15:33:0f:5f:e3:13:b7:47:
                    f9:89:ce:66:03:ed:bf:c3:c9:85:04:04:15:a4:8e:
                    61:77:9a:08:fa:37:b2:80:4e:cb:e1:42:91:ec:f3:
                    4d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:13:7D:E2:CE:BB:2F:7E:F3:B8:21:2E:43:9E:80:88:5E:D3:B9:8B
            X509v3 Authority Key Identifier:
                keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:37:66:bb:c2:96:21:c2:0c:95:a7:1a:2d:b5:d2:05:09:f5:
         e2:0e:08:17:71:86:45:5c:ce:0d:3d:39:0b:a0:90:b4:07:79:
         5b:4d:1c:71:03:23:cb:45:58:f0:a2:7d:67:01:ab:99:32:90:
         b7:3f:6d:c0:c0:59:00:ba:97:98:df:15:00:73:4d:52:9d:4b:
         85:ef:d1:41:82:5f:dd:b7:56:0e:d9:fe:45:4a:1d:e3:a4:14:
         ee:56:da:83:1e:12:2f:35:ff:c9:ea:72:f3:a6:fd:9f:b5:dc:
         d7:10:66:a1:78:b3:c1:d9:0c:1f:45:15:d1:c7:48:e1:8b:07:
         48:48:b9:87:94:6c:81:3c:fe:4d:0f:3c:52:73:8f:29:cd:e4:
         16:c6:af:cd:d5:6c:cd:e5:6c:6b:68:16:ac:50:d9:1d:44:e1:
         ff:ae:5c:f4:16:e0:31:d6:00:af:a5:2a:bb:62:97:70:33:de:
         d5:16:00:f8:79:bc:04:70:2e:3b:58:21:9f:a7:41:05:80:a0:
         e1:11:2f:78:cc:c4:4a:43:1c:c0:3a:23:a9:2b:c0:3a:98:84:
         5a:b0:95:1d:74:66:b1:1a:47:6c:a6:d2:5d:4a:03:bd:c9:36:
         a9:99:a3:05:3b:af:8a:4f:0f:c9:bf:07:29:4d:19:12:e6:22:
         1c:d1:80:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:20 2026 by rpki-client