Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File:                     ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier:          VVhbilDeB6lM67hu/cIptS/FebR6wpl7pCluSB6W8Do=
Subject key identifier:   27:9A:CE:FB:3C:0A:1D:C9:73:11:58:50:E4:6A:42:19:CB:89:F6:2F
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer:       /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial:       019FAA8820C7DE3AB5BBBB3E9F8E803936C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number:          12BD
Signing time:             Tue 28 Jul 2026 21:01:15 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:15 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:15 +0000
Files and hashes:         1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: 2XP/xclfjMzKO5qskRpBn20Z7rUDFf6NaIin+fzJ2gg=)
                          2: PtloqyiZbbnOWREO8NaRPMXJYjc.roa (hash: Uge7+7ajlI43nf85To0akQVcLl5k7mGSDfVfABa+GiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:20:c7:de:3a:b5:bb:bb:3e:9f:8e:80:39:36:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102282537eb00130b79651f408000edca56450ea
        Validity
            Not Before: Jul 28 21:01:15 2026 GMT
            Not After : Jul 29 21:01:15 2026 GMT
        Subject: CN=279acefb3c0a1dc973115850e46a4219cb89f62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:47:c7:2c:34:35:1f:cc:ff:1b:61:17:d6:97:
                    1b:95:04:ba:31:42:0e:e3:63:67:a6:07:88:60:4a:
                    f7:f8:0a:a9:2f:6b:be:53:2c:8d:94:b3:30:83:27:
                    2a:f9:71:93:31:5c:dd:b5:47:62:7f:e3:68:e2:41:
                    5e:6b:e4:6a:94:f4:7e:7d:81:81:6a:92:30:10:ca:
                    86:f4:09:b1:1c:52:2b:fb:d3:5d:e6:cd:2c:c8:fa:
                    ee:56:d1:1f:67:ad:07:bb:bc:91:07:3d:d2:f0:97:
                    8e:46:ab:4b:e4:16:cf:20:84:5a:ca:31:f1:33:9f:
                    b4:d0:5e:62:0c:b3:44:34:f6:a2:7a:53:97:8b:01:
                    68:b2:51:0d:a6:2d:21:ab:65:49:85:9a:72:a4:c2:
                    ca:d8:ac:b0:ec:c5:ff:5f:e3:14:7e:2e:dc:24:29:
                    17:17:18:b8:89:56:f2:94:36:c8:ad:cf:7a:9a:23:
                    4d:a5:18:ea:ad:27:d3:c2:ff:6f:de:4a:3f:37:61:
                    96:ea:57:aa:b1:e9:5c:9f:5a:a3:b6:bb:b3:25:79:
                    c5:22:14:af:ab:c7:1d:b1:88:51:59:4d:9d:ab:af:
                    99:eb:d9:17:43:71:80:97:fd:77:46:de:83:d3:9f:
                    00:49:5b:04:e2:51:e0:85:77:82:3b:7e:da:52:80:
                    75:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9A:CE:FB:3C:0A:1D:C9:73:11:58:50:E4:6A:42:19:CB:89:F6:2F
            X509v3 Authority Key Identifier:
                keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:24:2e:6d:b5:1f:c4:8e:ea:99:60:1f:fb:28:3f:c3:31:2b:
         f5:d5:ae:b0:03:15:15:a5:9c:77:a7:19:d3:49:2a:f6:24:81:
         15:ef:6a:0c:f5:32:fb:69:a0:d5:87:a7:03:43:f0:0f:66:37:
         2d:cd:9b:82:96:35:3b:49:0b:ba:ab:f0:2c:9b:63:95:51:5d:
         c2:7f:ae:7d:2e:89:a4:4b:13:2f:ee:ca:8d:d2:fa:80:68:aa:
         cb:98:93:e1:2a:ee:e5:f6:26:45:f4:8f:65:dd:f0:bf:52:8c:
         d8:07:ae:e2:15:24:e9:5f:ed:7d:f5:c5:59:a9:7c:4d:e5:d4:
         60:2d:9f:36:f6:1f:f1:48:5a:d8:a7:c2:8c:b5:91:b4:30:e3:
         95:18:2f:d3:3e:30:50:52:6a:6e:76:7a:37:46:48:b8:01:e8:
         41:d6:b8:43:27:eb:ce:84:df:fe:70:c2:28:4f:dc:c2:09:14:
         4e:5a:ca:8e:79:ed:4c:b3:b1:33:88:85:45:e2:22:7a:5a:98:
         cb:6d:51:58:83:cd:84:0c:9c:be:87:6b:8b:72:c2:10:3a:7d:
         74:82:80:6c:af:cf:4a:9b:4f:f3:7a:30:43:92:81:e3:57:11:
         c7:33:8e:d2:10:ea:5b:4c:fc:9b:81:ae:8c:95:36:b2:75:cd:
         8e:4a:21:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:30:38 2026 by rpki-client