Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File:                     ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier:          5tbXO5t5wb8CKz9w9WiuIjvMgWs1f2EC0owk9h+P1Xk=
Subject key identifier:   A8:38:38:00:B1:72:D4:C3:85:CF:59:60:62:E3:22:D7:FE:3E:4A:B8
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer:       /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial:       01A0C47C0147AE4CF70CBFF4BB21B1404B84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number:          134F
Signing time:             Mon 21 Sep 2026 15:00:56 +0000
Manifest this update:     Mon 21 Sep 2026 15:00:56 +0000
Manifest next update:     Tue 22 Sep 2026 15:00:56 +0000
Files and hashes:         1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: qBAplChTuV6ISOaZWGd8GgMurV6Rv4FSX7M4LxeDJjs=)
                          2: PtloqyiZbbnOWREO8NaRPMXJYjc.roa (hash: Uge7+7ajlI43nf85To0akQVcLl5k7mGSDfVfABa+GiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:01:47:ae:4c:f7:0c:bf:f4:bb:21:b1:40:4b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102282537eb00130b79651f408000edca56450ea
        Validity
            Not Before: Sep 21 15:00:56 2026 GMT
            Not After : Sep 22 15:00:56 2026 GMT
        Subject: CN=a8383800b172d4c385cf596062e322d7fe3e4ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fa:96:e3:3e:e6:18:84:3f:c4:a1:b1:9b:19:
                    bc:36:99:cb:19:bd:d7:6c:b3:b5:7e:6c:88:5f:fa:
                    8a:f5:0c:b0:65:b6:55:71:c6:10:b1:32:2c:bd:83:
                    e9:e0:0f:f8:ce:69:31:14:f0:8b:8b:73:e8:44:48:
                    31:b6:3b:d2:7a:7e:fe:e1:d9:f6:de:24:04:39:18:
                    0e:ad:eb:e3:11:53:c5:13:67:0a:fb:46:2a:ea:1b:
                    61:41:c2:67:32:a8:47:38:a3:cf:54:3e:56:c1:c0:
                    4c:86:39:e6:e9:0a:c3:59:60:8f:8f:6c:87:cb:be:
                    37:29:f7:ad:62:30:01:b0:50:d8:58:95:da:ee:43:
                    4a:47:d0:0e:bd:6b:2e:ab:13:97:81:2e:d2:0f:c7:
                    17:dc:65:51:25:d5:aa:95:19:9f:b7:95:62:c9:9f:
                    e0:87:b4:56:ea:5f:64:3c:22:04:c1:5c:2a:62:eb:
                    6b:d2:80:98:80:a3:2f:2b:c2:6e:39:fc:59:bc:cb:
                    e2:d0:eb:10:28:42:88:2a:f1:d0:85:1b:e7:d3:9c:
                    3b:64:a4:37:98:76:7f:80:4c:f3:d5:81:08:b4:58:
                    92:a8:3e:ef:13:3f:77:b0:cc:66:5a:5b:a6:ed:90:
                    91:71:37:56:b5:96:c7:d1:5c:4f:21:2a:9d:5c:c0:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:38:38:00:B1:72:D4:C3:85:CF:59:60:62:E3:22:D7:FE:3E:4A:B8
            X509v3 Authority Key Identifier:
                keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:dd:41:3f:0f:cb:9b:88:93:0a:eb:36:9c:ca:b9:88:3e:f2:
         69:d4:b8:71:0a:2c:4b:ac:4c:20:e5:82:d0:96:dc:4d:dd:95:
         db:75:39:83:5c:58:5f:fd:12:f7:e9:ed:84:f6:5e:08:60:c0:
         5f:ac:7a:3a:6b:76:c8:65:1b:f9:50:ec:d4:1f:df:5c:df:e6:
         6f:ef:b5:a2:fe:88:ec:5c:41:90:a3:72:6f:10:56:3e:38:98:
         31:bb:05:11:27:ac:c1:cd:84:13:7f:65:7f:55:7d:ff:29:09:
         d1:1b:53:28:31:a2:d9:75:79:0c:8f:ea:c9:ff:e9:bd:55:c9:
         25:4e:7b:da:74:2d:40:aa:fb:38:80:b0:8c:0b:26:11:db:74:
         0b:37:2b:01:8e:1e:a1:3c:7d:c5:57:f8:b0:32:dc:36:28:52:
         f8:21:2c:75:a4:0d:a1:bd:a9:6b:40:2d:e4:f8:13:29:1f:aa:
         9e:9e:95:6c:49:e1:a7:12:d8:11:d0:e2:54:0c:6e:ee:17:48:
         55:04:31:9f:0d:88:23:5e:73:2b:9e:fe:8a:90:b4:52:be:3d:
         08:44:75:da:f4:4b:c7:e6:c2:49:1b:35:16:fd:fd:a0:1e:aa:
         3c:9d:45:22:81:c2:cf:60:47:bd:a5:23:41:65:87:00:da:33:
         e8:66:26:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:34:39 2026 by rpki-client