Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File:                     ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier:          aenB1KB21EddTgvYfZMrdIPAgJm2uBY8KQ5gzqBSWlc=
Subject key identifier:   9A:23:CC:F5:26:3C:8E:57:F3:D0:F1:8D:45:AB:47:56:A3:02:0D:4A
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer:       /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial:       019E30051AB809E5500D9D535737E786A2AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number:          11F9
Signing time:             Sat 16 May 2026 09:01:41 +0000
Manifest this update:     Sat 16 May 2026 09:01:41 +0000
Manifest next update:     Sun 17 May 2026 09:01:41 +0000
Files and hashes:         1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: +s4OGB8xm40vW5q9Eyg7qQi9bDQBsmvftw1usDlPOdQ=)
                          2: PtloqyiZbbnOWREO8NaRPMXJYjc.roa (hash: Uge7+7ajlI43nf85To0akQVcLl5k7mGSDfVfABa+GiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:1a:b8:09:e5:50:0d:9d:53:57:37:e7:86:a2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102282537eb00130b79651f408000edca56450ea
        Validity
            Not Before: May 16 09:01:41 2026 GMT
            Not After : May 17 09:01:41 2026 GMT
        Subject: CN=9a23ccf5263c8e57f3d0f18d45ab4756a3020d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:34:f5:79:f4:75:94:71:8b:97:d4:8b:2d:
                    14:38:6b:60:63:4d:99:b8:c0:ef:67:15:bc:bf:78:
                    d5:8b:c4:54:51:43:e4:dd:38:6b:d8:cf:28:1f:57:
                    17:96:8b:65:0a:ea:44:33:98:e8:4e:f3:5f:b9:41:
                    73:73:b8:04:ba:24:c8:59:ba:19:09:4e:10:86:3e:
                    38:5e:53:1d:c5:8b:e9:03:b5:c2:de:9f:ed:e8:ef:
                    ee:2f:73:4e:73:fb:e5:47:0d:fb:33:a3:8f:73:a7:
                    54:9b:f7:7c:bc:cc:03:6d:69:d5:4e:b2:d7:b2:68:
                    59:68:07:3c:56:58:ba:fa:ee:2c:2c:5b:50:2b:52:
                    77:fc:8b:02:d7:80:81:fd:88:f5:93:f8:00:fc:fa:
                    b9:20:9a:c2:21:94:47:ff:43:a7:28:75:26:be:91:
                    28:2a:7a:90:75:6c:ba:c8:17:88:21:1b:9e:aa:21:
                    b2:c3:23:48:7c:b6:a8:a7:1b:fe:32:6d:70:cb:10:
                    36:e0:35:b7:8d:ca:29:c1:fe:32:13:35:67:7b:59:
                    22:cb:78:49:a3:fd:96:bb:ca:5d:c3:8b:97:05:35:
                    6c:51:96:75:72:24:f8:23:e2:a2:f9:dc:f1:55:43:
                    1f:46:02:6c:96:c3:a0:b7:e3:1a:7f:22:48:9a:39:
                    78:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:23:CC:F5:26:3C:8E:57:F3:D0:F1:8D:45:AB:47:56:A3:02:0D:4A
            X509v3 Authority Key Identifier:
                keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f6:68:ff:ef:7a:a4:46:a5:8c:e5:52:51:c5:c0:a6:6e:25:
         e7:fe:e5:70:41:a6:8e:1b:36:c4:df:d1:e1:bb:22:79:57:82:
         1b:39:2c:ce:91:ba:8c:fa:40:2a:88:3c:e9:a0:ed:38:ec:ac:
         ba:2c:3e:ed:8b:eb:10:de:61:f5:d7:03:cb:2f:91:23:1f:c3:
         98:2a:41:69:04:8e:55:e7:89:41:1c:18:b9:14:b2:a9:9a:2f:
         52:7c:b7:87:73:29:74:69:dc:a8:3d:39:92:13:e6:ba:0b:db:
         61:b3:96:90:64:8f:4f:50:d0:a0:41:d3:19:87:22:1b:4f:c3:
         ff:df:81:29:2a:da:c2:91:26:d1:1b:75:30:c6:41:31:b6:cf:
         d9:a9:8d:ce:8a:93:0c:7f:7d:c2:3e:ba:16:e9:a9:cc:7c:b1:
         4b:e1:5d:4a:48:08:3e:1e:f2:b9:88:b0:a3:c9:0a:f8:6c:d0:
         19:a7:ce:31:8f:d0:75:8a:d6:b1:bd:5f:15:3c:bd:c8:9b:cf:
         5c:4d:df:2b:da:41:aa:72:46:a0:bf:42:77:02:00:28:94:2e:
         44:fa:a5:49:7d:18:c8:95:77:e3:dc:af:1e:6d:a9:be:42:e6:
         01:4a:8d:b7:c1:bb:ff:f2:9a:47:a0:fb:ef:d6:54:29:65:cf:
         8e:61:44:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:58 2026 by rpki-client