Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File:                     ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier:          wcGTwuIc47czF9Odyit9mfYE/+FsdXJ8jeC/jN67ycw=
Subject key identifier:   20:15:D8:30:F6:32:8F:96:B7:6D:26:57:CE:BB:0C:14:D7:28:C0:21
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer:       /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial:       019F17C2B5FB62415E0C4A16A003F9CC386D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number:          1271
Signing time:             Tue 30 Jun 2026 09:01:04 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:04 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:04 +0000
Files and hashes:         1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: bzJDrpMtoYaCEVSMqyerAp3PaEQYD/6Prdr7cxBdnI0=)
                          2: PtloqyiZbbnOWREO8NaRPMXJYjc.roa (hash: Uge7+7ajlI43nf85To0akQVcLl5k7mGSDfVfABa+GiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:b5:fb:62:41:5e:0c:4a:16:a0:03:f9:cc:38:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102282537eb00130b79651f408000edca56450ea
        Validity
            Not Before: Jun 30 09:01:04 2026 GMT
            Not After : Jul  1 09:01:04 2026 GMT
        Subject: CN=2015d830f6328f96b76d2657cebb0c14d728c021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:30:95:da:29:3b:9e:53:07:8b:f9:f7:4e:a6:
                    46:c4:f1:23:cc:45:55:ab:f7:5e:dc:00:a1:c7:24:
                    a2:ec:b7:e9:f5:c9:61:3f:70:c0:89:d7:68:de:8e:
                    1f:27:f1:e5:1b:13:78:3e:73:bf:86:1d:b8:62:81:
                    14:8d:47:8e:b6:c1:d7:1e:6f:85:9d:a1:66:d0:2c:
                    07:fa:30:40:1b:8b:b8:41:23:28:5c:5e:82:5b:7a:
                    3a:21:ce:f3:1a:9b:26:67:6a:93:cc:52:4a:8c:ba:
                    ea:25:9a:a4:d6:55:f5:d4:05:d0:5c:40:20:4c:85:
                    b4:3d:28:9b:89:9f:1a:47:b6:15:36:e1:5c:fe:e3:
                    93:74:ca:a2:55:a0:da:04:98:99:6b:da:d1:94:21:
                    d0:e9:00:70:3c:72:d5:cc:eb:65:c7:da:65:1f:92:
                    96:41:ea:52:bd:34:7d:ee:e8:ec:af:31:0b:ab:00:
                    5c:6f:67:df:19:7b:09:17:c6:95:82:23:48:cf:2f:
                    7e:5b:75:99:82:22:e1:10:21:56:4c:c1:46:8b:77:
                    81:6b:26:18:bc:ba:e0:5b:cf:25:83:71:fb:45:44:
                    1a:57:17:07:1e:0b:23:1d:de:a0:8f:12:29:1a:bd:
                    d4:89:00:f0:3d:da:25:bc:a8:46:80:ff:21:31:7d:
                    fc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:15:D8:30:F6:32:8F:96:B7:6D:26:57:CE:BB:0C:14:D7:28:C0:21
            X509v3 Authority Key Identifier:
                keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:20:c6:f7:4b:00:37:6c:c9:b1:48:42:1a:67:db:97:28:aa:
         f5:44:a9:b4:42:08:b0:1c:6a:32:3b:73:aa:e1:2a:ec:38:0d:
         b6:ba:b2:29:61:48:c5:26:c4:35:7e:cc:c2:1f:7e:b7:72:6d:
         68:92:36:86:ca:f5:1e:3a:7d:f8:43:88:71:10:a7:b4:5c:ad:
         07:ba:bf:32:e9:e8:94:ac:ef:5b:5a:c9:3b:07:f7:d3:57:c3:
         3e:93:1f:d2:70:db:59:79:9e:f9:d1:d6:f6:44:ba:9c:fd:88:
         a4:04:b3:c0:13:65:e2:54:ae:99:e2:3f:13:aa:f1:fa:1a:e3:
         11:90:05:21:70:27:38:fe:7c:a4:10:eb:76:e1:6b:bb:cd:e2:
         0a:18:a7:7f:a4:b7:64:09:f4:26:df:0f:a5:33:e6:34:56:24:
         92:e5:70:94:2c:d9:dd:cd:6d:39:2f:ed:28:95:b1:18:aa:2c:
         4e:5a:25:18:f7:91:53:41:16:12:fd:54:e1:15:bc:62:47:f8:
         e6:d3:f7:4e:0d:40:d1:95:b0:08:1a:f7:54:a9:29:4e:8d:f8:
         d8:f7:30:30:99:c9:e1:cd:32:b2:d5:19:fc:c6:e1:41:74:a6:
         82:3c:db:ab:dd:f1:56:8e:0b:ca:d2:f7:65:67:53:9b:d1:f2:
         25:b3:cc:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwrX7YkFeDEoWoAP5zDhtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMjI4MjUzN2ViMDAxMzBiNzk2NTFmNDA4MDAwZWRjYTU2
NDUwZWEwHhcNMjYwNjMwMDkwMTA0WhcNMjYwNzAxMDkwMTA0WjAzMTEwLwYDVQQD
EygyMDE1ZDgzMGY2MzI4Zjk2Yjc2ZDI2NTdjZWJiMGMxNGQ3MjhjMDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTCV2ik7nlMHi/n3TqZGxPEjzEVV
q/de3AChxySi7Lfp9clhP3DAiddo3o4fJ/HlGxN4PnO/hh24YoEUjUeOtsHXHm+F
naFm0CwH+jBAG4u4QSMoXF6CW3o6Ic7zGpsmZ2qTzFJKjLrqJZqk1lX11AXQXEAg
TIW0PSibiZ8aR7YVNuFc/uOTdMqiVaDaBJiZa9rRlCHQ6QBwPHLVzOtlx9plH5KW
QepSvTR97ujsrzELqwBcb2ffGXsJF8aVgiNIzy9+W3WZgiLhECFWTMFGi3eBayYY
vLrgW88lg3H7RUQaVxcHHgsjHd6gjxIpGr3UiQDwPdolvKhGgP8hMX383QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAV2DD2Mo+Wt20mV867DBTXKMAhMB8GA1UdIwQY
MBaAFBAiglN+sAEwt5ZR9AgADtylZFDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80ZWYyYzMtMDZkOC00ZjExLTg0Yjct
MzM4MTk2OTM1MDUwLzEvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi80ZWYyYzMtMDZkOC00ZjExLTg0YjctMzM4MTk2OTM1MDUw
LzEvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCDG90sA
N2zJsUhCGmfblyiq9USptEIIsBxqMjtzquEq7DgNtrqyKWFIxSbENX7Mwh9+t3Jt
aJI2hsr1Hjp9+EOIcRCntFytB7q/MunolKzvW1rJOwf301fDPpMf0nDbWXme+dHW
9kS6nP2IpASzwBNl4lSumeI/E6rx+hrjEZAFIXAnOP58pBDrduFru83iChinf6S3
ZAn0Jt8PpTPmNFYkkuVwlCzZ3c1tOS/tKJWxGKosTlolGPeRU0EWEv1U4RW8Ykf4
5tP3Tg1A0ZWwCBr3VKkpTo342PcwMJnJ4c0ystUZ/MbhQXSmgjzbq93xVo4LytL3
ZWdTm9HyJbPMXg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:53 2026 by rpki-client