Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
File:                     ESCgzgE-LVKm_zVKJwiUu5mORUc.mft (raw, json)
Hash identifier:          3GVKitG5SVbMROZCT8v6SS0Ssg2ACRwEqZlfdE53bLA=
Subject key identifier:   F7:03:1E:74:77:7D:11:D0:C9:9C:B8:2F:0C:1C:79:8D:ED:90:3E:C9
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Certificate issuer:       /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial:       01A06D957F2126BC0F20FACA3DBEEC1EBA8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
Manifest number:          1A3D
Signing time:             Fri 04 Sep 2026 18:01:48 +0000
Manifest this update:     Fri 04 Sep 2026 18:01:48 +0000
Manifest next update:     Sat 05 Sep 2026 18:01:48 +0000
Files and hashes:         1: ESCgzgE-LVKm_zVKJwiUu5mORUc.crl (hash: zK2R0Shwze7PN0EwkJI/GaiemwhMz59ZrXLQXxdGulY=)
                          2: Nj-fcrd8btYTmooIT07USGH4uhc.roa (hash: NGae1BAct6VWVRLG8OfFbqQcDMzJnoL00dhPvysFzMY=)
                          3: dV-H29alZEFLImGmyiY7hQJaEAY.roa (hash: Li61GxGOSJxUgraJk65DXVq0NLMB+4WQGr7Nxv/T31Q=)
                          4: e-tZ1DdZl0dxPJy0N9Yn-0Al0M8.roa (hash: QAdbievfGnFmg15O+j0D44UXxw3G9rYuADuFC3J6DdQ=)
                          5: kNeO88W6WiZjVCqS0huGRYDNIkU.roa (hash: lTC2ffNYxbrVzusWfHz2XumlwYx6P/xuLd8Z8WVhDpk=)
                          6: tqA8MnPED0zVZqFPU0EtU7Uh-p8.roa (hash: nbXmQvCUG27Q3g4mguFw6ecZllhpCxpa9WaI9lGnt70=)
                          7: uMoLLTIIp3goMEn7y4z_relYCj0.roa (hash: OkL4CzvIc+/+beHGUC2g9z5v1OG6NY0LtX6M7jVvI9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:95:7f:21:26:bc:0f:20:fa:ca:3d:be:ec:1e:ba:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
        Validity
            Not Before: Sep  4 18:01:48 2026 GMT
            Not After : Sep  5 18:01:48 2026 GMT
        Subject: CN=f7031e74777d11d0c99cb82f0c1c798ded903ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:41:47:94:b1:88:d7:70:c6:74:c9:d0:c7:24:
                    c0:6b:3d:0d:39:c2:fc:49:0a:52:6a:12:a7:1c:43:
                    00:82:38:c4:49:f7:cf:4f:5a:7b:16:19:a9:f8:2f:
                    c6:63:69:d9:68:af:c7:b3:84:ad:2d:ea:4a:6b:61:
                    ec:6b:50:7a:3f:50:07:0f:ef:4d:c2:d8:be:36:a9:
                    f5:32:9d:ea:eb:88:f9:1b:fc:01:f8:bd:cc:e3:b7:
                    c7:b4:a3:fb:24:bc:d6:04:86:ff:25:59:a0:c7:23:
                    2e:7e:7a:db:15:a2:20:16:10:0b:50:44:d5:41:3a:
                    10:1f:fa:73:4d:5d:d2:df:1a:f2:54:ac:89:23:7d:
                    12:93:85:9b:3a:e3:d1:2e:a3:c1:92:f8:a8:81:ea:
                    22:25:5a:63:0f:d9:06:1b:d2:2f:dc:2d:f5:df:12:
                    bc:47:20:0b:bf:c9:30:f1:35:a2:71:f2:5a:f8:c6:
                    33:b9:08:5c:1e:1b:e5:64:c1:3c:48:25:dc:72:97:
                    b4:c0:3f:f9:bf:1b:40:a0:02:86:d3:5f:a4:2a:f1:
                    a8:b7:2e:54:ac:f6:86:35:d5:04:ad:0c:42:0b:bf:
                    d4:40:ef:3d:29:1f:2c:20:00:01:5f:45:95:dd:11:
                    ee:68:58:4f:74:5d:bc:0e:0f:da:f6:0c:83:ef:91:
                    b2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:03:1E:74:77:7D:11:D0:C9:9C:B8:2F:0C:1C:79:8D:ED:90:3E:C9
            X509v3 Authority Key Identifier:
                keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:be:d2:15:6a:3c:39:a0:35:65:1f:5e:a7:3c:ef:14:d9:ac:
         87:72:de:d8:05:77:b5:05:96:5f:73:1c:c9:54:27:04:a7:c2:
         5f:ac:e0:77:73:b0:91:c1:fd:34:09:29:e8:08:9a:e9:7a:d7:
         c4:0f:dd:93:6b:7f:2c:b4:0f:b2:ca:10:b3:9a:c3:35:03:ae:
         32:77:ca:dc:77:73:0d:6c:9b:4c:76:5e:94:b3:38:f7:e4:b7:
         a6:6e:41:ff:e4:a0:8b:18:1f:46:a8:1b:cd:9e:89:b4:35:55:
         94:1b:b8:bf:fb:4d:4e:24:4e:63:9b:f5:45:bf:68:23:23:61:
         20:5c:4e:46:46:bf:ef:77:d3:36:d0:aa:13:16:fa:75:3d:3f:
         4f:ae:27:2f:1b:77:67:d6:37:33:44:47:5c:2e:d7:2c:3b:7a:
         ae:35:5f:19:ef:a4:1e:fd:d7:87:02:a5:71:53:6b:24:8c:b4:
         95:9a:f3:84:29:9b:92:10:22:f8:91:86:3a:d4:b7:21:bf:f9:
         a1:c9:9c:61:e2:0e:f3:78:e8:22:30:50:3d:bd:07:5d:8e:fd:
         e0:32:d5:c5:78:37:44:c4:12:4b:2b:a6:cb:58:be:f4:35:5e:
         e5:fe:b3:bc:b0:a7:ae:cb:68:cc:63:0c:2a:9b:f0:8c:56:17:
         f7:fd:24:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:01:19 2026 by rpki-client