Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
File:                     ESCgzgE-LVKm_zVKJwiUu5mORUc.mft (raw, json)
Hash identifier:          Grlq3OULk/XPrYeCfEQZA0B3b36YRuLqKqI48QPuqZg=
Subject key identifier:   97:90:A1:29:97:08:85:FE:48:FA:5A:0A:48:7B:25:3D:E4:87:46:68
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Certificate issuer:       /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial:       01A17DE1B65E1BD906668780E0404DE2C8E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
Manifest number:          1ACA
Signing time:             Tue 27 Oct 2026 15:01:46 +0000
Manifest this update:     Tue 27 Oct 2026 15:01:46 +0000
Manifest next update:     Wed 28 Oct 2026 15:01:46 +0000
Files and hashes:         1: ESCgzgE-LVKm_zVKJwiUu5mORUc.crl (hash: dzy/TWVOJ8RydacBT3K9Ig7vNP5icOmsFyAZ1FFNMZk=)
                          2: Nj-fcrd8btYTmooIT07USGH4uhc.roa (hash: NGae1BAct6VWVRLG8OfFbqQcDMzJnoL00dhPvysFzMY=)
                          3: dV-H29alZEFLImGmyiY7hQJaEAY.roa (hash: Li61GxGOSJxUgraJk65DXVq0NLMB+4WQGr7Nxv/T31Q=)
                          4: e-tZ1DdZl0dxPJy0N9Yn-0Al0M8.roa (hash: QAdbievfGnFmg15O+j0D44UXxw3G9rYuADuFC3J6DdQ=)
                          5: kNeO88W6WiZjVCqS0huGRYDNIkU.roa (hash: lTC2ffNYxbrVzusWfHz2XumlwYx6P/xuLd8Z8WVhDpk=)
                          6: tqA8MnPED0zVZqFPU0EtU7Uh-p8.roa (hash: nbXmQvCUG27Q3g4mguFw6ecZllhpCxpa9WaI9lGnt70=)
                          7: uMoLLTIIp3goMEn7y4z_relYCj0.roa (hash: OkL4CzvIc+/+beHGUC2g9z5v1OG6NY0LtX6M7jVvI9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:e1:b6:5e:1b:d9:06:66:87:80:e0:40:4d:e2:c8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
        Validity
            Not Before: Oct 27 15:01:46 2026 GMT
            Not After : Oct 28 15:01:46 2026 GMT
        Subject: CN=9790a129970885fe48fa5a0a487b253de4874668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b2:83:6c:57:dc:cf:b9:0f:fd:fa:c0:22:24:
                    85:f2:9c:8b:2a:8c:53:92:49:dd:f7:34:06:ba:97:
                    fe:b3:ec:88:1b:75:a6:4b:3a:6c:36:16:d2:92:f3:
                    c8:15:53:08:02:04:56:3a:91:d2:0d:48:fd:cf:e2:
                    fe:de:9d:af:a4:38:ad:1b:04:40:9b:0b:30:53:39:
                    5d:df:fe:be:2a:f1:4a:c4:b8:29:ef:4c:5f:fc:f1:
                    1f:09:49:48:a5:65:77:a2:39:2f:c5:b2:ca:f1:45:
                    60:0c:32:25:24:05:a7:be:dd:ba:f0:64:7a:37:65:
                    51:66:70:51:fc:a0:c0:31:22:0e:2f:42:ca:41:e6:
                    7e:83:0b:67:b5:b4:43:fd:4d:1d:09:eb:fa:6e:2d:
                    61:e2:03:db:32:94:58:dc:15:72:0f:fa:f5:6c:24:
                    d2:f2:55:61:ae:c8:fe:48:db:f0:b7:71:0b:26:93:
                    c1:cb:62:e4:71:13:53:06:b0:70:6f:2c:cf:20:3e:
                    e5:81:d0:31:fe:0e:c2:b5:5c:61:09:a3:16:5c:f1:
                    ab:35:85:a1:54:13:f5:52:62:25:55:7c:0b:61:1f:
                    c9:30:48:c0:85:f6:bb:72:66:a0:a6:bb:0c:be:a9:
                    94:21:11:2a:63:ee:9a:16:91:e3:2f:05:8d:cf:b2:
                    d1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:90:A1:29:97:08:85:FE:48:FA:5A:0A:48:7B:25:3D:E4:87:46:68
            X509v3 Authority Key Identifier:
                keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:30:6a:6c:f5:e6:04:87:2e:78:95:92:96:90:d5:ce:c2:c1:
         db:8b:b8:1d:62:8f:3d:b9:16:cf:ed:21:39:36:2b:4f:0a:ba:
         d7:03:dd:d3:05:4b:ea:28:c5:63:b7:c3:8f:48:b9:13:d9:de:
         f8:35:40:f1:02:96:21:44:5b:2d:ee:dc:14:31:56:1a:80:9c:
         aa:18:e9:6b:fd:e8:c7:30:86:64:79:ac:de:c7:24:80:74:57:
         78:b6:09:90:8b:92:74:5c:32:d7:9d:97:dd:a7:33:bc:6b:40:
         35:bf:ed:46:3d:ef:f5:68:8e:92:ee:a9:10:15:43:b5:29:36:
         fc:dd:9d:8b:e1:22:e4:ec:65:ab:73:87:a1:52:51:df:b6:5d:
         39:cc:dd:a7:9e:30:a1:fd:c4:5b:d9:2b:ed:54:8d:c4:24:37:
         f2:22:94:58:83:f7:1d:e1:4b:dc:ee:76:9a:bc:89:e8:38:4a:
         57:29:6e:59:b0:67:fb:74:db:fd:62:08:60:43:61:ba:bf:c8:
         c6:94:a6:b2:c1:99:bf:53:0f:89:4d:73:d7:d6:a5:36:c7:b9:
         dd:1b:d2:0a:5d:27:dc:67:0e:57:35:42:41:61:8a:6c:b9:ad:
         04:3a:99:fc:bb:f5:ea:e5:b7:7b:aa:db:96:d2:4e:f3:c1:16:
         3a:75:81:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:49:24 2026 by rpki-client