Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
File:                     ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json)
Hash identifier:          iGPqAdAIdu0SbCQTUlqmuUqiH09rurHNVIISUaGtL2A=
Subject key identifier:   66:C8:5A:A0:9E:E1:CA:2F:12:F8:8F:B5:41:BA:BE:DD:64:2B:BE:B3
Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
Certificate issuer:       /CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Certificate serial:       01A001DD2675F549477DB7004735A4BF2543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
Manifest number:          10A2
Signing time:             Fri 14 Aug 2026 20:01:05 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:05 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:05 +0000
Files and hashes:         1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: 4QQFu1ffRlFDDDlwY47ufKTcmQNr/eKyyLd8xuMN6Rw=)
                          2: bk3MpB9dFYsKx-vk9Fu2s4AOobg.roa (hash: VhKUc5HBMkEPpFpw6zVe4nOAoJ2kIgyeitJGidAI9eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:26:75:f5:49:47:7d:b7:00:47:35:a4:bf:25:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839
        Validity
            Not Before: Aug 14 20:01:05 2026 GMT
            Not After : Aug 15 20:01:05 2026 GMT
        Subject: CN=66c85aa09ee1ca2f12f88fb541babedd642bbeb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:95:61:f2:d7:99:10:5e:ad:c3:49:4f:48:
                    2a:d1:f9:55:cf:2f:d3:3c:fb:a8:cb:42:19:cd:84:
                    6d:29:f5:b3:b8:b9:83:35:a6:33:7b:b4:d6:ea:4f:
                    a6:51:95:36:1d:97:09:4b:86:dc:e7:3b:0b:3b:ac:
                    ca:f8:93:64:f7:b3:79:46:7e:88:2a:60:3c:40:d9:
                    0e:0c:b2:1c:14:a5:08:05:11:53:b8:38:f3:08:f0:
                    4e:d3:5b:e1:24:9e:ae:8d:1b:0a:4e:29:05:57:ad:
                    d0:8f:99:ee:66:b4:8f:3c:a4:72:d4:99:fc:31:6d:
                    cc:05:44:eb:88:d8:4d:12:b9:bb:57:3b:3c:4e:fa:
                    e3:2d:6e:3f:f8:04:a5:69:dd:23:24:03:ee:8d:c4:
                    d2:ae:3e:19:18:d4:9c:ac:2f:ed:ed:97:9e:de:4d:
                    c4:bc:25:c7:52:ca:53:a6:dd:77:c3:e0:14:90:c6:
                    35:3f:bd:13:a8:38:c9:b6:e6:71:15:42:31:cf:b4:
                    1d:2d:30:b9:02:55:f2:33:0f:f6:5f:05:12:89:7b:
                    93:5b:bd:02:7e:74:52:19:9b:4c:81:63:7f:28:ab:
                    a9:ed:e7:a9:19:d4:df:21:4e:9e:b5:57:70:dd:46:
                    e2:fa:ba:c3:93:2d:2f:04:82:ec:0b:4d:3d:48:85:
                    d0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C8:5A:A0:9E:E1:CA:2F:12:F8:8F:B5:41:BA:BE:DD:64:2B:BE:B3
            X509v3 Authority Key Identifier:
                keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:06:c6:d9:1e:35:c2:ed:cb:b4:27:12:8a:b4:30:72:74:86:
         de:61:52:be:47:d6:73:05:24:06:7d:a6:41:b2:05:ca:7b:4f:
         08:ba:7b:9e:03:7a:71:db:3d:a1:08:69:2e:31:0e:e1:67:15:
         d6:f0:aa:c5:13:34:9c:25:07:88:28:cd:e3:26:33:ea:f9:fd:
         8e:c3:95:ce:4e:b0:c3:ae:62:38:49:70:ed:d2:26:28:94:1c:
         0c:80:35:38:c5:c4:b9:66:4e:f2:5d:9a:d7:8e:73:f1:8c:92:
         ea:bc:d0:72:44:39:a6:e7:98:47:f9:7b:88:b5:28:2f:b1:8b:
         9b:83:4e:27:01:8e:45:12:a5:9c:1e:fe:d8:d7:2e:42:8d:66:
         31:ab:a6:3b:24:68:ad:86:75:20:4c:69:c9:cf:71:7c:72:68:
         ce:d0:ff:28:2a:11:8b:c8:89:39:8c:67:d1:92:f0:d1:52:3d:
         34:28:d7:8f:90:42:ac:bf:34:c9:af:c9:7a:7d:57:73:d1:3a:
         a1:ae:eb:77:dd:8e:97:ca:24:78:e5:0c:24:cf:9c:0e:97:2b:
         65:52:d2:c9:71:bb:81:61:cc:9a:a7:52:e5:75:0b:c5:89:1c:
         36:81:7c:e4:02:61:d7:6f:c6:f9:42:ad:b6:8b:b3:70:71:91:
         84:78:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:58 2026 by rpki-client