Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
File:                     ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft (raw, json)
Hash identifier:          qt8cv2LzlrhsHlGtM9G4/RP4IrGkO2aIVnJdEOvgqOM=
Subject key identifier:   40:25:3E:82:2E:FC:D4:42:5A:AD:65:A7:05:51:4A:B6:0C:8E:FB:D0
Authority key identifier: 10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
Certificate issuer:       /CN=102a93b92f5845be62a6241f23cfadb14cb16994
Certificate serial:       01A13F026CDDDF73BFA01CA93AA4CD3C99BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
Manifest number:          1AA7
Signing time:             Thu 15 Oct 2026 10:01:25 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:25 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:25 +0000
Files and hashes:         1: ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl (hash: IdOc4h55oNZEYItrzwTBMyIO+cuHP/uKLMtyoqtSgzE=)
                          2: s6W8XaPi6fAwOIAgY3aMpDeIa6g.roa (hash: Nlq5/Q8dZX4aJdFT62wfCPIirNtyzobB0dAY9K3L3No=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 10:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:6c:dd:df:73:bf:a0:1c:a9:3a:a4:cd:3c:99:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102a93b92f5845be62a6241f23cfadb14cb16994
        Validity
            Not Before: Oct 15 10:01:25 2026 GMT
            Not After : Oct 16 10:01:25 2026 GMT
        Subject: CN=40253e822efcd4425aad65a705514ab60c8efbd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:6a:34:3b:55:c7:1b:76:2a:ef:9a:2a:e4:
                    90:fc:bf:fb:90:5d:0a:fd:98:01:5d:31:ed:82:c0:
                    83:cc:22:6d:ea:a2:30:56:76:db:71:73:fd:9d:71:
                    d4:39:2e:9d:a8:d7:f1:54:b5:71:5d:aa:28:f0:5d:
                    e8:74:e8:d9:77:bb:b8:8a:b9:38:31:f6:d7:49:54:
                    cb:d7:05:4a:40:e4:1d:0b:f2:29:2e:57:61:5b:dd:
                    21:8e:7b:2f:0b:63:cf:b1:de:d3:69:7d:c4:ca:dd:
                    c1:f4:98:cb:59:ce:57:47:fa:b3:19:47:b7:44:7b:
                    2b:f1:10:de:28:98:3f:e1:bd:25:1e:41:ab:8e:f5:
                    e6:31:f2:dc:b2:d1:f8:52:b7:1e:a0:05:5d:80:cc:
                    51:82:54:23:6a:91:9e:b4:a3:2f:3a:81:6e:c5:dd:
                    ec:21:d2:04:20:cb:59:2d:7b:8d:05:25:51:21:67:
                    e7:5f:7e:a3:f0:cc:b6:0e:90:ed:84:05:ba:15:54:
                    d1:0a:dd:e6:21:1f:ae:fc:13:9b:7c:c2:01:56:ed:
                    a9:83:40:2a:ff:1d:c8:93:6b:05:12:67:99:68:ca:
                    3b:4f:7d:15:bb:87:d8:4c:32:1d:68:35:3b:9f:45:
                    1c:c7:d7:3e:7e:0f:1f:16:88:ad:13:68:a0:2c:d2:
                    d2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:25:3E:82:2E:FC:D4:42:5A:AD:65:A7:05:51:4A:B6:0C:8E:FB:D0
            X509v3 Authority Key Identifier:
                keyid:10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:db:f4:24:2c:90:a2:ec:95:02:db:c3:b6:4b:c7:68:52:81:
         45:b2:96:83:70:32:12:4f:9e:9d:74:28:73:55:f4:be:a3:43:
         14:0e:b0:99:65:22:16:a5:d1:84:af:cd:78:89:a0:ff:97:0a:
         0f:bb:7e:43:f6:28:f4:d4:0d:64:0c:13:8a:fe:6f:36:9b:a9:
         a0:77:45:da:ee:67:8d:f3:08:ae:21:f8:8a:3f:cb:6d:64:25:
         8b:00:ca:b0:c3:ed:dd:97:52:cf:c4:57:7b:85:c1:e4:26:e5:
         8b:f3:5e:7c:75:7a:fb:83:4a:e1:a5:e1:80:38:44:47:93:44:
         4f:44:fc:c7:92:11:eb:37:e8:a2:cd:15:84:e1:95:bd:b5:5d:
         36:14:4c:5d:85:94:ce:03:53:86:28:69:64:0b:8d:e6:3d:91:
         f5:72:3e:01:a8:ec:16:d2:be:21:37:72:14:55:09:66:7d:6d:
         21:69:62:cc:66:42:e7:06:b8:d0:11:7e:05:fd:32:de:f8:b3:
         d0:1a:72:67:fc:93:3a:8c:0e:2c:18:fb:0d:12:79:b7:ed:d2:
         bd:36:51:8b:68:31:29:a2:63:7c:f0:48:02:4b:21:56:68:c8:
         60:d2:25:74:a5:80:34:1b:2e:16:a9:b2:47:19:5c:02:ab:3d:
         78:25:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:53:26 2026 by rpki-client