Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
File:                     ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft (raw, json)
Hash identifier:          QAhj5xepeTQ2FEbgz3UEb3jdJieMsgCeGLvhbQ9yscE=
Subject key identifier:   A5:D1:F7:5A:AE:5A:1F:E8:50:43:A6:43:69:77:40:35:01:4B:4E:E2
Authority key identifier: 10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
Certificate issuer:       /CN=102a93b92f5845be62a6241f23cfadb14cb16994
Certificate serial:       01A0005C517A7F0F17DA27DB6D20A095C439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 13:00:45 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:45 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:45 +0000
Files and hashes:         1: ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl (hash: pTpfZWh3TcfT84O7R7htSqRTer1WADmWxBcqgMYkYOs=)
                          2: s6W8XaPi6fAwOIAgY3aMpDeIa6g.roa (hash: Nlq5/Q8dZX4aJdFT62wfCPIirNtyzobB0dAY9K3L3No=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:51:7a:7f:0f:17:da:27:db:6d:20:a0:95:c4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102a93b92f5845be62a6241f23cfadb14cb16994
        Validity
            Not Before: Aug 14 13:00:45 2026 GMT
            Not After : Aug 15 13:00:45 2026 GMT
        Subject: CN=a5d1f75aae5a1fe85043a64369774035014b4ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7b:a4:d9:ef:33:d2:05:39:fa:be:87:45:3e:
                    92:86:17:4f:7e:ac:79:ca:11:72:8e:02:d1:91:0e:
                    5f:d9:ca:eb:2c:da:96:50:72:31:11:3e:ca:56:e9:
                    ca:b4:4d:7b:4f:c4:38:ba:81:aa:ee:10:38:5f:63:
                    2e:5c:5d:de:07:7c:b5:82:a8:37:78:00:93:1d:2b:
                    d0:ea:7e:61:8e:67:14:4e:64:eb:5f:67:08:d6:2c:
                    57:ed:ae:45:ea:06:3e:80:a3:a6:50:3b:33:06:e6:
                    ee:34:2c:8a:88:19:ac:20:c7:18:35:23:90:53:82:
                    33:13:bb:9d:1c:ab:38:da:a6:42:07:10:a9:ad:72:
                    18:ea:d7:07:e1:e3:05:e9:b5:67:dd:22:85:40:ff:
                    66:ac:89:81:31:75:6b:f0:0a:6a:f6:81:ef:9a:61:
                    5b:a6:3f:44:be:80:ac:db:1a:f8:fb:c3:ca:6e:26:
                    89:01:3b:fe:3a:1e:1b:87:0f:08:65:52:d3:77:2a:
                    fb:c6:94:66:8e:60:06:ed:29:6e:fb:39:a6:49:88:
                    ce:12:bc:fd:e7:79:b7:16:1e:b5:e9:65:78:b5:ac:
                    ec:5e:af:b1:24:8c:68:01:61:3e:84:af:6c:aa:8e:
                    6a:5a:3c:c2:ad:ef:94:95:32:68:f3:56:0a:71:80:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D1:F7:5A:AE:5A:1F:E8:50:43:A6:43:69:77:40:35:01:4B:4E:E2
            X509v3 Authority Key Identifier:
                keyid:10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c6:ce:c3:73:7e:46:0d:de:51:3c:e9:99:15:c7:32:80:0a:
         02:98:7b:10:18:fa:d6:0c:71:81:c3:a7:47:0b:f6:b0:7c:8b:
         5a:7d:48:1f:c8:1e:52:26:55:c8:02:e0:9e:83:ad:1e:e7:c2:
         14:24:25:54:ff:85:26:99:bc:0c:c9:3c:26:c2:8b:b1:ec:9e:
         03:b7:1c:09:40:6e:09:b1:e2:85:cc:88:d3:77:4f:f0:e5:14:
         da:10:65:53:b6:28:ec:a8:29:de:ea:41:1a:bd:1c:06:f4:69:
         94:93:69:fa:5c:d3:f7:0f:3a:1b:4b:5b:4c:29:76:f0:ff:e9:
         49:7e:9e:da:c2:86:c9:fa:dd:18:46:2c:e2:42:3b:97:8b:d1:
         49:01:ec:98:08:32:f5:96:1a:07:3e:e7:7a:3a:e1:a5:c5:59:
         c2:5a:df:3f:91:ae:46:b1:4a:54:49:89:90:22:ce:2e:de:d0:
         b2:3e:35:f7:95:e9:e2:2d:9d:8b:8c:7c:e1:86:b9:5f:ab:07:
         ad:35:6c:95:29:c7:24:dc:17:ee:87:bc:62:02:2b:a8:37:18:
         90:02:70:e9:88:cd:18:a7:b9:3c:f8:96:de:d6:31:96:5e:38:
         7d:9b:c5:12:01:f8:ef:07:40:b7:95:59:8b:86:5c:0e:e8:e4:
         bb:64:81:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:01 2026 by rpki-client