Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File:                     ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier:          clu+Ezb47VUHOSnnBeanpms+K/p1WRsOK1GVxCzP6f4=
Subject key identifier:   34:60:01:EF:57:66:86:88:2A:01:FA:B4:75:A3:20:71:B0:F5:8E:06
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer:       /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial:       01A0F2D66241FE34A1842F260DD1F47D493E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number:          1367
Signing time:             Wed 30 Sep 2026 15:02:11 +0000
Manifest this update:     Wed 30 Sep 2026 15:02:11 +0000
Manifest next update:     Thu 01 Oct 2026 15:02:11 +0000
Files and hashes:         1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: pkS87lIfSJISJp59+H5hifvcMVau3ecp1ugUMaj0lA8=)
                          2: PtloqyiZbbnOWREO8NaRPMXJYjc.roa (hash: Uge7+7ajlI43nf85To0akQVcLl5k7mGSDfVfABa+GiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 15:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:d6:62:41:fe:34:a1:84:2f:26:0d:d1:f4:7d:49:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102282537eb00130b79651f408000edca56450ea
        Validity
            Not Before: Sep 30 15:02:11 2026 GMT
            Not After : Oct  1 15:02:11 2026 GMT
        Subject: CN=346001ef576686882a01fab475a32071b0f58e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:77:77:46:f0:4d:06:08:0e:ef:c3:20:74:
                    b7:e0:18:89:3d:3f:86:b9:c0:02:36:3b:03:70:eb:
                    aa:26:dc:21:05:f8:58:7d:b5:64:e1:27:83:35:0e:
                    66:83:23:ac:eb:b7:cf:b6:90:8c:87:e9:e2:81:4f:
                    c8:59:2f:54:64:8d:c3:97:d3:f9:0e:d4:50:5e:16:
                    99:65:d0:b8:c0:3e:e8:df:03:c9:7c:ad:b5:79:06:
                    5f:83:57:3d:ac:c3:48:dd:09:0d:aa:ab:b8:7d:4d:
                    b7:6b:c8:b0:48:52:38:6f:e9:f0:c3:74:4f:99:a7:
                    34:b5:80:06:b8:93:20:0b:7e:9e:38:ea:c6:11:36:
                    59:67:5c:28:13:7c:ea:55:8a:c2:97:26:90:db:c7:
                    6d:36:89:8d:4e:23:75:7d:a7:91:84:9c:e5:0d:b8:
                    37:21:da:f2:53:a1:21:da:62:f6:23:ac:56:f8:75:
                    a0:3f:35:48:54:d1:da:3f:4f:41:7b:eb:fe:e4:d7:
                    1c:18:2c:b5:68:7b:0a:44:1c:0c:16:79:0f:e3:9d:
                    d6:ac:11:81:8c:92:00:3c:20:72:20:5a:e6:82:6c:
                    99:e1:ce:8d:65:22:b9:63:44:49:f6:d0:a4:58:7a:
                    93:0b:d7:87:58:05:8f:c5:ea:0b:3c:52:1e:3f:f7:
                    55:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:60:01:EF:57:66:86:88:2A:01:FA:B4:75:A3:20:71:B0:F5:8E:06
            X509v3 Authority Key Identifier:
                keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:37:d9:d6:d6:80:4f:24:31:bd:70:c2:a8:27:27:4e:82:95:
         a3:96:ba:3a:f4:3d:6c:af:3e:84:ea:1f:ab:3a:52:d1:9f:bf:
         3f:da:22:8e:25:22:5c:0f:ea:7d:a4:a3:9a:74:18:6f:93:69:
         74:bc:37:5a:97:de:27:5c:b5:fb:b3:3f:82:62:04:72:28:a0:
         54:6c:86:a7:0c:1a:77:42:dc:11:2f:8b:cc:f3:f9:c8:a7:b7:
         bf:e8:1b:17:c3:04:fa:e7:9a:36:be:b6:00:34:4c:2d:98:90:
         8f:82:df:55:dd:10:a0:47:61:1b:48:70:19:89:6a:fe:e1:33:
         3e:aa:32:d5:61:03:ec:94:4b:f8:8d:b4:7a:79:dc:73:e7:e6:
         34:88:40:c4:bc:e1:b0:ab:2a:19:c2:f5:10:1d:8b:6a:58:0a:
         ef:47:f8:05:37:15:ee:6d:5e:d7:0a:c5:69:6a:19:7b:c4:f2:
         42:84:72:b2:db:0d:02:77:62:48:89:d4:28:fa:89:e3:bd:f7:
         23:d3:81:ed:0e:c6:52:2d:ac:89:f4:08:c7:ea:58:14:3c:42:
         07:d0:33:45:72:ab:51:b2:98:a7:8a:2a:17:11:4c:e5:d6:df:
         ae:af:2c:b8:ec:6a:89:0f:2c:3c:75:2f:1e:8d:fe:18:03:50:
         b3:28:ff:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 00:56:10 2026 by rpki-client