Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File:                     ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier:          TO2qVQq6+KyWuQoqIx3Gg19fYPgXochjdpdbkUNlXLw=
Subject key identifier:   1E:EB:95:89:C9:5A:4C:34:C4:E5:2E:D9:93:D3:CB:C7:1C:60:EF:EC
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer:       /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial:       019E3185861AF466459D01FD46CD59888A01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number:          189F
Signing time:             Sat 16 May 2026 16:01:34 +0000
Manifest this update:     Sat 16 May 2026 16:01:34 +0000
Manifest next update:     Sun 17 May 2026 16:01:34 +0000
Files and hashes:         1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: Wq5bT/uiQwMp5SgztW0yxIw/tUMIUPO9gUPi8PNBdIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:86:1a:f4:66:45:9d:01:fd:46:cd:59:88:8a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
        Validity
            Not Before: May 16 16:01:34 2026 GMT
            Not After : May 17 16:01:34 2026 GMT
        Subject: CN=1eeb9589c95a4c34c4e52ed993d3cbc71c60efec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:0c:65:c2:c2:1f:cf:6a:68:54:74:36:52:
                    c1:38:9e:22:bb:82:ea:a5:1e:cd:66:41:af:dc:80:
                    c3:4d:4b:83:27:26:43:cb:33:f9:e1:13:58:7b:c0:
                    93:67:4c:cc:c3:01:bc:7e:18:ce:bc:56:21:82:d5:
                    6c:c1:92:f0:55:99:14:5f:ac:27:82:7a:66:4b:f4:
                    06:0e:0e:44:ed:e3:5e:d2:8d:5b:4b:82:31:c4:ef:
                    44:d2:65:55:82:2f:d6:0f:0d:8a:dc:54:cb:7e:f0:
                    13:9b:5e:89:bc:67:b8:09:40:e1:c8:2e:c4:a5:29:
                    54:8c:87:ac:1b:1e:a7:b2:b4:67:fc:16:20:3b:d0:
                    5d:bc:6a:c3:b4:b0:dd:a3:20:18:41:c0:97:29:2b:
                    b1:70:b6:e1:11:d0:ff:2e:08:0e:f4:55:da:37:25:
                    e2:89:13:b0:08:4a:bb:1d:49:97:ad:06:02:f8:18:
                    57:66:f6:32:13:6a:57:56:c6:1f:6c:7a:a4:5c:66:
                    2e:b3:1b:c1:2f:07:69:6b:a9:84:ef:68:c6:cc:83:
                    14:7e:a0:b5:7b:79:14:67:28:e2:8e:f5:6f:35:ab:
                    ed:d3:7b:af:ad:c9:16:d7:9f:b7:1c:ec:6a:a9:13:
                    b6:f2:1c:cc:56:1f:06:4e:16:ca:3f:2e:92:d3:bf:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EB:95:89:C9:5A:4C:34:C4:E5:2E:D9:93:D3:CB:C7:1C:60:EF:EC
            X509v3 Authority Key Identifier:
                keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:20:5b:0d:d7:a4:29:73:5b:62:5e:fd:81:99:33:30:24:8f:
         1f:d0:be:af:a2:6d:c4:42:94:c3:f8:b4:68:45:60:37:5e:16:
         9a:c6:b5:b4:66:e2:7b:8f:00:b5:a4:51:2b:d7:7c:e9:60:3f:
         06:12:8c:a4:27:70:6c:ea:47:9f:e2:71:42:55:35:02:3c:5a:
         98:c9:c9:d3:01:66:a1:b9:65:29:38:89:ea:bc:e3:d8:94:6d:
         8d:23:0a:94:85:4c:9f:d8:04:ef:54:72:9a:d4:3c:17:94:dc:
         94:0a:4b:51:f8:b5:2d:3b:d5:03:58:c5:22:7a:94:a2:91:8c:
         4d:8b:fa:61:e1:d3:76:02:2b:ec:a4:1e:79:ca:47:2e:a4:65:
         e8:f9:06:07:7e:2e:db:b3:9d:f1:e5:3c:06:d4:93:0a:fa:54:
         80:73:15:c4:3b:88:ee:0d:28:c7:3c:1b:a0:01:52:a9:8d:68:
         1e:91:0a:ce:22:4e:98:02:3b:d7:87:b4:8a:25:8a:67:62:29:
         d6:24:c9:69:15:7d:d6:12:33:08:04:d8:05:10:25:d5:df:da:
         d0:8d:0f:59:c1:d1:93:5e:14:49:c1:a7:98:e1:b4:77:a4:81:
         8a:25:3b:d7:dd:cf:7b:f1:c8:1d:c7:d8:d4:88:52:61:2d:98:
         10:84:e8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:33 2026 by rpki-client