Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File:                     ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier:          q4PQUt5XpVWJoXzHzc4hxEUZanNb7OYN0omZX7KXvDg=
Subject key identifier:   68:3F:E2:D5:38:2B:8A:0B:15:46:30:AF:BA:A0:56:70:50:68:B3:5C
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer:       /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial:       019E30E036E370B8D33DF85FBC3AA93F2860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 13:01:00 +0000
Manifest this update:     Sat 16 May 2026 13:01:00 +0000
Manifest next update:     Sun 17 May 2026 13:01:00 +0000
Files and hashes:         1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: YH9o8Xd7dub5592KmGo/TfUEbUxp0GvutP5iUQeRWA0=)
                          2: xsEnDawvPXYI2VnFl4zPihnkWfI.roa (hash: qLtfJleuaWr1jmrBhok828aDs2YNmVu1KdpozzYVLGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:36:e3:70:b8:d3:3d:f8:5f:bc:3a:a9:3f:28:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
        Validity
            Not Before: May 16 13:01:00 2026 GMT
            Not After : May 17 13:01:00 2026 GMT
        Subject: CN=683fe2d5382b8a0b154630afbaa056705068b35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:29:70:e1:f2:05:fd:3d:93:08:c4:e6:a4:df:
                    c0:90:a2:e3:21:e5:11:27:c8:3f:72:3c:c4:b5:01:
                    c0:97:d4:3d:86:1d:d6:2d:e9:c7:4e:58:d2:16:fd:
                    64:6a:04:9c:6a:b9:66:fe:2f:4e:7e:c3:0d:47:78:
                    96:80:d6:96:cc:b6:24:95:32:0c:9a:6a:e0:67:11:
                    2d:82:33:5f:16:80:52:77:70:d6:dd:0a:95:49:f4:
                    fd:0b:c7:7e:1f:b1:0e:2b:9a:69:d5:7d:05:db:81:
                    f5:db:6d:cd:e9:0e:18:57:20:88:9e:1e:b0:1d:96:
                    c2:6d:2a:99:63:85:97:e1:46:db:17:dc:9b:15:cd:
                    82:81:32:01:bc:95:57:0a:87:5b:61:f4:46:af:bd:
                    18:7c:1f:73:99:10:36:48:c6:fe:ae:9c:7b:4e:17:
                    db:d0:59:42:2f:1b:25:66:16:bb:60:e5:f8:72:0e:
                    b7:53:c7:fa:48:b4:a1:b2:ce:95:d7:eb:cc:d5:7f:
                    57:0f:ff:e9:19:1b:82:56:bc:c9:9b:d2:b7:b1:31:
                    4e:8b:a3:17:19:cf:39:82:e8:4e:60:d8:87:cc:d4:
                    48:c2:08:92:6b:6d:0f:99:15:2a:32:e3:75:9a:d9:
                    67:15:b3:64:36:ef:a1:d4:28:d6:c2:40:81:49:96:
                    15:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3F:E2:D5:38:2B:8A:0B:15:46:30:AF:BA:A0:56:70:50:68:B3:5C
            X509v3 Authority Key Identifier:
                keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:7e:35:ee:ba:2b:09:a9:1d:59:30:c7:48:c5:4f:8c:dd:c5:
         17:6e:c6:3f:13:b2:33:26:38:e4:9b:3b:97:d2:b7:4a:bc:46:
         7a:5a:0b:69:36:7f:ee:b8:9c:19:35:ae:8a:5e:19:eb:e8:00:
         12:61:3c:10:b4:be:32:12:6b:cc:d2:fa:b9:6c:0c:31:c9:33:
         9a:27:08:c6:da:75:3a:ba:09:92:61:be:75:f1:9f:2e:79:71:
         1d:d7:47:95:61:ff:2c:5e:1f:26:79:c1:08:99:63:68:ff:89:
         09:cf:0e:d5:b1:4f:57:96:c4:79:6d:03:8b:1f:cc:50:44:08:
         ec:82:bf:90:f4:b8:fe:88:84:81:4a:0b:ff:90:a2:49:a0:a9:
         aa:87:14:a2:e8:51:aa:44:42:aa:88:7d:31:3b:db:53:00:95:
         49:cc:3d:4a:84:08:a6:96:20:25:aa:42:ee:0b:9d:ed:dc:27:
         af:f6:aa:68:32:6f:60:38:03:e6:5a:2c:ba:82:9a:1c:1e:a3:
         b7:bc:8c:65:94:c2:27:df:0d:1e:76:2b:2f:3b:44:43:48:52:
         cf:50:bd:b6:46:83:e2:47:22:40:2a:b8:a1:d4:47:06:ad:f0:
         19:d1:e9:ca:be:90:51:0a:99:61:96:ac:51:61:26:f5:31:ac:
         65:58:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:09 2026 by rpki-client