Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File:                     ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier:          5APvVdUGX6WZ3QMy665un5x4Xdv40OVyXbrw7aYznbc=
Subject key identifier:   34:1C:C7:82:2E:B8:18:A0:1D:F1:9B:03:76:8A:2B:58:99:06:53:5B
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer:       /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial:       019D39AF31CA9D4AABCB1110F30AF256B26C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 13:01:16 +0000
Manifest this update:     Sun 29 Mar 2026 13:01:16 +0000
Manifest next update:     Mon 30 Mar 2026 13:01:16 +0000
Files and hashes:         1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: 3ouB14/iX3X+Indw7nlc4RXyd/ntblyJsjeuT1vLSoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:af:31:ca:9d:4a:ab:cb:11:10:f3:0a:f2:56:b2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
        Validity
            Not Before: Mar 29 13:01:16 2026 GMT
            Not After : Mar 30 13:01:16 2026 GMT
        Subject: CN=341cc7822eb818a01df19b03768a2b589906535b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:88:3a:e8:12:44:7c:1c:bc:90:54:61:62:
                    f7:e7:71:14:9e:aa:83:a1:5d:9f:6f:c3:6e:89:2f:
                    5f:79:2e:a5:ee:7d:db:ee:e2:98:08:98:17:6f:fc:
                    51:83:87:19:55:0c:0e:1f:04:57:84:2b:6b:9c:9c:
                    1b:43:d6:4f:66:74:fc:de:7a:7d:02:95:60:9f:e9:
                    f6:fe:ee:c3:e9:7f:21:f1:f3:57:11:91:f9:ca:b0:
                    7a:b0:0c:68:28:bb:89:a6:db:4d:e0:09:94:1c:7a:
                    39:6b:90:df:c0:1f:54:17:94:fe:5c:06:32:83:66:
                    28:de:71:9a:66:9b:0e:22:74:e8:7e:81:4f:61:4e:
                    f5:77:2d:fb:5d:95:08:f0:13:93:40:83:a9:84:43:
                    6e:1f:99:b5:0a:04:5b:cb:37:ce:6b:ca:e1:d4:97:
                    39:6f:04:ae:48:9c:97:6f:37:36:45:10:90:03:b4:
                    d3:fb:a6:71:12:cc:2c:2e:fc:10:5b:ee:f9:f3:79:
                    51:03:16:ed:10:65:4f:16:18:5b:97:84:55:31:65:
                    dc:ec:85:92:17:01:ab:20:d3:41:df:6a:58:2a:4e:
                    58:1c:b8:ac:b0:82:e9:fc:f9:80:17:5c:a5:f2:83:
                    21:ea:f1:91:59:f0:01:e2:0f:34:30:d5:56:35:84:
                    bc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1C:C7:82:2E:B8:18:A0:1D:F1:9B:03:76:8A:2B:58:99:06:53:5B
            X509v3 Authority Key Identifier:
                keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:28:0f:06:93:2c:f9:77:80:84:f7:33:0e:56:bd:80:50:6c:
         82:e9:ad:ac:58:fb:55:47:93:81:13:da:d7:f5:a5:a4:8c:2c:
         83:44:1c:27:ba:91:26:11:c2:4d:21:ac:21:1e:e5:4f:c0:e4:
         9d:21:e9:87:5f:04:55:b3:b5:e1:d0:42:58:08:58:f0:04:00:
         69:14:11:53:07:9c:31:51:b1:36:7a:98:bf:2a:a8:a1:02:40:
         5a:d7:c4:af:4d:96:fc:1c:12:d8:25:a4:c5:58:2f:1f:80:4e:
         f8:fd:65:ef:01:33:30:cb:cf:a5:e7:3b:bb:55:e7:60:ed:0f:
         8f:ee:7e:5d:67:34:e6:25:6f:d6:38:78:80:0c:cb:fb:78:db:
         63:8b:b3:c7:67:e5:b0:34:0f:36:2a:9c:a1:04:46:e3:06:11:
         52:01:f0:d7:9c:45:b6:f3:70:17:7b:66:08:93:d3:7f:a6:03:
         f8:2a:4f:30:6a:7a:44:78:5a:c7:ac:84:4f:c6:59:a9:a4:88:
         ac:52:1e:53:6f:35:5e:8a:17:59:b0:a2:ce:8c:d1:b4:8a:bb:
         17:5d:9c:e5:9b:87:83:25:04:8b:2f:ed:48:e2:23:01:8b:86:
         83:9b:38:6e:aa:94:19:9e:98:8a:e4:f4:3a:3c:5d:a9:50:29:
         08:31:7c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:55 2026 by rpki-client