Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File:                     ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier:          uwqXCb4qS4acbMTtLvU7YE0An3lKAOWk0JL4PWL0mXw=
Subject key identifier:   86:96:EA:83:17:DC:E0:1D:03:9D:EA:D9:2C:52:9C:67:8C:01:E8:0C
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer:       /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial:       019917649BD588DF1715A2B0FAC58F139409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number:          166A
Signing time:             Fri 05 Sep 2025 01:01:33 +0000
Manifest this update:     Fri 05 Sep 2025 01:01:33 +0000
Manifest next update:     Sat 06 Sep 2025 01:01:33 +0000
Files and hashes:         1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: DFC260f3SR1d2j/txcSgvMK48HQydC1QnUVOTjfooTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:64:9b:d5:88:df:17:15:a2:b0:fa:c5:8f:13:94:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
        Validity
            Not Before: Sep  5 01:01:33 2025 GMT
            Not After : Sep  6 01:01:33 2025 GMT
        Subject: CN=8696ea8317dce01d039dead92c529c678c01e80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:94:e2:76:51:8a:ef:32:5f:aa:cc:d5:59:
                    c0:a2:f7:a6:65:c2:68:50:c8:e9:1b:c0:a7:36:e7:
                    04:48:7b:e3:5e:01:87:2b:55:06:cd:ff:5f:c1:ed:
                    fe:ed:ba:bb:0f:09:8b:07:a5:fa:d3:75:2d:b7:15:
                    3b:db:85:f8:bc:a9:a2:69:21:65:81:a8:09:ad:11:
                    62:72:6e:92:8b:ea:db:bb:23:da:a0:7a:a5:39:80:
                    8b:0e:d0:05:84:b3:e6:37:71:f8:4e:a4:a8:d4:37:
                    0c:9a:b0:7c:60:07:bb:d7:6c:61:46:0e:c3:59:f3:
                    0b:f4:e5:b8:3b:6e:8b:72:ad:c1:19:84:eb:d9:43:
                    7a:39:b8:17:8a:e6:ca:88:a2:0c:e2:0e:76:e8:34:
                    f0:12:28:1c:1a:f5:86:04:1c:b0:8a:c9:03:15:02:
                    a6:5c:65:8d:a4:61:d2:3e:b1:c1:54:fd:ec:23:11:
                    1c:f4:7d:a8:c7:34:63:ac:69:81:83:b0:99:13:71:
                    d3:7c:3c:d9:12:9c:e0:53:b6:17:b3:f2:ed:fe:d9:
                    b2:f8:7b:4a:f2:d0:f5:63:35:f6:b2:aa:84:ba:67:
                    d4:46:ff:b1:8d:35:39:fd:ea:f5:d3:34:c4:ab:6b:
                    47:3e:3e:18:36:9f:42:f4:b0:75:b3:73:44:81:59:
                    26:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:96:EA:83:17:DC:E0:1D:03:9D:EA:D9:2C:52:9C:67:8C:01:E8:0C
            X509v3 Authority Key Identifier:
                keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8f:3c:fe:4d:1c:17:1e:7f:70:6a:5b:58:d4:e8:f2:e3:e7:
         04:bf:e7:f8:7e:d1:c3:bc:48:d3:29:ef:50:ae:3d:ea:52:f6:
         f4:c2:f4:78:4e:05:d9:d6:6a:39:a1:44:89:2b:5c:74:02:da:
         24:67:7f:3b:33:0f:61:d4:78:6b:39:fc:a7:fa:47:92:c8:d3:
         64:32:67:0e:48:8b:69:92:2a:dd:f3:ae:b1:94:54:79:f1:5e:
         f9:56:01:1b:fc:96:c5:c8:f8:52:ed:c4:b8:b1:6e:92:d4:f4:
         42:ed:43:4e:5a:2a:da:20:7c:02:f1:e8:64:2d:e3:82:dd:e1:
         91:fd:2e:d3:a1:1c:00:24:c0:a5:40:a1:78:a3:d8:bc:a5:06:
         60:07:f9:32:bc:c3:ae:62:e4:0f:17:23:6b:52:ff:5a:4b:df:
         02:12:c2:81:c2:6e:fd:07:90:81:a1:07:ce:19:83:6a:ff:40:
         2c:00:6c:de:48:76:fb:d7:7d:4c:35:47:04:24:43:d7:35:6d:
         d7:8b:79:d5:b6:fa:60:e2:a8:8c:cf:2a:bb:fe:cc:71:91:b7:
         f0:33:66:08:9b:3e:6c:22:cd:03:85:bd:f7:37:f8:4e:a4:1c:
         c9:a0:f1:51:f4:70:03:e5:96:0c:d3:23:39:48:0b:3c:33:7b:
         26:e2:3d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:35:58 2025 by rpki-client