Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
File:                     ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft (raw, json)
Hash identifier:          22kAglkBzrrQNCgyg+X2rAikkNMyndDSBBbq/CMBo0I=
Subject key identifier:   7F:DC:A9:F4:AA:C2:1D:71:8C:FF:F4:56:E5:13:EA:6D:81:BB:B1:63
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Certificate issuer:       /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial:       019D37522375663F8C671CEA52BE1E862DDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 02:00:22 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:22 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:22 +0000
Files and hashes:         1: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl (hash: nZWhAwISZ3UA1myTnxj7Ukr/u5OQTjZMQI1mH1QGozE=)
                          2: e1jQd52gcA6yXLGjiuknB8JEOwo.roa (hash: XJANgx0hjgIGKYki1Gh7IwsZwbbuxC+ryDXFWZXhAuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:23:75:66:3f:8c:67:1c:ea:52:be:1e:86:2d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
        Validity
            Not Before: Mar 29 02:00:22 2026 GMT
            Not After : Mar 30 02:00:22 2026 GMT
        Subject: CN=7fdca9f4aac21d718cfff456e513ea6d81bbb163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:84:3a:eb:83:d0:ad:76:ec:73:99:ed:9a:
                    9c:26:73:8c:0a:50:e6:c9:0a:0c:d5:a0:0f:11:c0:
                    0e:75:85:e6:2c:27:6d:ab:b4:ad:cd:7c:01:55:49:
                    b8:1b:30:30:f1:85:0b:75:67:c5:7b:aa:41:28:76:
                    0d:02:3d:47:31:06:0b:a5:6c:51:8c:c0:fc:11:2b:
                    d4:2d:44:08:3d:8c:78:fc:d8:34:68:30:2c:6a:83:
                    23:b4:8c:5e:42:b3:f3:0d:45:41:2b:c7:c7:87:9d:
                    c3:c4:37:24:4f:b1:59:5d:3f:fc:08:c3:79:34:f6:
                    2d:5a:64:44:ab:70:51:90:d1:18:97:c7:7d:b7:6d:
                    87:49:a9:d4:f6:f6:a4:31:9a:5a:10:60:29:5d:9b:
                    cb:34:c7:64:13:2e:a7:5e:8a:de:9e:ba:b1:0b:07:
                    8a:bd:72:b0:10:56:23:58:d7:2f:ba:4a:55:94:98:
                    6a:9d:d7:ef:83:da:94:b9:8e:a5:7d:dd:30:f8:43:
                    13:78:f9:2a:d1:31:d2:45:2b:33:4a:f4:85:90:4d:
                    a5:43:af:4c:b6:b9:1b:e1:7b:1f:1a:d0:8a:7e:d6:
                    43:1c:2d:07:2d:80:1e:e0:40:27:58:b8:ad:50:94:
                    53:cb:7e:44:1d:22:68:33:35:fc:3a:8d:93:19:91:
                    77:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DC:A9:F4:AA:C2:1D:71:8C:FF:F4:56:E5:13:EA:6D:81:BB:B1:63
            X509v3 Authority Key Identifier:
                keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ba:d9:b2:76:56:ae:ac:5b:5e:be:5d:7e:05:60:57:50:93:
         72:c9:c3:fd:2e:8d:f1:9b:02:80:74:3c:82:d5:67:2e:84:d4:
         c9:ce:c2:18:4b:93:30:ff:c6:4b:03:df:76:34:82:43:fa:a2:
         e9:ac:c3:49:be:26:d7:95:23:59:fb:34:3f:2c:15:6c:e4:1f:
         c8:4c:7c:18:60:90:f5:7a:7b:5b:3f:d0:8c:c8:cf:30:43:c0:
         30:7d:7d:bf:c0:d2:38:04:e1:81:cf:db:17:3c:ad:e2:d4:5f:
         02:81:e7:ed:20:59:24:7a:ba:86:e3:87:df:15:e3:4b:09:7e:
         d3:7a:e8:82:78:cd:a5:2f:ce:64:5f:f7:89:ff:e7:68:45:0d:
         24:4b:90:a8:32:0f:89:5c:7d:20:38:27:a2:29:83:72:45:bb:
         97:ef:93:d9:7a:a6:cb:f2:e8:16:8a:ad:d2:d0:87:5f:5c:14:
         a7:df:be:21:69:5c:0c:94:1c:ea:2c:83:f0:30:85:88:00:45:
         41:94:f7:e4:56:02:64:89:05:29:b7:6e:61:ba:d0:12:6e:2c:
         2e:c0:90:84:dc:b9:cd:ce:6e:06:6b:66:bb:31:b0:59:dd:ff:
         dc:f9:24:2a:a7:2b:27:61:83:69:61:44:6c:e8:8b:c4:72:13:
         88:32:64:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UiN1Zj+MZxzqUr4ehi3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzBhMWQ1ZTVjMDkwMWQxOWI0YjcwN2E3M2QxN2NhZTBl
M2I2NjAwHhcNMjYwMzI5MDIwMDIyWhcNMjYwMzMwMDIwMDIyWjAzMTEwLwYDVQQD
Eyg3ZmRjYTlmNGFhYzIxZDcxOGNmZmY0NTZlNTEzZWE2ZDgxYmJiMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhGEOuuD0K127HOZ7ZqcJnOMClDm
yQoM1aAPEcAOdYXmLCdtq7StzXwBVUm4GzAw8YULdWfFe6pBKHYNAj1HMQYLpWxR
jMD8ESvULUQIPYx4/Ng0aDAsaoMjtIxeQrPzDUVBK8fHh53DxDckT7FZXT/8CMN5
NPYtWmREq3BRkNEYl8d9t22HSanU9vakMZpaEGApXZvLNMdkEy6nXorenrqxCweK
vXKwEFYjWNcvukpVlJhqndfvg9qUuY6lfd0w+EMTePkq0THSRSszSvSFkE2lQ69M
trkb4XsfGtCKftZDHC0HLYAe4EAnWLitUJRTy35EHSJoMzX8Oo2TGZF3KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/cqfSqwh1xjP/0VuUT6m2Bu7FjMB8GA1UdIwQY
MBaAFBEwodXlwJAdGbS3B6c9F8rg47ZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQt
NmQ0MTliNzE3ZDBhLzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQtNmQ0MTliNzE3ZDBh
LzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrrZsnZW
rqxbXr5dfgVgV1CTcsnD/S6N8ZsCgHQ8gtVnLoTUyc7CGEuTMP/GSwPfdjSCQ/qi
6azDSb4m15UjWfs0PywVbOQfyEx8GGCQ9Xp7Wz/QjMjPMEPAMH19v8DSOAThgc/b
Fzyt4tRfAoHn7SBZJHq6huOH3xXjSwl+03rognjNpS/OZF/3if/naEUNJEuQqDIP
iVx9IDgnoimDckW7l++T2Xqmy/LoFoqt0tCHX1wUp9++IWlcDJQc6iyD8DCFiABF
QZT35FYCZIkFKbduYbrQEm4sLsCQhNy5zc5uBmtmuzGwWd3/3PkkKqcrJ2GDaWFE
bOiLxHITiDJk/g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:30 2026 by rpki-client