Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File:                     EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier:          O1CDrjJiQ8X8qSuTtnsgMWkI9hG0ilWaWpUUBvb+QYg=
Subject key identifier:   17:25:13:A3:73:BF:F4:72:2B:64:B2:AF:23:30:F9:92:A3:C0:D3:75
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer:       /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial:       01976929BFE38DBBD82186A26C3E27B215B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number:          158D
Signing time:             Fri 13 Jun 2025 12:00:33 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:33 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:33 +0000
Files and hashes:         1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: u/McIcWG3EqXak2Po1w9/mAFtGmb6kUBFWWhutdfmjI=)
                          2: YKFTV_Osz3tEHBL-tBtNNKG_uGY.roa (hash: ofAuwRpYik4IXKEsnZ8uX3EkPuXFlEDgyGW2JXk71VA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:bf:e3:8d:bb:d8:21:86:a2:6c:3e:27:b2:15:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
        Validity
            Not Before: Jun 13 12:00:33 2025 GMT
            Not After : Jun 14 12:00:33 2025 GMT
        Subject: CN=172513a373bff4722b64b2af2330f992a3c0d375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:13:ee:bf:93:12:ee:65:a7:5d:ac:5b:ba:
                    10:1a:ec:4a:3a:a1:93:9d:5c:51:5f:3f:32:ba:b4:
                    ed:74:b7:17:cf:d4:bf:68:38:6d:df:6f:45:5c:a0:
                    6a:a9:21:ec:2b:36:41:c1:3f:01:c7:4b:db:e0:99:
                    f1:f1:e9:a9:df:b7:e1:d8:7a:34:09:95:ba:1d:45:
                    86:41:06:80:0e:dc:44:14:28:ca:e5:b0:41:41:65:
                    58:bf:af:85:c1:a6:f9:c3:c8:c5:f2:fb:68:40:c7:
                    b7:03:3f:80:cf:cf:92:f5:d2:b8:b3:74:03:3f:0e:
                    04:4b:bf:91:69:6b:d2:b7:a4:61:51:10:50:fa:57:
                    df:a8:78:51:e9:cb:4f:6c:1d:a2:6c:9f:73:11:22:
                    e5:c9:80:ee:a9:41:7a:f1:2f:9e:f5:4b:e3:d7:5f:
                    29:d4:eb:9c:37:07:e6:b8:0d:60:89:9c:41:21:f7:
                    84:51:ec:41:2b:a1:d9:8e:1e:52:c5:19:3c:80:dd:
                    39:10:2b:86:70:57:16:cc:d9:8b:16:a4:ee:39:2f:
                    40:12:c6:34:f5:2f:1d:5f:5a:7c:79:a5:9b:5d:73:
                    40:db:a0:65:34:bc:47:f4:22:44:0c:4c:c6:a2:6b:
                    c1:84:ae:5d:08:b5:a2:e7:21:b8:e4:ac:d0:53:91:
                    4f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:25:13:A3:73:BF:F4:72:2B:64:B2:AF:23:30:F9:92:A3:C0:D3:75
            X509v3 Authority Key Identifier:
                keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e5:1f:14:e8:cc:73:98:93:ee:b1:ea:c5:c1:3e:ec:ba:e4:
         94:d9:6c:5e:21:51:b3:e4:73:e4:04:22:c3:b1:27:6b:c2:fb:
         70:5b:0a:89:42:d2:22:b0:83:7a:8a:ec:ba:ad:50:93:43:99:
         ef:9e:e6:ab:46:55:78:4f:e5:76:67:bb:57:17:50:71:7b:44:
         d2:ad:35:02:39:b6:66:93:a2:54:cd:5a:44:6d:01:fb:f4:9b:
         63:a8:91:d4:27:23:ea:4e:21:43:a1:6b:fa:8d:13:2d:85:20:
         c3:67:8c:19:db:94:de:a8:79:01:1b:74:9a:1a:32:6b:35:7b:
         2e:cc:68:1e:bc:4e:4e:23:a2:5c:73:96:7e:ff:c5:00:91:12:
         95:ef:d8:bc:c2:46:77:fc:66:93:4e:cd:cc:2e:e7:0f:6d:81:
         60:07:00:e7:aa:09:b7:d6:9b:85:e2:08:97:f8:d8:a2:9b:59:
         fc:bd:a0:be:0e:77:ba:08:89:82:c3:99:90:93:24:b0:bb:43:
         e3:94:78:94:08:8f:b9:3d:7a:05:e8:23:20:92:ac:b4:c7:db:
         c3:8e:cf:1a:5b:94:34:28:61:b2:29:88:70:3d:e5:8c:59:29:
         30:9a:c5:76:7e:e9:01:36:aa:12:3e:1d:41:75:97:ea:fb:e0:
         dd:ce:f7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:14:59 2025 by rpki-client