Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File:                     EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier:          FvFjdDWlEmg/++aJ/9qWc9c55HlwKyyFl4umsQQWMbQ=
Subject key identifier:   53:FE:40:E9:5B:29:AD:FD:AE:04:82:54:4B:5C:AB:7B:1D:66:2D:64
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer:       /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial:       019A1CBE0ECD7B990186AD3E606CD4CEB2A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number:          16F3
Signing time:             Sat 25 Oct 2025 19:00:08 +0000
Manifest this update:     Sat 25 Oct 2025 19:00:08 +0000
Manifest next update:     Sun 26 Oct 2025 19:00:08 +0000
Files and hashes:         1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: Vv1dS4itVxTrbzkhgoeUUKX6lKtAMzNoe2/0P4wIPd0=)
                          2: YKFTV_Osz3tEHBL-tBtNNKG_uGY.roa (hash: ofAuwRpYik4IXKEsnZ8uX3EkPuXFlEDgyGW2JXk71VA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1c:be:0e:cd:7b:99:01:86:ad:3e:60:6c:d4:ce:b2:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
        Validity
            Not Before: Oct 25 19:00:08 2025 GMT
            Not After : Oct 26 19:00:08 2025 GMT
        Subject: CN=53fe40e95b29adfdae0482544b5cab7b1d662d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:61:bb:cd:22:cf:d0:50:80:04:ca:26:a6:
                    6c:59:ba:2a:67:f3:3f:d6:6a:43:3c:c6:ff:b5:bd:
                    89:3d:29:47:c2:f6:f4:fb:d8:75:75:58:32:92:1e:
                    5f:b1:a8:3e:5d:63:ed:b2:a5:5f:b4:4e:5a:3f:64:
                    6d:a7:8f:4d:8b:91:9c:79:86:a5:ba:04:38:61:be:
                    04:52:27:2e:4d:50:17:4d:27:f4:b7:fc:17:4e:2c:
                    15:f8:fe:51:99:4a:2e:27:53:fd:96:14:0c:03:59:
                    da:e6:c9:38:7a:fd:70:17:04:79:d5:7d:1d:59:1a:
                    10:11:61:1a:60:c8:97:6c:be:be:98:e4:c3:c8:bb:
                    c2:cd:04:f3:98:11:c7:57:65:da:93:1a:ae:9b:4b:
                    38:dc:ef:70:b8:17:11:1a:7e:80:4c:49:05:52:08:
                    eb:35:3b:45:ae:a1:65:bb:c4:3f:33:9a:53:0c:11:
                    4b:b9:df:d2:a1:7a:cb:a9:f1:b2:21:9e:c3:96:af:
                    bd:5d:63:af:74:e6:c9:1c:31:90:24:dc:1d:06:32:
                    53:f3:93:98:f5:ff:a1:be:52:aa:02:a4:93:6b:f5:
                    af:04:3c:d2:09:f6:48:e4:06:47:84:b6:4a:c1:88:
                    e5:d2:ad:01:0c:15:69:fd:e3:ef:25:a5:1b:96:57:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FE:40:E9:5B:29:AD:FD:AE:04:82:54:4B:5C:AB:7B:1D:66:2D:64
            X509v3 Authority Key Identifier:
                keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d0:2f:f4:7c:ed:39:a2:9b:5d:3a:79:cc:34:5d:9b:6e:b9:
         07:ee:26:7b:60:43:44:d5:46:44:0c:30:63:0f:18:dd:17:ef:
         c5:93:c2:c1:b0:4c:50:89:71:ad:03:ae:02:40:dc:1b:27:67:
         e8:d4:d3:89:50:62:a4:f9:e6:63:55:39:e8:8d:1b:7a:2b:17:
         b5:bc:1d:45:6a:1b:f1:ad:0f:f9:2e:0d:24:b0:15:26:7b:d6:
         08:59:a3:58:a4:f2:c4:35:c2:c3:f2:26:e1:a9:7a:17:ce:df:
         22:24:c2:37:a9:e3:cd:ae:e3:2e:cb:2f:4b:69:19:f2:35:b4:
         58:01:7f:ce:17:4d:cc:3c:aa:b1:94:d3:35:4d:b5:6d:94:78:
         7c:26:17:c4:0e:6b:4b:9b:7f:ae:5d:45:c1:f4:25:7c:b7:f8:
         92:6a:8c:bd:65:8c:1f:c9:66:d1:ec:13:4b:c9:62:74:74:d3:
         f5:84:90:43:82:99:e5:d3:cd:53:05:1b:e7:75:29:3c:37:ef:
         c4:f8:db:19:b6:a6:be:31:d1:3f:3b:10:3b:58:b3:db:7a:80:
         e0:6d:4f:c1:a4:05:c3:f1:10:00:5b:c4:e5:80:4b:17:62:48:
         eb:2b:a7:8d:d6:56:ca:00:b9:20:32:5d:34:28:82:5e:ef:91:
         d9:46:34:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:55:28 2025 by rpki-client