Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File:                     EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier:          6nMTU/TffsI1HiJHfpwkNKBMVmKOQ7HeBppDdMTjqRs=
Subject key identifier:   44:A8:26:B5:47:AB:2F:BF:F0:3D:EE:88:C4:48:52:4D:4F:6A:32:44
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer:       /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial:       019D37895B5CC6D6B2FD4DFF97A2381FBD82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 03:00:41 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:41 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:41 +0000
Files and hashes:         1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: N5l/xH6nRBSnJjM64rQfd8jYaRFP+y25cmu0nZmiLwE=)
                          2: IkrlVjIBIVx5J9vbaylHLa_tgfM.roa (hash: V3uMqSa5WshlPBOs9YrJkuRAc1fggP1aMeBrmefuIRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:5b:5c:c6:d6:b2:fd:4d:ff:97:a2:38:1f:bd:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
        Validity
            Not Before: Mar 29 03:00:41 2026 GMT
            Not After : Mar 30 03:00:41 2026 GMT
        Subject: CN=44a826b547ab2fbff03dee88c448524d4f6a3244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:ec:6a:1c:d4:5f:ff:6c:67:1f:c1:52:6a:
                    db:5e:01:02:17:93:bb:1a:11:6a:a4:c1:61:6d:e9:
                    75:e8:1f:e9:88:03:d7:9b:1d:69:47:73:f9:2e:ca:
                    41:53:f0:1d:e4:e6:83:96:80:ae:2b:fd:06:98:f4:
                    0a:d3:a3:5d:fc:97:d7:fd:70:c5:28:91:91:31:7c:
                    9f:e9:51:bb:d3:3b:fd:a3:ce:6d:0e:20:50:8c:d2:
                    d3:4c:2a:17:a2:2a:f5:eb:22:56:bc:41:6d:13:15:
                    24:a1:5c:17:48:7e:b1:47:39:a7:01:d6:8f:8b:c8:
                    a2:53:c0:81:d5:be:72:62:05:d8:94:df:bc:5b:d2:
                    8a:1e:60:ed:95:6d:65:dd:ef:cb:eb:48:6f:5e:5e:
                    74:5e:84:1e:76:e6:fe:d1:aa:3d:7f:fa:36:2c:0e:
                    24:30:b9:95:f6:d0:b9:14:dd:0d:11:e1:a1:ed:58:
                    21:b8:de:cf:50:c9:38:47:76:bf:62:e3:97:ab:80:
                    41:ff:d5:9c:f3:8e:bd:fe:23:f3:6f:4c:1b:43:8c:
                    dd:ac:eb:e0:e5:00:39:49:b6:3c:81:7a:fc:df:ea:
                    7f:d0:d5:de:c9:1f:bd:e6:b3:b7:8a:c9:58:f9:f3:
                    26:08:cc:c2:70:43:0c:46:48:cc:56:15:45:a6:de:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A8:26:B5:47:AB:2F:BF:F0:3D:EE:88:C4:48:52:4D:4F:6A:32:44
            X509v3 Authority Key Identifier:
                keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ea:37:1b:59:ba:cc:84:2f:98:21:60:92:2d:00:d2:96:01:
         1c:41:f7:46:a3:35:a2:ce:8f:eb:70:7d:98:3e:39:61:26:65:
         ee:36:a1:d5:1f:4a:d6:b8:1f:bb:95:88:b4:3c:96:31:01:bc:
         0d:37:88:21:06:d4:f4:d2:c9:cd:73:11:fc:35:f6:29:00:0e:
         bd:12:08:99:bb:aa:ac:40:81:e3:32:a6:9a:82:49:d9:f7:49:
         1b:a6:49:85:fa:a5:6c:bf:31:ba:75:30:68:dc:47:7a:44:f6:
         4e:8b:87:f5:8b:b3:05:e1:35:29:9f:4c:b7:67:7b:2e:5e:bc:
         b5:f0:f1:2c:93:43:58:97:00:45:cf:f7:bb:8b:f5:94:4e:43:
         8a:19:61:5d:b8:b3:fc:c8:a8:3c:0e:d7:15:89:39:48:e6:24:
         18:63:96:d1:cb:bf:5d:6b:de:1d:e6:0f:6e:f5:f2:c9:42:4f:
         09:bd:0b:29:f5:47:19:4d:0c:0d:d8:0d:57:ec:7e:ba:d8:37:
         5c:29:c8:92:b2:38:e0:5f:bf:87:11:17:15:4c:d5:44:ee:b9:
         2a:2a:f8:3f:8f:bc:d0:fb:0d:46:78:3b:97:75:17:bb:44:75:
         5d:85:f3:1a:9f:82:ec:7c:83:35:1a:32:98:6e:c9:dd:46:39:
         36:72:43:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iVtcxtay/U3/l6I4H72CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZDcyNzE4ZDE1NWFjMGU3ZDMyN2Y2Mzg0YTJlNGM5NTQx
NmQ3NjAwHhcNMjYwMzI5MDMwMDQxWhcNMjYwMzMwMDMwMDQxWjAzMTEwLwYDVQQD
Eyg0NGE4MjZiNTQ3YWIyZmJmZjAzZGVlODhjNDQ4NTI0ZDRmNmEzMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPnsahzUX/9sZx/BUmrbXgECF5O7
GhFqpMFhbel16B/piAPXmx1pR3P5LspBU/Ad5OaDloCuK/0GmPQK06Nd/JfX/XDF
KJGRMXyf6VG70zv9o85tDiBQjNLTTCoXoir16yJWvEFtExUkoVwXSH6xRzmnAdaP
i8iiU8CB1b5yYgXYlN+8W9KKHmDtlW1l3e/L60hvXl50XoQedub+0ao9f/o2LA4k
MLmV9tC5FN0NEeGh7VghuN7PUMk4R3a/YuOXq4BB/9Wc8469/iPzb0wbQ4zdrOvg
5QA5SbY8gXr83+p/0NXeyR+95rO3islY+fMmCMzCcEMMRkjMVhVFpt7F0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESoJrVHqy+/8D3uiMRIUk1PajJEMB8GA1UdIwQY
MBaAFBLXJxjRVawOfTJ/Y4Si5MlUFtdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXRjbkdORlZyQTU5TW45amhLTGt5VlFXMTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NGY1YjItYzdlMi00YTdlLWI2YzQt
NTg3NjVmMTkzZmVjLzEvRXRjbkdORlZyQTU5TW45amhLTGt5VlFXMTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS83NGY1YjItYzdlMi00YTdlLWI2YzQtNTg3NjVmMTkzZmVj
LzEvRXRjbkdORlZyQTU5TW45amhLTGt5VlFXMTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuo3G1m6
zIQvmCFgki0A0pYBHEH3RqM1os6P63B9mD45YSZl7jah1R9K1rgfu5WItDyWMQG8
DTeIIQbU9NLJzXMR/DX2KQAOvRIImbuqrECB4zKmmoJJ2fdJG6ZJhfqlbL8xunUw
aNxHekT2TouH9YuzBeE1KZ9Mt2d7Ll68tfDxLJNDWJcARc/3u4v1lE5DihlhXbiz
/MioPA7XFYk5SOYkGGOW0cu/XWveHeYPbvXyyUJPCb0LKfVHGU0MDdgNV+x+utg3
XCnIkrI44F+/hxEXFUzVRO65Kir4P4+80PsNRng7l3UXu0R1XYXzGp+C7HyDNRoy
mG7J3UY5NnJDcQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:50 2026 by rpki-client