Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
File:                     ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json)
Hash identifier:          +AuSfOCFNuIOJG8J45Tr0vChVG/hXcK4c4MRTN5uPow=
Subject key identifier:   4D:65:A6:A6:87:03:39:08:C9:2F:F6:BE:99:92:2E:89:CD:35:08:6F
Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
Certificate issuer:       /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Certificate serial:       019E2F9680F69E448F9B412D1C3658E00C67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
Manifest number:          190D
Signing time:             Sat 16 May 2026 07:00:52 +0000
Manifest this update:     Sat 16 May 2026 07:00:52 +0000
Manifest next update:     Sun 17 May 2026 07:00:52 +0000
Files and hashes:         1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: hKzDUEb1XaSpgUyn5k8WLHEFQeWWfs2j+LpNH4EV6D8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:80:f6:9e:44:8f:9b:41:2d:1c:36:58:e0:0c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
        Validity
            Not Before: May 16 07:00:52 2026 GMT
            Not After : May 17 07:00:52 2026 GMT
        Subject: CN=4d65a6a687033908c92ff6be99922e89cd35086f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:61:42:3c:1b:1f:cd:68:46:aa:6a:a6:f4:3b:
                    0b:08:b4:de:24:38:b4:72:2d:8b:37:9c:f7:2c:be:
                    f1:d0:e3:a4:e7:d6:a9:af:5f:69:19:71:bd:89:69:
                    e8:49:74:bd:78:cd:f9:68:e6:72:3b:0d:cb:08:a3:
                    c8:50:a3:24:a6:ca:be:7d:6d:41:7d:50:68:da:eb:
                    40:3e:08:c1:43:65:42:94:bb:d0:2e:da:b3:1c:9b:
                    94:6f:ad:c0:9f:4b:51:5e:63:00:80:ea:ee:80:d4:
                    a6:19:23:c4:e7:07:d1:68:b6:7e:95:c8:9c:d0:ab:
                    be:58:db:97:69:12:83:af:3c:4a:36:05:5b:8b:ad:
                    36:52:77:d0:5c:71:a4:59:ac:9f:5a:1d:1a:b0:30:
                    09:9f:9c:78:13:0b:eb:4c:f6:cc:2f:84:af:2b:3b:
                    65:59:26:95:f6:d3:18:47:67:94:78:ba:6f:46:6c:
                    c1:3b:75:d9:7d:49:bf:c2:cd:3f:75:10:46:c8:5b:
                    3d:8b:cc:50:b9:02:5a:63:d9:14:4a:f6:a0:d8:84:
                    e1:fc:f6:ea:21:60:4c:4a:90:6a:2d:bb:64:c9:bb:
                    03:cf:74:2b:96:ad:b1:1e:45:96:ba:2a:6f:a2:9b:
                    b2:1c:fe:bf:93:cc:f7:4c:9a:ac:97:13:f9:06:b3:
                    c0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:65:A6:A6:87:03:39:08:C9:2F:F6:BE:99:92:2E:89:CD:35:08:6F
            X509v3 Authority Key Identifier:
                keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:10:08:24:b6:2c:6a:2c:c3:3a:5c:7a:7c:0d:54:45:c1:5b:
         92:7e:e6:36:b6:5f:3c:1a:a0:9e:a4:9e:d0:57:d9:75:11:47:
         06:fa:40:5a:51:eb:48:0d:35:64:18:c5:6c:ad:0b:bc:eb:a5:
         44:c6:b8:3c:5c:69:84:0f:3e:02:81:b1:cc:82:a7:9f:a3:91:
         3f:bf:3c:83:06:61:2b:3e:3b:1d:f2:2e:df:df:ef:88:4a:72:
         7c:6b:bb:4e:0c:85:aa:de:ac:eb:07:24:99:0b:ab:2b:35:f2:
         0b:7f:2d:38:9c:ff:f1:cb:06:fb:e1:66:df:7d:e6:56:ac:54:
         1d:80:87:e3:0b:fb:1e:fc:c0:00:d9:4b:ea:11:02:1e:ec:a2:
         95:ed:35:c5:c7:d3:21:9e:f3:d7:31:4a:14:8f:61:58:f3:9e:
         4e:05:c6:ec:6e:a0:a5:11:1c:b0:87:ac:98:f4:b0:18:56:81:
         cc:f0:b4:cc:76:9b:6b:3b:99:bd:0a:7a:5b:f8:d9:1e:7b:c2:
         d2:ce:cf:b2:ef:f6:29:89:fc:2f:21:7f:f1:af:fe:db:d8:a5:
         79:b6:d5:c3:46:2c:52:5c:d7:99:20:27:fb:80:65:ef:fa:92:
         08:57:fb:ad:db:fe:6e:62:8e:38:29:b5:f0:f4:e5:fc:f1:89:
         d4:df:a2:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vloD2nkSPm0EtHDZY4AxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzcxMDlmZTlhMGRiZjVkYjg5MDc1MTQ2ZjI1ZjAyYjQ4
NThiY2IwHhcNMjYwNTE2MDcwMDUyWhcNMjYwNTE3MDcwMDUyWjAzMTEwLwYDVQQD
Eyg0ZDY1YTZhNjg3MDMzOTA4YzkyZmY2YmU5OTkyMmU4OWNkMzUwODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WFCPBsfzWhGqmqm9DsLCLTeJDi0
ci2LN5z3LL7x0OOk59apr19pGXG9iWnoSXS9eM35aOZyOw3LCKPIUKMkpsq+fW1B
fVBo2utAPgjBQ2VClLvQLtqzHJuUb63An0tRXmMAgOrugNSmGSPE5wfRaLZ+lcic
0Ku+WNuXaRKDrzxKNgVbi602UnfQXHGkWayfWh0asDAJn5x4EwvrTPbML4SvKztl
WSaV9tMYR2eUeLpvRmzBO3XZfUm/ws0/dRBGyFs9i8xQuQJaY9kUSvag2ITh/Pbq
IWBMSpBqLbtkybsDz3Qrlq2xHkWWuipvopuyHP6/k8z3TJqslxP5BrPABQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1lpqaHAzkIyS/2vpmSLonNNQhvMB8GA1UdIwQY
MBaAFBE3EJ/poNv124kHUUbyXwK0hYvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hNDA4YmEtNDc4Zi00NmQ4LTk5YmQt
Nzc5NTBmZDRmNjUzLzEvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hNDA4YmEtNDc4Zi00NmQ4LTk5YmQtNzc5NTBmZDRmNjUz
LzEvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRAIJLYs
aizDOlx6fA1URcFbkn7mNrZfPBqgnqSe0FfZdRFHBvpAWlHrSA01ZBjFbK0LvOul
RMa4PFxphA8+AoGxzIKnn6ORP788gwZhKz47HfIu39/viEpyfGu7TgyFqt6s6wck
mQurKzXyC38tOJz/8csG++Fm333mVqxUHYCH4wv7HvzAANlL6hECHuyile01xcfT
IZ7z1zFKFI9hWPOeTgXG7G6gpREcsIesmPSwGFaBzPC0zHabazuZvQp6W/jZHnvC
0s7Psu/2KYn8LyF/8a/+29ilebbVw0YsUlzXmSAn+4Bl7/qSCFf7rdv+bmKOOCm1
8PTl/PGJ1N+izQ==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:59 2026 by rpki-client