Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
File:                     ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json)
Hash identifier:          74BJ8fWmuIzOMDG0hrfMMeYqvQgHImCmbbijSQjRbbs=
Subject key identifier:   DC:40:E1:05:84:EC:D3:06:E1:AE:79:A9:19:CD:98:0C:34:23:39:9A
Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB
Certificate issuer:       /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
Certificate serial:       01A00101AE45D8BE4D20A4196DAA3A1CAFF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 16:01:22 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:22 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:22 +0000
Files and hashes:         1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: 6LT89IzDAdGlMlpnl+b4+amFAa61eFHQD4DlwxXBdcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:ae:45:d8:be:4d:20:a4:19:6d:aa:3a:1c:af:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb
        Validity
            Not Before: Aug 14 16:01:22 2026 GMT
            Not After : Aug 15 16:01:22 2026 GMT
        Subject: CN=dc40e10584ecd306e1ae79a919cd980c3423399a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:61:f0:09:67:97:f2:e1:70:11:3e:61:4d:
                    50:d6:41:73:97:08:b0:d5:5d:14:55:5d:54:53:f9:
                    36:e1:a5:60:6b:db:e5:0f:c0:47:7e:4b:33:93:9b:
                    a7:d1:6f:4a:06:0d:26:8a:2d:e4:2f:96:95:4b:1b:
                    9a:72:85:61:a1:42:06:42:95:a8:ce:7d:02:7d:41:
                    3f:05:67:65:11:4e:8c:9e:6b:39:03:0f:c0:c8:81:
                    ee:3b:59:e7:fd:93:b0:09:55:40:6b:83:55:dc:8d:
                    e7:27:7c:1b:83:09:bd:4f:fe:27:ee:2d:9b:cf:58:
                    04:e4:d9:5f:65:bf:2a:ee:f6:5f:5f:33:74:72:df:
                    fe:ee:8b:5f:90:46:58:14:61:01:5c:9e:f2:79:9a:
                    51:06:bc:ad:47:c7:8b:c9:d3:c0:64:b4:58:59:ae:
                    2a:bf:1a:83:97:61:ef:4e:80:97:68:85:75:96:01:
                    83:f1:a5:47:d6:04:b3:2a:01:d8:a8:f8:94:14:39:
                    52:c5:5f:74:e8:1a:ad:47:b9:05:c8:f9:cf:6d:6f:
                    94:63:a8:35:d1:92:4b:76:cd:03:56:29:da:35:0e:
                    e4:26:90:5d:bb:3c:ad:61:01:0d:e1:3f:67:f6:bb:
                    38:c0:b7:bf:62:79:11:06:26:06:de:a6:b0:3f:c7:
                    ff:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:40:E1:05:84:EC:D3:06:E1:AE:79:A9:19:CD:98:0C:34:23:39:9A
            X509v3 Authority Key Identifier:
                keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d0:68:89:eb:f4:3f:54:58:1d:1e:c7:34:09:05:c3:56:48:
         25:da:b0:4e:c3:e3:96:46:ce:71:b5:0c:7e:e2:36:c5:63:95:
         95:79:f8:3b:26:ca:bc:a6:34:45:4c:29:11:e8:03:a6:6d:06:
         27:c1:9c:bb:97:24:4d:9e:80:92:1f:43:35:c8:70:a3:8c:c7:
         1e:fa:15:57:0f:52:43:2f:9b:26:bc:0c:92:8e:b7:31:90:f6:
         b6:4b:b5:21:72:02:6d:5c:ca:b4:88:e2:90:cf:14:70:0b:28:
         94:79:08:47:f1:94:ca:cd:54:78:7b:46:8a:d1:08:f1:b2:12:
         35:52:e4:8a:c3:98:84:46:1c:ea:9f:68:22:30:65:69:cd:9b:
         0b:1c:e3:d6:5f:be:83:4d:89:cb:fe:78:92:99:72:76:8e:c6:
         fd:f7:55:5e:3b:78:e4:08:e8:54:d6:8d:1a:75:b6:91:fd:ac:
         ab:e6:4e:da:b9:26:2a:f0:9c:58:43:24:59:ab:bd:e8:64:ad:
         23:68:73:0c:b5:f7:7a:2a:dc:bc:d5:d9:4c:4a:da:7f:90:c0:
         88:5b:99:31:8a:d0:92:f7:fd:15:71:9d:93:95:56:a9:73:9a:
         93:43:40:22:05:c0:68:6a:c4:4a:cf:4c:1e:c2:3e:df:90:50:
         be:86:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:58 2026 by rpki-client