Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File:                     ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier:          1EaqRkSkiQ0VBSXLBW+nouOxItrogYWKi+hgLNJgrpY=
Subject key identifier:   73:E7:E9:B7:50:0F:79:3F:56:76:AD:DD:F6:91:54:D8:75:A3:E4:91
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer:       /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial:       019FFD5BA0CA8473347DF86A34505997C8D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number:          19FE
Signing time:             Thu 13 Aug 2026 23:01:08 +0000
Manifest this update:     Thu 13 Aug 2026 23:01:08 +0000
Manifest next update:     Fri 14 Aug 2026 23:01:08 +0000
Files and hashes:         1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: YVpVfHteO9cFYDyOT7B+hKrFW5TbITncq3em9qavrEc=)
                          2: viS2S0SzjAgJ_iBbCgPzp3yhg0U.roa (hash: s3YkexgQHQKpIdGn3lF6fcpbtFZIjdVlLhgi0JVjWGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 23:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fd:5b:a0:ca:84:73:34:7d:f8:6a:34:50:59:97:c8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
        Validity
            Not Before: Aug 13 23:01:08 2026 GMT
            Not After : Aug 14 23:01:08 2026 GMT
        Subject: CN=73e7e9b7500f793f5676adddf69154d875a3e491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:71:2d:45:94:be:15:39:35:8b:54:d2:85:
                    a0:76:7f:ec:21:0d:57:d9:f9:17:87:f6:70:17:49:
                    0a:1d:66:d1:72:36:08:24:df:4f:34:da:18:e2:d5:
                    2f:5c:2a:c9:f7:f8:6b:b7:10:a6:01:15:48:bb:87:
                    8f:21:d4:7a:ff:60:f9:d0:5c:38:41:7b:fc:e3:09:
                    b9:c5:8e:0b:28:52:45:35:2d:0e:5a:2d:92:3c:d9:
                    76:6d:12:fa:a6:12:e4:79:4a:ce:b8:3d:60:08:8d:
                    53:b5:fa:0e:e1:a1:89:b3:81:1a:0c:40:e9:e1:bc:
                    30:04:0d:4a:71:2f:7c:1f:8c:12:99:1e:d4:14:a9:
                    31:ea:79:46:4d:fe:fe:2a:45:b2:84:74:0f:23:ef:
                    bf:2f:7c:b5:2b:0b:94:eb:40:76:19:72:99:57:aa:
                    10:0e:3b:4b:78:40:2c:8b:99:9a:3f:4c:d6:7a:27:
                    6b:02:34:80:4b:c8:9c:be:c2:45:b1:3c:9e:fc:6f:
                    77:9a:8a:bf:d0:14:f0:74:3c:c1:43:83:fa:b4:46:
                    5b:37:a7:b9:61:61:3b:03:e3:80:33:d5:2f:15:cd:
                    2c:c0:3f:d3:4d:26:35:cf:54:e9:72:25:aa:fd:08:
                    e9:73:1f:07:69:bb:b2:34:85:6e:f0:c0:61:c3:29:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E7:E9:B7:50:0F:79:3F:56:76:AD:DD:F6:91:54:D8:75:A3:E4:91
            X509v3 Authority Key Identifier:
                keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:da:58:de:98:c4:22:24:a5:a4:1c:d2:12:20:29:33:72:02:
         1e:1f:00:5a:d1:d7:77:ee:66:0f:bb:d6:31:c5:f2:2b:92:dd:
         be:5f:8d:4b:00:c2:1c:07:00:af:a0:64:57:c8:ee:b0:9a:84:
         c9:d6:71:00:f3:47:d1:eb:c7:c7:81:59:38:5c:1f:95:39:da:
         f4:58:cb:fd:87:01:ea:7a:78:31:d7:7b:66:fa:08:e8:e2:af:
         8d:23:01:fc:23:3d:ff:67:4d:f3:bf:1f:5d:86:82:3f:41:5e:
         42:7c:10:20:9f:a4:d0:11:b9:10:79:93:66:8c:08:cb:ac:fe:
         ae:dc:dc:dc:91:9b:73:08:03:84:05:a8:68:e1:e9:20:2a:91:
         75:1c:19:12:1b:04:b0:6b:e6:a5:eb:0a:d6:bd:01:10:f3:f5:
         96:58:d0:a1:8b:0e:62:53:89:a6:fa:ff:d3:c7:4d:7d:ed:a3:
         ce:53:74:39:25:4c:d4:26:4f:22:c7:d3:21:7f:35:19:01:fc:
         21:bf:2e:d0:bf:65:37:ca:cb:b4:ae:5e:09:8d:11:dc:44:f7:
         63:fa:07:8c:db:7b:1f:1d:11:1a:6a:dc:54:52:3b:19:62:01:
         1c:d1:39:c7:b2:d3:a0:42:b3:22:56:b0:51:5b:88:4f:9d:5f:
         b0:f1:ff:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:17:04 2026 by rpki-client