Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File:                     ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier:          Ur07iO03PhhLaHmQ3kDZ5SLUexSj75T+TgWTDLoo++4=
Subject key identifier:   37:83:9D:C6:C2:14:A2:B2:12:F2:9D:BC:CB:54:53:01:75:42:F0:36
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer:       /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial:       019E2A0236CC32F3E790F6EB23BF8D7D6566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number:          190C
Signing time:             Fri 15 May 2026 05:00:48 +0000
Manifest this update:     Fri 15 May 2026 05:00:48 +0000
Manifest next update:     Sat 16 May 2026 05:00:48 +0000
Files and hashes:         1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: PPhu4YtNbRuPARGD6g6sRYOTVCy/0YRXjoC9Ts1XGi8=)
                          2: viS2S0SzjAgJ_iBbCgPzp3yhg0U.roa (hash: s3YkexgQHQKpIdGn3lF6fcpbtFZIjdVlLhgi0JVjWGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:36:cc:32:f3:e7:90:f6:eb:23:bf:8d:7d:65:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
        Validity
            Not Before: May 15 05:00:48 2026 GMT
            Not After : May 16 05:00:48 2026 GMT
        Subject: CN=37839dc6c214a2b212f29dbccb5453017542f036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6b:ac:6c:0b:3a:4d:79:0c:52:9b:08:b0:2d:
                    8c:62:9c:60:27:00:fa:76:a8:11:54:ee:7b:b7:d4:
                    c7:6e:77:af:03:29:c9:ed:be:a4:bb:cf:88:49:81:
                    a3:86:8c:67:50:92:b5:38:b5:e6:4a:a3:76:5a:9b:
                    27:24:47:ac:d9:b2:ea:82:09:d7:95:cc:eb:2a:b8:
                    50:be:05:df:6e:b5:c1:c0:05:e4:f6:16:9d:70:9e:
                    c0:c1:57:e1:27:22:ff:55:dc:57:6d:e4:60:b5:0c:
                    3e:e9:23:05:53:6b:a3:ba:ab:98:cd:64:f3:75:af:
                    89:a3:fd:33:a8:2f:92:2a:c4:10:58:b4:05:09:b8:
                    a7:81:0b:70:a3:6c:f9:ea:91:f6:79:a7:13:58:b4:
                    6e:e2:50:11:ba:1b:7c:56:d0:94:79:86:3a:6b:02:
                    2f:af:0d:6e:79:2d:74:14:fc:92:8f:96:f9:c1:b6:
                    16:e9:c7:6a:1a:9e:c2:5f:d9:e9:5a:f0:bd:e1:27:
                    1c:4c:b7:2d:b8:fe:98:2d:71:b7:f2:ed:da:04:b9:
                    e9:34:8a:5a:5c:b8:15:2b:7d:51:db:63:4d:88:d2:
                    c9:4e:54:43:bf:e3:75:37:4f:88:9c:05:88:ee:fe:
                    e6:bc:59:e2:03:c7:9f:3a:d1:54:cb:56:51:86:aa:
                    03:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:83:9D:C6:C2:14:A2:B2:12:F2:9D:BC:CB:54:53:01:75:42:F0:36
            X509v3 Authority Key Identifier:
                keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a6:50:53:3e:ee:15:60:cc:f0:87:98:ce:97:e4:6d:ca:ec:
         e1:eb:95:1c:0f:28:29:f9:e8:bf:4c:3b:05:33:db:47:a4:ed:
         2a:f3:bd:54:63:b7:82:a0:bc:c3:ed:66:a6:53:22:d7:76:3a:
         d7:e8:4a:df:a6:c8:62:d7:01:12:32:0a:36:ee:dd:e0:ca:f7:
         46:03:9c:0e:91:e2:1a:48:21:ce:81:4b:bd:34:eb:d3:ec:10:
         55:01:14:4d:d5:20:af:ec:04:b4:44:ef:d7:8e:f7:4f:8b:26:
         6a:30:ad:9a:a2:fa:39:ac:72:1c:db:a1:77:d6:6d:ec:5a:af:
         38:05:23:6f:ec:d3:db:a9:59:2c:65:46:51:d2:f5:c4:50:fe:
         20:04:cb:fe:a7:3c:58:dc:09:b1:fc:fa:ad:b1:5b:0d:61:bc:
         f9:67:f0:66:13:32:3b:62:41:f6:81:10:53:ee:30:fd:c9:d7:
         5c:05:ea:d1:8b:81:55:64:da:27:4d:e0:e7:20:a3:3d:e9:1d:
         32:11:10:9e:3c:9a:72:f4:42:b1:2c:86:98:25:87:96:8c:c6:
         ee:a7:81:64:40:9e:2b:ef:e9:6f:08:a6:47:33:64:d5:7a:82:
         d1:6e:46:86:65:00:fc:19:42:b6:f2:5f:fc:a9:6f:61:65:01:
         3e:ac:0d:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qAjbMMvPnkPbrI7+NfWVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzdjMjM0NTNiODhlYmE0NTVjNDIwOGM2ZGY1YjNlMWJi
YzI0NWYwHhcNMjYwNTE1MDUwMDQ4WhcNMjYwNTE2MDUwMDQ4WjAzMTEwLwYDVQQD
EygzNzgzOWRjNmMyMTRhMmIyMTJmMjlkYmNjYjU0NTMwMTc1NDJmMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7musbAs6TXkMUpsIsC2MYpxgJwD6
dqgRVO57t9THbnevAynJ7b6ku8+ISYGjhoxnUJK1OLXmSqN2WpsnJEes2bLqggnX
lczrKrhQvgXfbrXBwAXk9hadcJ7AwVfhJyL/VdxXbeRgtQw+6SMFU2ujuquYzWTz
da+Jo/0zqC+SKsQQWLQFCbingQtwo2z56pH2eacTWLRu4lARuht8VtCUeYY6awIv
rw1ueS10FPySj5b5wbYW6cdqGp7CX9npWvC94SccTLctuP6YLXG38u3aBLnpNIpa
XLgVK31R22NNiNLJTlRDv+N1N0+InAWI7v7mvFniA8efOtFUy1ZRhqoDAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeDncbCFKKyEvKdvMtUUwF1QvA2MB8GA1UdIwQY
MBaAFBE3wjRTuI66RVxCCMbfWz4bvCRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDct
NWVmZGE0NjhhMjAwLzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDctNWVmZGE0NjhhMjAw
LzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKZQUz7u
FWDM8IeYzpfkbcrs4euVHA8oKfnov0w7BTPbR6TtKvO9VGO3gqC8w+1mplMi13Y6
1+hK36bIYtcBEjIKNu7d4Mr3RgOcDpHiGkghzoFLvTTr0+wQVQEUTdUgr+wEtETv
1473T4smajCtmqL6OaxyHNuhd9Zt7FqvOAUjb+zT26lZLGVGUdL1xFD+IATL/qc8
WNwJsfz6rbFbDWG8+WfwZhMyO2JB9oEQU+4w/cnXXAXq0YuBVWTaJ03g5yCjPekd
MhEQnjyacvRCsSyGmCWHlozG7qeBZECeK+/pbwimRzNk1XqC0W5GhmUA/BlCtvJf
/KlvYWUBPqwNHQ==
-----END CERTIFICATE-----
Generated at Fri May 15 14:56:12 2026 by rpki-client