Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File:                     ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier:          mLVeGdSGpAxVJzNE5D1uBVGpzMAM0H+3MDYst8XIH6U=
Subject key identifier:   12:33:81:66:17:BA:11:CE:E5:1F:9E:60:F0:7B:EB:30:F0:04:3B:70
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer:       /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial:       019EBE7FE155BC3E27EB36A8DF1F42BC966A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number:          18E8
Signing time:             Sat 13 Jun 2026 01:01:52 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:52 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:52 +0000
Files and hashes:         1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: yOPxvlSRbeGcqrL6608hfSJ8j7HngbqeMhqpSKsehuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:e1:55:bc:3e:27:eb:36:a8:df:1f:42:bc:96:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
        Validity
            Not Before: Jun 13 01:01:52 2026 GMT
            Not After : Jun 14 01:01:52 2026 GMT
        Subject: CN=1233816617ba11cee51f9e60f07beb30f0043b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:71:34:8d:76:d6:fe:8a:cc:e7:f8:8d:32:
                    7e:b6:63:62:2e:6f:5d:b6:e3:00:e8:dc:df:cb:86:
                    5a:bd:1f:0f:c0:e4:01:a9:ac:22:01:91:50:65:10:
                    41:32:76:bc:38:05:9f:55:ee:c4:1c:b0:32:eb:16:
                    5e:d8:6e:31:0c:fc:49:ea:a5:75:4f:26:17:7c:ad:
                    a0:bb:d8:28:7e:30:72:58:3c:7a:93:7e:48:f8:d7:
                    61:9a:78:bc:30:8c:2e:9b:5d:fe:63:0a:54:3b:17:
                    ed:1d:8a:7f:1b:79:38:d7:7e:05:85:14:ce:b3:f1:
                    f6:0c:17:65:98:1f:14:ad:90:43:50:4c:d3:57:a4:
                    8f:04:5f:c0:88:40:d1:24:3a:e4:c8:d5:e9:3e:93:
                    30:b4:f9:2f:27:20:27:78:35:c3:33:f0:fe:e9:c8:
                    7f:5e:3c:53:b8:8e:de:1e:5b:62:ab:4d:4b:8a:dd:
                    c9:5f:17:97:51:49:f6:7e:4e:90:8f:a2:a4:bc:92:
                    ab:6d:33:85:40:1e:57:a2:b1:87:d7:b9:16:2b:e9:
                    c8:f3:90:bb:37:c3:ac:97:ad:88:97:6b:94:9d:39:
                    ed:4f:c6:fc:01:37:e2:76:2a:1c:08:14:33:10:28:
                    57:42:59:c5:00:81:f7:c6:5c:d5:3a:ec:88:6a:ab:
                    38:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:33:81:66:17:BA:11:CE:E5:1F:9E:60:F0:7B:EB:30:F0:04:3B:70
            X509v3 Authority Key Identifier:
                keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:0c:b3:a1:aa:3a:64:4d:62:fa:e5:85:59:f8:90:c0:f6:6d:
         0c:b5:3d:55:de:18:a4:20:11:f8:ab:6f:4d:53:e0:69:7e:05:
         8e:4f:b7:09:48:35:f7:b3:50:f3:f2:ea:16:46:ed:99:e3:64:
         b5:82:46:f9:18:2c:35:a5:e9:5f:89:30:70:43:61:50:d4:b8:
         49:ba:c6:ed:44:5d:89:91:8a:0f:22:5b:94:b6:00:1e:48:0f:
         f9:a4:38:9f:cf:76:4a:09:b3:06:c9:3e:ca:1f:6f:f5:e6:07:
         90:14:0a:6d:3a:99:16:bc:af:89:b1:ce:c5:cc:0b:56:42:ee:
         a7:e5:0e:c2:5f:9e:b9:6d:a0:1e:cb:9b:75:a1:a7:66:7a:f2:
         a3:8b:f2:39:c9:9b:6b:7d:8a:93:46:44:f0:73:d7:48:06:94:
         ac:3c:b0:08:58:f3:ad:b9:ff:49:48:8a:c9:31:b1:d2:7a:ae:
         fc:0b:d5:53:49:88:1d:6f:ee:fb:e5:0a:eb:0b:ff:f5:79:8b:
         df:68:3d:3e:b4:f3:66:ca:c0:26:ea:ec:27:6d:f8:6b:15:f1:
         05:95:d2:e6:c8:a3:18:d2:eb:b2:5f:0f:61:c3:e5:b9:d1:bd:
         9f:be:3e:04:bc:20:08:36:39:95:3b:9d:e0:85:a0:4e:2d:f5:
         41:5e:fe:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:01 2026 by rpki-client