Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File:                     ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier:          85socTCC176OA1ofjjyWATPCyrYeR2RA6i1pP2YAiio=
Subject key identifier:   6A:F7:AB:A6:C1:60:0E:36:9D:0A:88:4A:3B:A5:0D:DC:A9:40:B9:F1
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer:       /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial:       019D9C2C4F7D09707003CC6B5A5747D35EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 16:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 16:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 16:00:42 +0000
Files and hashes:         1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: 29WT8PYP6raxAPgHRlSUYdAEv65anDYkkVVmU/gUgRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:4f:7d:09:70:70:03:cc:6b:5a:57:47:d3:5e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
        Validity
            Not Before: Apr 17 16:00:42 2026 GMT
            Not After : Apr 18 16:00:42 2026 GMT
        Subject: CN=6af7aba6c1600e369d0a884a3ba50ddca940b9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a1:42:c1:a6:bd:42:03:91:20:d3:c3:0d:0e:
                    2c:71:40:ae:b2:cc:4e:10:75:6c:83:58:97:39:6d:
                    69:09:56:56:c3:ee:ad:ca:f5:f3:5a:50:56:3c:dc:
                    80:a8:22:06:4f:58:f3:6f:69:17:99:16:1c:dc:8c:
                    cf:86:6e:31:46:84:95:14:e0:a7:fe:9a:f6:df:a4:
                    4a:b7:b2:13:20:e2:ce:5a:c4:12:88:ca:f3:40:ca:
                    be:4f:60:34:ca:e3:e3:db:6e:c4:fa:cf:a7:43:90:
                    21:21:49:97:15:c3:da:08:0b:15:42:5a:18:c6:32:
                    8f:5c:60:c0:a3:1e:4e:f9:c6:69:b7:58:6a:03:38:
                    19:07:a8:3d:a9:b2:2a:31:99:66:24:73:f2:ae:68:
                    6d:26:48:ec:a2:7a:95:1a:e8:1c:e6:f5:03:70:73:
                    2f:d4:d4:65:77:8f:07:83:00:03:b2:f0:60:b2:d8:
                    0e:2c:e6:c9:28:de:0e:14:90:c5:e7:8a:ad:9b:37:
                    7b:3e:3b:6e:79:69:cc:e0:8c:ad:07:2a:fc:49:60:
                    c7:65:b4:0b:32:13:8d:bd:a4:5c:77:59:92:a8:02:
                    7c:72:08:97:36:29:a5:eb:a7:3f:3b:9e:3d:59:38:
                    78:3d:39:03:d2:92:71:16:e2:12:aa:f9:d0:55:05:
                    ee:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F7:AB:A6:C1:60:0E:36:9D:0A:88:4A:3B:A5:0D:DC:A9:40:B9:F1
            X509v3 Authority Key Identifier:
                keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b6:e7:da:41:d7:21:18:19:71:ce:2c:24:08:dc:58:ee:41:
         87:2b:72:0c:5f:9a:0b:63:e4:76:d2:90:f4:a7:cc:af:b9:5b:
         0c:4c:75:41:54:3a:81:79:1d:46:a7:3d:45:0d:15:b3:a8:ed:
         ec:33:5b:4a:5e:f3:c2:29:3b:b7:44:65:44:32:f6:39:e5:f4:
         01:d9:69:76:91:82:e3:07:d6:fa:66:1c:db:42:a1:f7:81:09:
         ac:26:b9:e3:b3:c6:2c:b8:b7:8c:f9:60:5f:c1:bb:12:1e:77:
         71:86:1d:36:99:d5:38:b8:ee:f5:7b:e5:89:9d:03:85:63:b4:
         90:6b:a7:5c:22:aa:8e:cb:4a:8b:0f:1e:d9:96:42:8b:03:ec:
         11:4c:e4:3f:92:eb:fb:20:c6:61:c1:2d:eb:ec:25:ad:49:49:
         20:72:70:cf:d3:de:ea:01:38:4e:20:70:52:f4:ce:74:be:6b:
         12:95:c0:c0:f4:97:58:68:d8:2e:5a:da:24:0d:65:ad:96:fe:
         9b:ed:e2:be:e0:2a:d6:60:4f:58:55:6a:d6:17:f0:fc:96:9f:
         46:e6:4a:bb:00:23:42:11:b0:7c:ab:58:72:90:82:66:2b:47:
         68:e8:04:9f:36:06:43:35:7d:cf:83:f5:ef:94:b8:fa:b5:78:
         b8:27:ed:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:17 2026 by rpki-client