Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File:                     ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier:          nzSwEJklltF08wES4HdaqyUDvwyvPe536WcAfV9urcM=
Subject key identifier:   99:E6:22:DA:F4:34:55:F9:92:2C:FB:47:99:CE:51:F2:10:52:3B:19
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer:       /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial:       019CACB497E9B2F1DC9F1AB17E17E50A761B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 04:00:42 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:42 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:42 +0000
Files and hashes:         1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: OItLGDSlG1cnbdLZXSRO8/CVq6JcRE5njtDzRnJ122o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:97:e9:b2:f1:dc:9f:1a:b1:7e:17:e5:0a:76:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
        Validity
            Not Before: Mar  2 04:00:42 2026 GMT
            Not After : Mar  3 04:00:42 2026 GMT
        Subject: CN=99e622daf43455f9922cfb4799ce51f210523b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:b9:fc:81:e1:6f:c5:da:aa:c4:40:04:5e:
                    4e:55:fa:34:d1:71:e8:b7:89:45:0c:99:28:c4:df:
                    02:85:5b:29:bd:de:42:88:48:69:de:8d:31:59:8e:
                    d5:30:f2:96:3c:26:c5:a7:e9:a7:63:84:61:1e:72:
                    7a:7d:6e:b5:ca:c3:c9:fc:36:dc:73:de:85:7b:d9:
                    e5:45:9c:2e:1b:35:fa:df:34:b9:92:03:21:a5:a5:
                    55:0b:cd:67:b3:47:52:80:8a:79:a7:23:e5:6c:af:
                    c9:94:36:bb:45:e6:56:46:97:dd:e3:73:26:2b:8e:
                    7a:a3:42:70:fc:1f:a1:ec:69:4f:d2:8e:1b:cc:89:
                    46:ec:1f:ae:97:c5:c0:0b:d4:c9:ed:b8:c8:ea:24:
                    a3:4e:62:ac:bb:0a:3d:a5:60:3e:e8:f1:a8:2a:44:
                    7d:5b:98:6d:a4:c4:c7:4b:3e:bc:d2:1d:df:d1:38:
                    a3:82:fa:fc:54:cd:8a:52:cb:12:6a:dd:a6:e2:34:
                    98:55:5d:83:1d:59:15:45:62:db:d7:cc:a7:ca:fe:
                    f5:c7:22:2c:d8:35:2c:de:74:77:eb:56:0a:eb:d2:
                    03:cb:35:5b:68:04:86:14:a9:1a:a6:ee:8f:30:8a:
                    5c:c0:21:4f:fb:fa:8a:80:0f:d8:76:0d:18:23:3f:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E6:22:DA:F4:34:55:F9:92:2C:FB:47:99:CE:51:F2:10:52:3B:19
            X509v3 Authority Key Identifier:
                keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:20:33:60:00:dc:0c:af:1f:c1:d9:02:ac:93:78:d9:e2:ca:
         35:8d:6b:10:4a:0c:70:fd:f7:30:55:a9:cb:43:1b:58:40:57:
         c4:6f:1f:1b:a9:d4:01:91:b3:6a:bc:9e:48:68:3a:b6:ac:cf:
         38:45:05:d4:7d:10:60:e0:2d:8b:7c:17:81:20:d5:74:92:62:
         64:74:10:54:87:5f:66:93:89:d9:ec:d2:0c:de:15:92:05:36:
         c4:9a:e3:06:19:6b:3e:93:b2:7d:66:2b:0b:e0:c8:07:bf:89:
         07:25:3e:65:de:34:42:ae:6a:3c:34:65:e9:dd:2b:a7:8d:39:
         8f:3b:61:09:1a:96:6e:da:63:a1:df:ac:f3:b8:b4:92:b1:0f:
         17:fa:08:c9:63:cc:f9:25:11:bf:bd:f8:34:75:f2:73:10:6b:
         da:03:c5:09:d3:64:06:b9:05:55:d3:3e:6c:66:16:92:33:da:
         74:f9:f4:96:b4:c8:fc:c2:f9:e9:a2:af:d0:d9:2b:ce:c2:fb:
         64:a3:7a:a8:59:f5:70:7b:81:4a:c3:1c:2e:3a:38:55:f1:8c:
         55:3d:5d:22:37:fd:59:a7:6a:da:57:b0:0a:de:06:41:e3:18:
         46:ae:f1:42:69:56:ca:38:ac:6e:97:17:e0:99:50:81:82:8f:
         14:43:f1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:08 2026 by rpki-client