Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File:                     EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier:          XQ+NFp2SoENvqpdA8v6satuzIqP/DFq5kD/y90WX5+I=
Subject key identifier:   D6:43:A1:89:DC:A8:C2:10:FB:57:24:B1:84:A1:75:6F:F4:28:C4:A5
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer:       /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial:       019ED4D009486703D978C23258CF7E50B71B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number:          1965
Signing time:             Wed 17 Jun 2026 09:01:04 +0000
Manifest this update:     Wed 17 Jun 2026 09:01:04 +0000
Manifest next update:     Thu 18 Jun 2026 09:01:04 +0000
Files and hashes:         1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: OvHjZ4z/Pk0Yh2inhAZus2S9JVjXtL9l6c5yUw03vdo=)
                          2: IkrlVjIBIVx5J9vbaylHLa_tgfM.roa (hash: V3uMqSa5WshlPBOs9YrJkuRAc1fggP1aMeBrmefuIRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:d0:09:48:67:03:d9:78:c2:32:58:cf:7e:50:b7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
        Validity
            Not Before: Jun 17 09:01:04 2026 GMT
            Not After : Jun 18 09:01:04 2026 GMT
        Subject: CN=d643a189dca8c210fb5724b184a1756ff428c4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:b9:3a:0d:da:c5:6d:87:74:02:65:ac:9c:
                    61:04:25:49:29:2b:59:8c:5f:ac:c9:50:77:bc:77:
                    06:8c:72:28:cf:c2:ef:f4:0f:05:b0:bf:aa:90:63:
                    0f:36:86:ea:b7:1c:30:a3:fc:17:be:2d:a5:3c:9f:
                    ec:93:cb:44:25:56:af:99:28:77:68:4d:74:25:6e:
                    65:d4:57:17:7e:a1:45:0b:19:7e:67:65:0a:01:19:
                    b8:66:5a:aa:4b:18:77:b2:d4:bd:93:f2:d0:62:d4:
                    8d:94:55:5a:5a:c1:3d:71:8d:7d:91:55:20:c2:d2:
                    eb:9f:e8:34:6a:88:ab:a1:fc:6f:bb:fd:3c:4f:c7:
                    6b:d0:ec:1e:9e:c5:ab:5e:48:33:4a:26:df:d1:ef:
                    d0:99:f0:ae:05:41:48:eb:60:d4:98:fe:60:e2:7a:
                    0e:48:8f:24:c2:eb:71:1e:34:fa:bd:bb:bf:77:39:
                    70:e8:27:4a:25:55:f4:f3:62:a2:e0:75:e6:c0:0e:
                    25:96:55:3e:24:46:75:42:f9:fc:6e:52:00:9b:f3:
                    60:08:12:ad:69:f8:6c:6c:86:c7:73:06:9a:50:13:
                    ee:da:e7:4a:f6:c4:a7:f7:4f:cc:e6:02:39:12:11:
                    71:31:37:ce:43:29:d4:d6:7b:06:63:df:bb:d4:47:
                    ef:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:43:A1:89:DC:A8:C2:10:FB:57:24:B1:84:A1:75:6F:F4:28:C4:A5
            X509v3 Authority Key Identifier:
                keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:83:0d:dd:06:72:87:02:03:82:c4:5b:05:2f:68:ca:9d:af:
         f8:46:d1:8d:07:75:67:89:2e:55:a0:41:7f:11:43:43:06:72:
         4f:7d:72:3d:06:8c:81:ee:95:f2:62:14:37:51:78:c2:1c:0a:
         d4:23:03:56:dc:4e:ad:1c:0b:b1:63:f0:15:79:96:15:c3:b1:
         b7:be:dc:32:ec:e5:39:3a:a4:e3:f7:67:c1:ca:b7:e8:9c:49:
         8e:cb:dd:b1:2d:79:9e:a4:b8:00:51:86:43:36:65:45:dc:7f:
         eb:ed:49:cf:d3:1e:64:85:06:5b:f6:b0:7f:0d:18:23:7d:0b:
         39:74:f1:7a:4e:85:b5:3b:21:a5:26:6c:6b:c9:9f:3d:ac:7c:
         90:9e:ec:96:9e:8a:79:e9:e5:68:dd:a0:bc:54:2c:6a:ad:38:
         3b:11:57:31:27:d7:15:8f:68:84:ab:96:93:76:38:d8:10:99:
         ba:27:b3:36:48:bb:cd:3b:83:b6:c8:30:29:f0:1d:e0:bb:09:
         cc:06:9a:61:90:b7:c7:9c:4b:33:bd:7f:79:86:c8:3d:2f:b5:
         74:59:ce:a3:86:24:ff:6d:c6:cc:99:7a:42:c2:9c:b6:f7:1c:
         71:50:9d:31:85:7f:e2:c6:d5:bc:97:a8:90:b6:a3:34:6b:d0:
         b2:dd:b8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:38 2026 by rpki-client