Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File:                     EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier:          XuswaQNIE03hMiuLP8j2pZ1NvvEq1r9NOg/ChAmtgh4=
Subject key identifier:   F7:A0:19:1F:82:CE:47:A2:21:52:B7:E0:F7:95:31:3D:EA:CD:89:BB
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer:       /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial:       019CAA8FC809B322AD5B74F772983DA975D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 18:01:15 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:15 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:15 +0000
Files and hashes:         1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: 1mRVMmP3hHmI64XCjJnr2Lg00niDvgc3oxUEIsMgA7I=)
                          2: IkrlVjIBIVx5J9vbaylHLa_tgfM.roa (hash: V3uMqSa5WshlPBOs9YrJkuRAc1fggP1aMeBrmefuIRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:c8:09:b3:22:ad:5b:74:f7:72:98:3d:a9:75:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
        Validity
            Not Before: Mar  1 18:01:15 2026 GMT
            Not After : Mar  2 18:01:15 2026 GMT
        Subject: CN=f7a0191f82ce47a22152b7e0f795313deacd89bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:d9:46:d3:9f:c5:e8:82:52:59:46:1d:49:
                    d3:a6:7d:cc:50:c6:df:fd:dc:92:42:90:00:80:b3:
                    54:a0:31:61:2c:27:90:2b:45:5d:c0:ac:01:d9:0e:
                    ee:ec:ab:8a:91:b7:bd:c7:a3:d9:28:d7:a4:bb:f9:
                    bd:47:3b:ed:0a:00:f9:1e:49:9d:c8:5b:ba:09:39:
                    9d:7b:33:2b:6c:49:11:36:58:7c:22:d6:80:fc:0a:
                    36:5c:0d:05:ba:25:a5:65:46:4a:5f:bf:f3:45:8d:
                    e2:8c:c1:d9:1c:d8:4f:3f:60:ba:45:52:8d:88:34:
                    14:23:78:84:2e:57:c6:25:35:e7:de:88:25:11:89:
                    25:28:ad:64:19:bc:39:cd:0e:82:f8:1c:aa:18:04:
                    f1:bb:c7:82:63:7c:f5:6c:f7:1e:e5:d4:de:8f:4d:
                    52:b1:af:2b:ea:78:12:9c:97:24:b4:21:b8:2d:27:
                    57:32:aa:79:27:de:15:94:db:09:0e:52:43:12:c8:
                    d8:79:98:b3:6f:b6:1c:b1:27:20:64:fa:cf:d7:b1:
                    5e:a2:17:37:e3:2e:09:22:01:94:ae:46:7e:9a:04:
                    73:87:48:56:5f:3b:6a:bb:75:af:69:15:e7:f6:d4:
                    86:da:2c:d3:22:0a:34:ec:af:12:c3:a8:e6:95:4d:
                    72:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A0:19:1F:82:CE:47:A2:21:52:B7:E0:F7:95:31:3D:EA:CD:89:BB
            X509v3 Authority Key Identifier:
                keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:5b:55:8a:f6:ec:f2:17:f4:37:ec:72:45:0a:f4:bd:96:70:
         c3:a1:94:03:1d:98:bf:5c:85:a1:22:7b:7c:a4:6a:f1:4d:50:
         d7:7c:5f:97:9e:8a:24:2c:0e:a3:90:dc:13:19:58:c8:c9:38:
         81:b8:56:13:a2:29:4a:1b:7f:6c:05:41:5a:2d:47:76:bb:b7:
         1c:7c:8d:1b:25:a1:cb:25:2c:c3:95:fc:c3:f3:30:d9:bc:fc:
         13:eb:0b:aa:9f:af:94:28:35:18:5d:36:5a:fd:ff:e3:84:fc:
         dd:9b:a9:46:46:62:1d:46:e6:a1:46:b9:e9:98:d3:82:fc:82:
         46:1a:6d:0c:7c:79:f0:34:dc:f9:eb:a7:20:b4:e7:f1:35:6b:
         2a:70:6b:1b:8b:18:70:d3:53:18:08:5b:e9:9f:78:34:79:88:
         37:b1:a4:e6:84:db:25:51:d1:e5:51:88:66:fc:74:94:0d:53:
         b0:64:da:ee:07:2a:62:63:63:b9:f6:52:94:07:a9:bf:55:f2:
         22:00:1a:a9:13:db:40:50:9d:ed:20:58:09:d3:76:1e:01:21:
         d4:83:ab:29:cc:10:c9:43:94:3d:46:94:8f:f1:a0:92:42:35:
         57:70:70:25:06:0e:c2:68:4f:13:da:75:5c:d8:ac:38:01:45:
         a8:a6:3a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:39 2026 by rpki-client