Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File:                     EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier:          md40fb6U6joc/0R6O7oTuta7Ex8OSKJoFEBHCbEGjnc=
Subject key identifier:   7A:E9:B2:2F:7E:7C:25:79:6F:6A:95:B7:97:58:B1:D1:1E:9B:8B:A0
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer:       /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial:       019894B6C6198575F7B3598DE7DD8387D413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number:          1628
Signing time:             Sun 10 Aug 2025 16:01:02 +0000
Manifest this update:     Sun 10 Aug 2025 16:01:02 +0000
Manifest next update:     Mon 11 Aug 2025 16:01:02 +0000
Files and hashes:         1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: DP0f3fLpRX8tksReQdek32L3wbQObzbDuA1vB11wJgU=)
                          2: YKFTV_Osz3tEHBL-tBtNNKG_uGY.roa (hash: ofAuwRpYik4IXKEsnZ8uX3EkPuXFlEDgyGW2JXk71VA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:b6:c6:19:85:75:f7:b3:59:8d:e7:dd:83:87:d4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
        Validity
            Not Before: Aug 10 16:01:02 2025 GMT
            Not After : Aug 11 16:01:02 2025 GMT
        Subject: CN=7ae9b22f7e7c25796f6a95b79758b1d11e9b8ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e4:9b:be:5f:33:cc:12:5e:a0:b1:2b:7c:c1:
                    30:20:5e:83:68:7b:55:2d:d0:ba:9f:4f:a6:9c:31:
                    f0:16:44:51:1b:b7:85:b8:ff:d4:8f:15:72:11:fd:
                    1d:e4:51:de:03:48:0f:88:7c:2e:06:63:8c:55:a5:
                    c8:ed:a0:18:d1:92:c4:4e:8c:aa:c8:9b:0f:80:79:
                    8f:e8:1a:3e:5f:cb:2e:b2:fd:06:cd:58:ba:85:d9:
                    e4:54:bf:6f:0e:e0:d4:1f:47:c1:dd:d6:b9:0e:f4:
                    70:eb:f8:e0:32:3e:90:4d:ef:1d:2b:02:87:1e:e9:
                    fb:9d:c3:c2:a7:81:cb:2a:a3:93:e5:40:c2:bc:96:
                    41:13:07:ea:d9:39:3b:30:44:6d:02:64:08:f1:3d:
                    c3:60:27:9e:d7:e3:21:ac:d8:a3:ef:f5:b4:a1:a3:
                    2c:6c:40:8c:d7:d1:6e:e7:b8:68:87:4a:8a:94:05:
                    29:74:c2:37:31:3c:3e:9a:6b:a7:63:26:ce:ce:12:
                    b4:78:91:cb:59:83:d8:19:2d:39:23:fb:70:28:29:
                    88:69:5d:ff:ff:ca:cd:f7:c1:01:c8:2f:03:29:a7:
                    9a:65:6d:2d:14:23:68:b6:52:b0:57:a0:c6:ef:31:
                    ff:84:fe:d7:7a:7e:e1:e0:e9:c8:e9:e3:8b:14:b3:
                    36:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E9:B2:2F:7E:7C:25:79:6F:6A:95:B7:97:58:B1:D1:1E:9B:8B:A0
            X509v3 Authority Key Identifier:
                keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d0:ca:41:6e:36:6a:3d:88:6b:7b:20:92:1b:92:b7:2e:d5:
         4e:73:51:82:26:5f:91:cc:99:42:83:b8:57:53:6b:2f:b3:f9:
         ef:f3:ad:63:4e:97:23:ad:05:38:05:0a:c2:a1:6b:ff:23:89:
         19:fb:6a:d2:5b:3f:59:ce:9d:13:b8:81:12:9a:a8:17:77:9f:
         86:8f:20:9c:02:15:7e:41:8a:f2:0b:87:39:c2:a4:37:d1:de:
         9c:41:cd:7c:e4:64:2a:91:ee:85:e3:cd:f8:b4:ed:51:b4:b7:
         68:dd:96:32:9f:af:b1:4a:a4:be:4e:53:a1:70:d6:41:0f:af:
         ad:46:6f:71:20:cb:f8:b1:97:85:0d:20:74:3d:6a:97:21:40:
         d4:bf:ba:66:82:39:10:31:39:a6:be:38:1f:a2:05:e1:2e:1e:
         d7:ba:e5:6d:2a:cc:c3:b0:93:12:8e:84:cd:8b:fb:9a:21:3a:
         fe:77:f0:65:77:9f:16:e4:b5:d5:ab:ca:ac:2c:7e:b4:7d:42:
         d0:ef:97:ea:1c:2c:11:7a:40:a2:5b:50:47:71:53:fb:2b:f5:
         99:15:ba:60:3e:c6:00:02:c4:de:2f:d2:a8:4e:75:d7:4f:8d:
         40:be:fe:d7:15:2a:b2:d2:00:82:48:bd:52:f4:a5:a1:d4:da:
         1e:29:53:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:21:10 2025 by rpki-client