Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
File:                     ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft (raw, json)
Hash identifier:          dBXkSqd+Y5P0o7senjaBNA3/GWzWnxb/b+mdKcmt2io=
Subject key identifier:   61:B4:DA:B5:8B:E3:3C:D8:1E:F6:BC:8A:90:96:F3:A8:B3:99:4C:3B
Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
Certificate issuer:       /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Certificate serial:       019D9AE35036CEDC7ADEED93621A10E3F0BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
Manifest number:          10B8
Signing time:             Fri 17 Apr 2026 10:01:21 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:21 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:21 +0000
Files and hashes:         1: ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl (hash: vuID2a+0HmwhkIbsoLiWFX/Xqk0WXIK6K3HyG0ajI4I=)
                          2: Ow_V3D3LkyTM_r00ewpLU-JasWM.roa (hash: n2QpzWe5qjli0Yj1OxzqDbdWwdmykVdSNeAfSZ+0exo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:50:36:ce:dc:7a:de:ed:93:62:1a:10:e3:f0:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
        Validity
            Not Before: Apr 17 10:01:21 2026 GMT
            Not After : Apr 18 10:01:21 2026 GMT
        Subject: CN=61b4dab58be33cd81ef6bc8a9096f3a8b3994c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:07:2b:e9:54:53:3d:ea:c6:fa:1c:71:43:63:
                    09:31:50:a7:11:88:d5:9c:17:4b:7c:1f:e6:8f:af:
                    4d:a5:a6:e9:05:82:72:de:da:ed:74:69:e3:12:ac:
                    8b:31:4a:72:4e:4a:08:f4:3c:07:3b:c7:ab:f8:0a:
                    62:a5:5c:41:28:5d:c7:c4:4f:3d:6b:c9:06:58:8e:
                    1a:d8:d9:25:c6:d9:7a:dc:a9:38:1a:9a:1f:2f:9f:
                    0b:27:8f:3f:0c:90:33:0f:fb:0d:97:48:d2:23:2f:
                    ad:52:0e:07:3a:96:a8:dc:9d:0c:63:37:09:77:9e:
                    60:9b:7a:4d:11:67:77:ab:82:21:46:4c:7b:fc:92:
                    d1:1d:84:d0:0a:94:97:5f:26:ef:9d:3d:b3:90:94:
                    57:af:32:62:01:a5:ac:ee:65:43:ca:0d:92:08:9c:
                    ef:4a:20:16:39:20:bf:39:09:75:29:63:92:4d:ef:
                    ee:a5:09:c1:30:c0:dd:61:2c:3a:88:86:49:db:dc:
                    7b:2c:18:3c:74:1b:0e:c3:89:41:81:42:a0:fc:ac:
                    33:5c:ce:6c:83:03:a4:e7:47:2b:e6:54:a5:6a:b8:
                    56:72:1a:30:20:34:6a:cb:48:f0:9d:55:e8:db:d6:
                    e9:79:dd:13:c4:ed:86:f8:83:11:b3:b9:a2:7d:20:
                    c2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B4:DA:B5:8B:E3:3C:D8:1E:F6:BC:8A:90:96:F3:A8:B3:99:4C:3B
            X509v3 Authority Key Identifier:
                keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:16:6e:07:c8:ef:68:81:56:98:11:4c:6d:4d:bf:cf:be:12:
         4f:0e:4b:17:bc:fb:82:86:b7:1d:dd:38:ec:4c:57:3b:b3:aa:
         b5:82:b5:7d:d2:24:84:77:e4:ac:0a:87:06:bb:ba:e7:6b:9e:
         36:b7:43:74:88:f5:74:e4:99:80:36:d8:ad:09:68:56:be:ee:
         d5:b6:12:d0:e6:99:c5:76:0e:05:92:af:48:7c:df:db:e8:61:
         f3:c1:0b:7a:44:58:97:fc:1b:35:12:40:4e:c1:d1:97:60:49:
         ac:61:c5:01:b3:70:8b:7b:e2:03:31:05:c7:2c:63:13:b4:36:
         1e:04:3f:c8:c6:68:7d:c6:45:ac:45:0c:b1:da:b5:d2:e1:78:
         28:e0:8e:2f:9f:30:ed:73:d4:46:c3:38:db:9c:4d:d4:5b:40:
         90:41:09:c2:32:4d:51:67:1d:47:74:98:53:82:e6:8a:95:ba:
         e3:22:c7:c3:4a:ce:94:88:f3:3f:60:29:cf:fb:02:a2:cc:42:
         79:cb:ed:11:08:bd:4b:fe:0a:f6:95:f5:7e:e3:26:c3:79:a5:
         52:55:db:ca:17:3b:b3:80:52:70:e9:38:7c:8b:24:98:91:e2:
         76:ff:97:81:f0:6b:05:9f:44:96:b4:b5:31:94:92:2e:12:e9:
         9f:f1:28:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:06:11 2026 by rpki-client