Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File:                     EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier:          /v3w6X3LoX79O09YkD9/J/1AjHXQuhTRmz8KfCbvVUU=
Subject key identifier:   DE:64:47:75:F5:C5:19:4D:75:6E:BC:F4:B5:F5:34:F3:C0:46:5C:77
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer:       /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial:       0199FBEB7E12C841BE14BF0B097294ADE81D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 10:02:18 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:18 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:18 +0000
Files and hashes:         1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: igs0qUz9VUYxfyJ8GRqTN9iuRxA8385mV3RIqjwl0XA=)
                          2: YKFTV_Osz3tEHBL-tBtNNKG_uGY.roa (hash: ofAuwRpYik4IXKEsnZ8uX3EkPuXFlEDgyGW2JXk71VA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:7e:12:c8:41:be:14:bf:0b:09:72:94:ad:e8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
        Validity
            Not Before: Oct 19 10:02:18 2025 GMT
            Not After : Oct 20 10:02:18 2025 GMT
        Subject: CN=de644775f5c5194d756ebcf4b5f534f3c0465c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:65:2e:3f:4e:73:f7:9e:f3:03:e9:f7:47:
                    a7:12:69:d8:91:28:6e:03:78:bf:aa:f2:3a:2e:13:
                    30:a6:a6:ae:78:43:97:bc:c8:84:54:bc:0f:ce:2e:
                    5b:f4:ed:43:81:be:67:17:44:cf:fe:65:57:2e:ad:
                    88:c3:5c:b7:9f:31:b9:b1:17:b6:5a:26:e2:38:46:
                    aa:8d:2b:72:51:42:db:ef:40:6d:27:b8:fe:0e:56:
                    b4:80:3c:dd:f0:cb:21:f1:37:f4:3c:a3:6e:65:31:
                    c2:60:e0:3d:9f:27:c0:f6:46:df:6e:a0:10:24:10:
                    ad:de:ca:ce:cd:94:7f:ec:1b:3d:4f:e6:f4:26:92:
                    77:23:e0:35:d5:ec:55:1b:01:76:92:ba:c8:31:a1:
                    85:62:d5:48:3d:e0:ca:36:3f:be:61:a1:6c:0d:9e:
                    4b:45:ba:a8:f5:84:c4:03:15:d5:8f:cc:b1:fd:81:
                    b2:1e:14:97:1d:1e:d6:86:df:93:47:96:68:56:01:
                    ac:0c:0c:90:6c:bc:e6:48:98:9d:f8:b5:a0:97:c2:
                    3d:2e:ec:14:74:bc:62:b1:5b:e6:45:10:14:f4:9c:
                    4b:26:e9:92:7d:86:25:b8:4f:aa:fe:c3:3d:e2:03:
                    47:2e:57:5b:42:8b:d3:a8:79:03:14:19:24:68:93:
                    94:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:64:47:75:F5:C5:19:4D:75:6E:BC:F4:B5:F5:34:F3:C0:46:5C:77
            X509v3 Authority Key Identifier:
                keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3b:5c:b4:42:2c:72:ff:ec:9c:d6:80:8b:45:b9:33:e2:7d:
         3b:ce:1c:ad:88:81:6e:3c:77:7e:fb:81:90:14:88:4e:99:24:
         f5:59:e5:21:a2:ba:0e:2f:bc:35:88:9d:e4:a2:d0:f7:66:be:
         18:d6:f4:7a:0c:de:e1:97:97:3c:db:c1:f5:b0:e9:80:05:4e:
         df:68:59:21:c4:30:97:db:09:42:a2:af:b7:94:85:90:7d:0e:
         cb:3a:b0:3d:67:79:67:0a:07:af:e8:79:de:b4:07:13:2b:28:
         a0:70:11:2a:b1:ce:24:c3:cb:d3:08:cf:ee:66:7e:cf:19:7b:
         86:67:4d:af:cb:d2:c6:db:e6:2e:a4:4b:7a:f2:c0:aa:08:e6:
         a8:81:b4:84:54:6f:26:c2:49:83:fd:ef:8f:d3:48:30:44:07:
         36:37:89:56:d7:c0:82:5a:b4:0a:a3:c8:5b:d9:eb:24:02:ea:
         23:e6:6a:6d:2c:48:26:58:64:bb:a2:ae:ea:58:c1:c8:14:6b:
         00:b5:cd:b9:94:48:68:71:89:b2:f4:66:a1:f6:cc:99:b4:c9:
         48:ae:f6:03:ad:d9:85:20:23:aa:8b:73:e7:f3:77:18:32:34:
         11:d3:2f:47:25:96:16:1a:a0:25:8b:2e:6e:95:57:8a:6b:72:
         a7:bb:9c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:05 2025 by rpki-client