Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File:                     EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier:          tZJGg/qjL0g5WdENyDKNzhVWAvzuLd7PbKmcn2XLeWo=
Subject key identifier:   09:A7:24:75:D5:01:7C:2D:AC:4F:5E:A4:D8:72:9C:FD:4A:32:D9:78
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer:       /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial:       019D2816D29DBADB13851148D75ACD26014D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 03:01:17 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:17 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:17 +0000
Files and hashes:         1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: J6X8Dus/TU0B6gNR4ROhdLK8cWLbeDNrl9zXe+03KuI=)
                          2: IkrlVjIBIVx5J9vbaylHLa_tgfM.roa (hash: V3uMqSa5WshlPBOs9YrJkuRAc1fggP1aMeBrmefuIRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:d2:9d:ba:db:13:85:11:48:d7:5a:cd:26:01:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
        Validity
            Not Before: Mar 26 03:01:17 2026 GMT
            Not After : Mar 27 03:01:17 2026 GMT
        Subject: CN=09a72475d5017c2dac4f5ea4d8729cfd4a32d978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7c:33:cc:a2:20:4e:d2:f5:fc:23:e8:a5:e5:
                    5f:57:fd:a0:41:8d:25:22:31:83:d6:f2:0b:83:1a:
                    e7:33:bb:c4:37:b6:fb:7f:a6:5e:f1:11:dd:ec:7e:
                    69:95:69:8f:95:06:65:e1:b4:f4:c9:74:ee:46:99:
                    3b:56:78:69:01:38:34:c7:c3:8e:08:9f:fb:3e:57:
                    57:ee:03:ed:37:7d:f3:2f:7d:74:ba:f9:b2:cf:5a:
                    c6:6e:1e:73:44:da:36:f3:3f:eb:69:8c:a1:58:d8:
                    d2:89:c9:be:7f:7e:0c:2d:33:15:88:db:42:be:65:
                    21:f5:62:3a:b0:b6:0e:86:de:c9:a0:fc:59:69:ee:
                    1b:c5:9c:86:36:41:e4:f4:bb:cc:e8:f3:4b:ad:c8:
                    60:9f:a6:ca:09:fe:19:42:8c:ba:2c:27:a4:3b:b0:
                    5c:e3:26:22:7e:41:8d:e1:64:09:9f:f8:57:3c:80:
                    50:39:a0:5d:fa:87:8b:4a:db:18:87:56:25:f1:ad:
                    c9:eb:7e:9e:b4:7b:70:52:ef:ac:05:72:87:07:ef:
                    76:eb:7e:84:66:66:63:e6:e7:93:5b:ba:c4:cd:af:
                    c2:f7:61:91:c5:14:fd:81:64:79:e6:ae:8a:b1:69:
                    d5:71:27:cb:02:bb:11:bb:6e:80:fe:5c:5d:da:d7:
                    ce:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A7:24:75:D5:01:7C:2D:AC:4F:5E:A4:D8:72:9C:FD:4A:32:D9:78
            X509v3 Authority Key Identifier:
                keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b8:18:64:dd:14:1e:b7:77:63:17:f5:a9:ec:39:38:35:e1:
         05:2a:b4:b8:c9:a5:fb:81:27:d2:45:83:13:14:f9:f6:4b:63:
         3f:16:10:c0:03:db:56:63:87:92:93:33:03:6c:99:76:a8:b0:
         0a:eb:e1:fe:58:ed:de:42:3e:59:42:7d:17:a8:0a:c3:c5:4a:
         93:66:20:23:b2:a2:c0:26:26:4d:c5:ef:55:30:f9:94:33:a9:
         d3:c6:bb:86:f9:a1:fe:49:7d:4f:c2:1c:9e:5e:74:e8:cb:78:
         1e:4e:6b:20:44:30:fd:21:94:d1:67:23:20:16:a9:71:ee:7b:
         1d:16:49:c6:ba:40:ff:ca:7d:2b:e5:e7:fe:9e:44:63:74:f4:
         cf:a0:22:e2:2c:ef:eb:62:a4:b0:7d:df:87:fa:45:67:e7:3c:
         b2:ff:78:5a:a3:9a:31:1d:70:9e:c8:4a:fc:28:74:3a:64:1f:
         d3:bb:38:c9:73:41:57:36:48:7f:8b:30:9a:25:45:7f:4d:dc:
         c8:62:d3:90:18:4e:77:be:7b:10:82:8b:99:fc:2b:c3:e8:11:
         ab:cd:d4:24:0b:3e:a4:28:5b:7d:4e:0c:d6:b0:fd:c0:d3:6a:
         7a:1e:bb:00:d7:52:1b:0d:dc:ba:69:26:47:4b:0f:ae:8c:10:
         28:91:6e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:03 2026 by rpki-client