Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File:                     EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier:          lvnBwmq0CE1OffveOt+v2pWIAD5RjLcN9HyUCkT9jrc=
Subject key identifier:   DE:CA:3C:DC:66:65:4D:F1:18:34:9D:E8:DB:20:58:C5:B1:25:7D:62
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer:       /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial:       019F921106D5B336B6B7DE5C19F4FD527CDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 03:00:17 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:17 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:17 +0000
Files and hashes:         1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: lRloyKXBqKM+sgQarojEBY+59BaOQsGTcc4dfHzZyUY=)
                          2: IkrlVjIBIVx5J9vbaylHLa_tgfM.roa (hash: V3uMqSa5WshlPBOs9YrJkuRAc1fggP1aMeBrmefuIRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:06:d5:b3:36:b6:b7:de:5c:19:f4:fd:52:7c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
        Validity
            Not Before: Jul 24 03:00:17 2026 GMT
            Not After : Jul 25 03:00:17 2026 GMT
        Subject: CN=deca3cdc66654df118349de8db2058c5b1257d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3d:89:0c:f7:06:9a:11:0e:36:4a:36:5a:b4:
                    b4:cd:8b:5f:da:3e:bf:a2:4f:32:f5:aa:a3:45:bf:
                    ae:15:53:88:2a:f6:99:b0:36:73:4b:c9:eb:9c:69:
                    f9:11:be:46:b8:d7:71:2e:09:79:f6:13:70:52:09:
                    69:9d:42:70:34:fd:91:0e:1d:22:c2:54:dd:7e:54:
                    87:c7:31:28:d6:1e:bc:c1:a2:21:de:0a:23:0a:93:
                    62:df:1c:c0:b3:35:81:6d:39:d9:21:9a:dc:60:e8:
                    28:11:40:21:c3:c3:f7:f4:a7:fa:af:52:7a:6a:7a:
                    83:fc:bc:a7:68:d7:67:f8:58:b4:70:34:0d:ad:99:
                    fc:a9:75:e2:5a:9a:27:5b:03:c4:bc:d0:6c:21:c3:
                    5f:ab:c7:54:15:10:02:7e:cd:63:7d:ea:96:f1:50:
                    4c:24:a7:3d:54:df:41:ac:33:e6:3a:2f:cc:98:b0:
                    a3:19:29:b1:67:2e:f5:af:4c:90:fa:9d:11:1b:c6:
                    a2:76:a7:0d:07:61:5c:97:37:25:79:28:53:cb:96:
                    c0:07:30:3d:71:53:c5:db:58:6f:31:4a:79:fc:b6:
                    49:ca:37:71:c4:10:96:09:1d:be:da:7b:d7:ed:aa:
                    fa:ce:d5:ca:76:27:46:f4:0c:5f:4b:4c:13:4c:87:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CA:3C:DC:66:65:4D:F1:18:34:9D:E8:DB:20:58:C5:B1:25:7D:62
            X509v3 Authority Key Identifier:
                keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:4e:2d:73:79:78:c3:b5:56:79:53:2d:ad:95:25:b6:94:66:
         e2:20:50:67:67:93:a9:17:5b:d2:42:80:be:30:58:5b:ee:df:
         e3:1d:41:60:99:96:c7:f5:9a:89:32:15:a7:a0:7b:d8:c8:12:
         2c:84:27:dc:7c:81:8e:08:5f:3d:9d:9c:eb:7c:f9:cb:8b:74:
         05:43:84:8a:82:51:4d:06:78:89:12:b3:e6:3b:0b:12:c9:9e:
         71:ed:a2:f6:22:c0:8c:b8:e8:74:bb:13:a0:f9:25:ed:39:cd:
         d9:83:04:6d:e8:cc:95:1a:c7:c6:76:6f:40:b5:f0:13:bd:b0:
         07:59:5b:85:ae:08:e2:87:6b:68:1c:5a:3e:fd:de:25:4e:80:
         e0:f6:2a:17:c4:8e:6b:18:8f:0b:11:cd:4d:eb:e0:98:a8:67:
         c6:c9:ad:47:d4:b1:0c:7e:18:7a:04:74:f5:aa:b2:8c:9f:fc:
         b8:a7:8d:5d:2c:0a:aa:e9:2a:28:da:76:e3:9e:63:77:fe:89:
         3b:bb:01:26:c9:e1:72:ac:bf:1a:79:3f:71:90:90:5e:23:0a:
         fe:df:2b:78:fe:1c:f7:92:c3:87:b5:4c:7c:e7:03:09:45:15:
         83:2e:29:27:ed:4b:00:c6:34:39:9a:d0:12:1f:70:40:27:d5:
         cc:df:23:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:38:13 2026 by rpki-client