Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File:                     ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier:          VLTgApQirXj52STnO8Epyfj4DzvpcaqkmyAL1cvznSs=
Subject key identifier:   B2:56:F6:50:FF:E5:F0:0F:86:F8:2D:AE:15:8E:D7:EE:F8:77:A2:E7
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer:       /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial:       019E2248CFD86362F7C928E55C24E5A8079E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 17:00:57 +0000
Manifest this update:     Wed 13 May 2026 17:00:57 +0000
Manifest next update:     Thu 14 May 2026 17:00:57 +0000
Files and hashes:         1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: dNCIVrEEZis5TsMkdsJ5Tw5VZ0zvf4y59MAaX62rp+Y=)
                          2: viS2S0SzjAgJ_iBbCgPzp3yhg0U.roa (hash: s3YkexgQHQKpIdGn3lF6fcpbtFZIjdVlLhgi0JVjWGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:22:48:cf:d8:63:62:f7:c9:28:e5:5c:24:e5:a8:07:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
        Validity
            Not Before: May 13 17:00:57 2026 GMT
            Not After : May 14 17:00:57 2026 GMT
        Subject: CN=b256f650ffe5f00f86f82dae158ed7eef877a2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:f2:c6:bc:0c:44:52:e4:51:09:3e:fe:78:
                    78:69:b7:b0:b9:cf:9e:83:70:6e:9d:81:da:f1:75:
                    1c:60:8a:5c:d9:a0:f2:35:1d:20:4d:53:e0:78:b7:
                    f6:ca:b1:7c:3f:74:03:6d:c4:55:0a:89:54:c0:c8:
                    25:8a:77:2d:bf:db:ea:fc:08:27:81:e6:85:b4:0d:
                    9e:f2:36:7c:cc:8c:49:fd:82:c0:94:27:7b:d7:5f:
                    16:44:6d:13:fe:e8:4a:ea:c9:1e:23:bd:88:b6:b3:
                    76:ae:4a:a0:c5:27:5f:0f:16:db:fa:02:7b:bf:d0:
                    9d:93:4c:f0:53:3b:ef:a8:6e:66:2a:3b:8f:55:34:
                    45:09:af:cc:c9:38:46:0e:80:99:63:25:36:e0:cf:
                    77:42:2f:0d:69:31:13:76:88:d6:77:4b:9e:f9:44:
                    b2:8a:41:f0:21:57:62:df:57:32:fd:0c:9b:56:22:
                    15:7f:73:f9:05:64:86:a6:84:29:fc:c8:43:24:3d:
                    a7:f3:b1:a6:c1:6f:d4:30:f0:a3:d3:4f:30:b5:d5:
                    78:05:89:cc:0c:7f:8c:96:bc:0f:4d:40:c7:99:da:
                    ce:27:24:fe:04:b8:db:93:7b:3c:5e:5f:ef:2a:23:
                    1f:a8:06:5a:d1:c4:25:92:09:34:06:20:58:62:b8:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:56:F6:50:FF:E5:F0:0F:86:F8:2D:AE:15:8E:D7:EE:F8:77:A2:E7
            X509v3 Authority Key Identifier:
                keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f3:d6:2f:de:94:1a:bd:f6:d2:23:7b:41:b8:d1:62:c7:46:
         2d:fa:ab:8b:b4:4e:e8:e1:67:96:1f:9f:e0:a7:d0:6c:18:29:
         5d:7b:48:e4:e1:9f:89:e7:36:7e:4c:ad:67:cc:a7:ff:49:2f:
         42:80:e4:ad:37:df:12:62:1e:4d:14:80:4c:91:8d:62:2f:32:
         60:f7:7d:13:52:e5:9e:cf:ce:56:b5:81:79:c5:c6:0c:48:76:
         5a:81:19:21:86:95:e2:e4:58:7c:0c:29:25:fa:72:18:5c:e5:
         95:18:c4:e5:28:10:fc:d7:05:ea:29:68:54:52:ba:32:97:21:
         45:20:88:d7:7e:ea:cc:72:3a:22:60:83:f1:51:bf:17:ff:24:
         17:e9:9d:cc:de:f7:5f:29:bb:c0:24:39:6e:2c:f0:6c:12:b2:
         c3:1b:43:71:53:83:ac:56:63:13:22:7e:e6:a0:23:73:05:09:
         bd:64:fd:ad:28:24:68:8a:a5:44:ce:9a:41:97:3b:29:70:96:
         91:87:f5:c6:9f:cf:9b:b6:79:c5:84:3d:15:a2:d7:4e:71:6b:
         b5:65:9f:6b:91:0e:e3:ec:90:8b:14:43:d2:43:09:aa:28:a1:
         2a:57:bc:c3:46:f4:80:de:5d:da:c3:e7:2f:dc:46:6e:88:dc:
         2b:dd:e3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:33:14 2026 by rpki-client