Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft
File:                     Enr2xpNXOiJwySN4dUVsLfC1A8I.mft (raw, json)
Hash identifier:          qk97z6korqQpKIXNTHZCu+HlL/HtOnuDh7QAOtn4oHE=
Subject key identifier:   BB:D8:E3:E5:A7:C4:44:40:73:C3:5F:99:20:EE:EA:1E:BE:6E:93:A6
Authority key identifier: 12:7A:F6:C6:93:57:3A:22:70:C9:23:78:75:45:6C:2D:F0:B5:03:C2
Certificate issuer:       /CN=127af6c693573a2270c9237875456c2df0b503c2
Certificate serial:       019D265FE5C8FE14D45E1C6EB93809E94349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft
Manifest number:          0CD2
Signing time:             Wed 25 Mar 2026 19:01:52 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:52 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:52 +0000
Files and hashes:         1: Enr2xpNXOiJwySN4dUVsLfC1A8I.crl (hash: 7LQkz1GXD0jGiASdu8tZhmbldtSZVJ7IzXUMTvrXg5k=)
                          2: tDAqXBUYW7jgxQHGVe_g9V8EOlw.roa (hash: msiRHKuPw5Yshov9xw8j5VM8pLi6/GZVtNJZ2si3Kf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:e5:c8:fe:14:d4:5e:1c:6e:b9:38:09:e9:43:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127af6c693573a2270c9237875456c2df0b503c2
        Validity
            Not Before: Mar 25 19:01:52 2026 GMT
            Not After : Mar 26 19:01:52 2026 GMT
        Subject: CN=bbd8e3e5a7c4444073c35f9920eeea1ebe6e93a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:cd:15:ba:77:6e:d2:94:c1:64:af:a2:ce:
                    5a:08:ca:86:e8:01:11:35:4b:8d:38:dd:70:92:fd:
                    94:19:44:00:b1:ed:0d:67:48:dd:20:aa:cc:52:85:
                    5f:25:de:16:95:a0:96:23:b8:4b:5e:e5:cb:0f:c1:
                    cc:fd:31:84:2c:87:2c:4a:ea:ff:d4:ba:a5:43:7b:
                    94:39:84:39:bd:97:ad:de:20:e7:d2:61:d8:1b:50:
                    96:f9:9f:9b:1f:59:51:fe:d6:27:81:96:47:ed:76:
                    e5:36:a5:5f:ad:35:47:b7:f2:af:aa:ea:a6:7e:34:
                    bf:e0:8e:eb:d9:9d:97:63:9d:11:e1:9a:b5:0b:2c:
                    ee:fb:98:8e:50:5e:81:42:27:b2:46:b8:4a:df:45:
                    a4:4f:93:1f:30:f5:6b:fb:5d:b4:fe:bc:8c:a4:5c:
                    16:af:3f:69:0a:2b:d2:8e:fd:9e:56:d1:67:9a:3a:
                    62:b0:50:91:8e:e2:58:ea:d6:d4:cb:3a:6f:3a:7c:
                    23:d2:65:f7:65:75:70:b6:6b:25:ed:80:01:14:f9:
                    3c:e9:97:4c:51:46:9c:df:2c:ff:bd:b4:88:c5:65:
                    d8:2e:9e:4b:e0:28:f4:30:13:28:38:88:e3:e8:a9:
                    0c:bd:ce:7a:76:1c:c3:8a:bc:64:a9:b2:d4:6c:a0:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D8:E3:E5:A7:C4:44:40:73:C3:5F:99:20:EE:EA:1E:BE:6E:93:A6
            X509v3 Authority Key Identifier:
                keyid:12:7A:F6:C6:93:57:3A:22:70:C9:23:78:75:45:6C:2D:F0:B5:03:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:24:32:7c:c2:fd:07:65:62:fd:85:05:83:9c:0b:3d:ea:7e:
         a7:0a:14:f0:e1:70:72:83:5e:83:e4:67:ac:4e:4c:58:ff:74:
         6a:b5:24:4e:47:8a:29:1e:96:24:ad:69:a1:e1:39:e6:4f:76:
         ce:4c:84:64:88:f4:3a:a5:06:e2:0e:19:02:66:94:91:ac:b9:
         36:1f:14:ab:a9:8c:06:62:54:3f:76:db:06:d7:27:2a:81:25:
         0f:8b:41:92:98:68:ff:27:2b:f0:61:95:96:a7:29:bf:91:86:
         2b:ba:99:1a:b0:e9:0e:27:1e:28:57:64:86:2f:91:68:fd:62:
         1e:0b:c5:ce:0e:46:bc:f3:38:e5:76:76:87:ea:d5:e9:d2:ac:
         50:14:95:63:47:8d:6c:71:5e:1b:74:e1:ed:a9:90:99:e1:1f:
         b7:60:01:ff:45:d2:db:98:23:97:5f:de:71:4c:59:f2:02:40:
         ff:06:43:49:50:63:82:a5:4d:5e:86:fc:8d:79:ba:6a:81:32:
         4e:77:0a:3f:10:e3:b9:ff:f8:5a:33:2a:3c:e2:61:b1:49:1c:
         a4:41:9e:37:f7:3f:24:59:a7:04:a5:77:73:b6:d2:89:2d:da:
         7b:50:9b:76:8a:49:81:25:68:1d:c9:47:86:28:3c:43:d0:af:
         54:10:d1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:04 2026 by rpki-client