Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft
File:                     Enr2xpNXOiJwySN4dUVsLfC1A8I.mft (raw, json)
Hash identifier:          GHA3V6eLB7N9Co+mSyRmd1gvgSI+pHbogj+dO4UvMrk=
Subject key identifier:   89:A5:82:04:69:5B:34:B8:E4:30:95:CB:6B:93:04:60:38:89:C5:4E
Authority key identifier: 12:7A:F6:C6:93:57:3A:22:70:C9:23:78:75:45:6C:2D:F0:B5:03:C2
Certificate issuer:       /CN=127af6c693573a2270c9237875456c2df0b503c2
Certificate serial:       0199FBEB5C62F0D3FB09F85DAC570B99B1C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft
Manifest number:          0B2E
Signing time:             Sun 19 Oct 2025 10:02:09 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:09 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:09 +0000
Files and hashes:         1: Enr2xpNXOiJwySN4dUVsLfC1A8I.crl (hash: BgO9t2LRDbcHmo1G1mMGp0iMbYJSRaynvF5jezKIFFA=)
                          2: VDxX1bu_IneAzz4Yg7mHL9qU8nI.roa (hash: wTZ4abffSQNMN+9KEZc/y4JfVZ87xDtbLN5IYZv+F0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:5c:62:f0:d3:fb:09:f8:5d:ac:57:0b:99:b1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127af6c693573a2270c9237875456c2df0b503c2
        Validity
            Not Before: Oct 19 10:02:09 2025 GMT
            Not After : Oct 20 10:02:09 2025 GMT
        Subject: CN=89a58204695b34b8e43095cb6b9304603889c54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:58:5f:00:d8:09:1f:5a:f5:17:b2:39:f5:
                    36:42:25:e8:b7:d5:2d:16:dd:1f:0d:f0:a5:d8:cb:
                    3a:90:eb:20:35:8e:06:3d:01:95:c1:8e:5d:33:56:
                    79:65:30:4f:49:12:43:28:2e:6b:6d:1c:19:e3:95:
                    1c:c4:a3:a5:9d:ea:7a:e0:0d:c3:b4:df:d1:15:bb:
                    6b:f7:14:72:81:c9:cb:c6:f1:55:e1:47:fd:8d:2b:
                    25:c1:dd:1d:70:6e:50:68:84:fc:31:5b:6e:62:51:
                    2b:15:64:7d:c2:ed:c5:fa:10:d7:03:95:46:b6:dc:
                    ae:e2:75:8d:57:66:6c:01:22:8c:f4:49:6a:ec:f1:
                    f4:d2:c8:94:48:d2:df:a3:96:80:43:e7:55:cc:24:
                    44:fc:ef:4c:09:60:5e:01:ec:87:69:48:92:df:2c:
                    3b:51:52:ac:70:37:72:dd:28:bd:f5:ea:ff:2a:58:
                    ad:f7:f3:65:f8:60:23:92:9b:05:db:70:d3:e8:e8:
                    dc:99:0f:10:fb:46:b9:ef:40:ff:d1:a7:36:9d:1f:
                    ce:1f:fd:80:69:83:4b:4f:84:68:56:93:a7:56:36:
                    87:3d:42:cb:0f:24:c8:02:52:81:36:18:96:c6:31:
                    20:97:4e:1e:76:bb:01:f0:8b:79:74:f7:a4:7b:6c:
                    61:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A5:82:04:69:5B:34:B8:E4:30:95:CB:6B:93:04:60:38:89:C5:4E
            X509v3 Authority Key Identifier:
                keyid:12:7A:F6:C6:93:57:3A:22:70:C9:23:78:75:45:6C:2D:F0:B5:03:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:35:e7:2f:e5:c1:13:16:65:9c:27:5b:5e:10:02:99:4d:27:
         c3:5c:58:3b:28:ca:e0:24:d9:b3:9f:62:ce:8e:ea:91:76:a6:
         16:c4:aa:3d:f1:5a:ba:00:1f:01:04:07:f1:88:37:26:70:7d:
         71:34:d8:16:2c:58:5a:8e:4a:b1:db:15:30:99:72:98:79:50:
         a1:ed:a0:0f:51:4e:c8:bf:1a:1a:d7:a0:e3:fb:8e:ab:2a:52:
         0d:8a:11:b7:da:33:9e:5f:59:16:65:71:a5:9e:76:0d:25:b6:
         28:8f:75:7d:75:fe:78:21:a0:cb:c3:c0:59:b0:0b:2c:29:96:
         33:34:a1:55:0f:6c:c0:ac:92:cb:ca:ed:36:ee:5e:df:6c:9e:
         a0:7c:0e:2c:99:d3:0d:e5:f8:68:a6:4a:cb:fb:b6:c9:93:0f:
         55:96:b3:69:58:af:3e:12:ad:a2:80:df:f2:9b:1b:2a:40:97:
         27:d5:37:7a:75:7b:fa:61:50:2f:ca:be:98:77:4d:65:18:ff:
         cf:31:e2:c5:82:94:c9:38:76:a5:78:b7:94:88:48:7f:2b:5b:
         3e:10:4b:3d:ab:ae:87:a7:df:e1:92:06:af:55:37:ce:7e:de:
         d7:01:91:00:29:2a:ff:8b:04:16:1a:57:37:ac:00:90:a0:1c:
         b3:04:c0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:25 2025 by rpki-client