Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft
File:                     EneXY60_H0taSgVSxgOUlrz_OlQ.mft (raw, json)
Hash identifier:          hUFp4FONwXoyph3SrElVYyQsD45oZARrYFoub86wYbQ=
Subject key identifier:   3F:F8:68:8D:BA:A3:0E:52:C2:74:AD:C5:CB:B9:5D:AB:4C:DC:A5:CD
Authority key identifier: 12:77:97:63:AD:3F:1F:4B:5A:4A:05:52:C6:03:94:96:BC:FF:3A:54
Certificate issuer:       /CN=12779763ad3f1f4b5a4a0552c6039496bcff3a54
Certificate serial:       0197B7453A6C4BD8E7483CBD3DCB51D6874B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft
Manifest number:          04A3
Signing time:             Sat 28 Jun 2025 16:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:56 +0000
Files and hashes:         1: EneXY60_H0taSgVSxgOUlrz_OlQ.crl (hash: 8yDu/dKpUwSz3VlkCPzWz8UzR1gIRY/mFr+OzwAQNyA=)
                          2: X6geWX5nM159UJnYLrAlkyag0CM.roa (hash: i2/ukSqH8f8rPwnYXz8bpqJPbVxP6Pdogw7nGkBUWWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:3a:6c:4b:d8:e7:48:3c:bd:3d:cb:51:d6:87:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12779763ad3f1f4b5a4a0552c6039496bcff3a54
        Validity
            Not Before: Jun 28 16:00:56 2025 GMT
            Not After : Jun 29 16:00:56 2025 GMT
        Subject: CN=3ff8688dbaa30e52c274adc5cbb95dab4cdca5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1d:fd:70:cb:ad:c7:11:b9:a9:da:93:52:86:
                    9b:b3:27:8b:f1:e3:69:44:7c:55:90:b0:08:4b:fe:
                    cd:78:02:c7:93:4c:cc:dd:e1:b1:46:6a:2d:81:96:
                    bf:24:ae:db:9d:0c:81:d7:56:bf:15:b9:78:b0:ad:
                    ef:31:d8:03:5d:bd:fd:cb:3d:20:8a:23:5b:d3:0d:
                    6e:91:5c:da:14:2d:b3:3e:c7:e3:53:ef:32:91:13:
                    c6:54:57:ab:cf:b3:aa:b7:41:6b:b9:ff:ad:db:02:
                    55:af:1c:b2:a1:ff:c4:81:9b:0a:13:4c:20:bc:38:
                    f5:01:98:c5:a8:28:51:9e:c5:dd:9f:18:b9:28:e9:
                    6e:2e:f0:0f:49:c2:c9:48:17:30:17:5c:9e:d2:15:
                    e7:da:8b:a1:9e:20:2a:d7:47:33:d2:c8:4d:76:59:
                    bd:e0:ff:67:08:ab:4e:8b:06:77:49:03:fd:ed:2d:
                    74:84:74:5f:c3:3a:d9:7b:87:59:97:ee:01:97:bf:
                    31:15:84:b7:f6:9f:c0:c9:f3:fb:00:0e:2f:21:62:
                    96:44:60:ea:10:1b:b9:e1:f2:65:c1:f1:ee:a0:e2:
                    c4:07:b2:2a:b7:38:67:ab:3a:88:fc:42:e8:c6:cb:
                    f5:dd:2e:f6:b3:8e:6a:35:ba:b4:80:a1:02:53:1b:
                    2f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F8:68:8D:BA:A3:0E:52:C2:74:AD:C5:CB:B9:5D:AB:4C:DC:A5:CD
            X509v3 Authority Key Identifier:
                keyid:12:77:97:63:AD:3F:1F:4B:5A:4A:05:52:C6:03:94:96:BC:FF:3A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2e:1b:e5:34:e9:d3:e7:ca:0f:c5:d8:03:1d:67:bc:4c:0c:
         a0:5f:93:c8:14:5d:a1:9c:4a:9c:7a:74:a3:30:8f:26:e3:95:
         a3:f3:ac:bd:eb:79:7b:60:25:4d:1d:73:ea:0b:7f:d2:16:3a:
         3a:f4:63:a3:e3:dd:10:05:68:41:9e:1c:12:1d:02:ca:d5:7b:
         06:b4:9d:f0:88:39:6a:91:2a:4c:a8:83:85:bd:3c:6d:3c:7f:
         34:3e:df:7a:a2:46:c4:13:20:83:bd:01:c9:3c:a3:6f:9e:6d:
         7b:c1:e1:f8:80:8e:01:c0:c5:e7:7e:c3:60:82:18:a2:f1:97:
         5e:31:45:aa:2e:70:49:25:a1:35:2c:c1:da:97:9c:eb:28:53:
         e9:02:64:5d:c9:c0:e9:d1:7c:e0:bc:66:3f:0c:1b:12:a0:e8:
         6c:61:1a:44:d6:38:f3:43:c8:c4:f8:cb:ad:83:64:8b:c5:58:
         32:59:3b:b0:ae:9c:9d:50:35:1c:33:15:f5:1d:72:d9:a6:6d:
         2b:7c:88:61:0a:9d:3a:e9:bf:fa:13:f2:1a:3e:58:90:cd:45:
         2f:02:80:a9:40:f0:fe:87:85:00:ef:64:6b:7d:80:e8:9b:97:
         e9:f1:21:78:3f:ce:7e:33:39:78:d4:6d:1a:f8:c4:f2:8b:45:
         ca:04:e8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:37 2025 by rpki-client