Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File:                     enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier:          hW0qPz9QXuuSPlyoHAjSnqxMOaxSjConYKqGrOw1XQY=
Subject key identifier:   AE:3F:7B:0A:2A:06:41:2C:A9:75:1F:CC:9F:C4:BE:3E:01:11:EE:40
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer:       /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial:       01A0EF674624B419D77CEC8E50A386E3BF8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number:          1A78
Signing time:             Tue 29 Sep 2026 23:01:57 +0000
Manifest this update:     Tue 29 Sep 2026 23:01:57 +0000
Manifest next update:     Wed 30 Sep 2026 23:01:57 +0000
Files and hashes:         1: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: sHwXj+WRGP+4O7rOVQd8uXEXEGQzNAmO1WN6YO5VcfA=)
                          2: n2RXCHmE2mIVVK86mWjjYTONVEY.roa (hash: vfexF/zKDf9M5bj3mCjRl7MbjkVTZHBSgi+Kjne7g2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 23:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:67:46:24:b4:19:d7:7c:ec:8e:50:a3:86:e3:bf:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
        Validity
            Not Before: Sep 29 23:01:57 2026 GMT
            Not After : Sep 30 23:01:57 2026 GMT
        Subject: CN=ae3f7b0a2a06412ca9751fcc9fc4be3e0111ee40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e8:9d:7b:2f:fe:31:d9:3a:ff:fc:e0:a7:72:
                    8d:2c:28:0a:65:cf:0a:68:22:47:f0:99:42:32:2c:
                    8f:cf:31:2b:51:35:7b:0c:e5:64:4b:6e:aa:cd:15:
                    a1:3e:f3:be:ea:5a:fb:ea:e4:4b:ef:f1:7b:10:24:
                    dd:33:9f:fe:40:e1:48:1e:d3:dc:4f:27:ba:d5:ba:
                    0e:35:7e:d8:c4:d2:42:63:1d:35:29:3b:f8:b9:dc:
                    0d:f6:46:39:09:7a:89:41:ae:d9:c0:fe:d3:db:14:
                    b1:0e:7c:0d:61:dc:e2:79:f9:6f:28:04:b8:bf:9a:
                    28:11:42:0b:f0:0e:50:91:ae:3d:ac:ab:5c:18:c8:
                    a6:bf:ef:19:c9:ac:75:e8:fe:f8:65:f6:aa:18:e4:
                    51:f3:b2:f4:da:13:b9:23:a4:f4:c5:3f:e2:ea:85:
                    a1:15:03:68:b3:43:f2:f0:af:45:2a:1f:14:e5:2b:
                    b5:ed:8c:02:c1:6f:f4:96:31:be:9c:d5:8e:b1:7e:
                    4a:4c:a3:05:84:62:7e:99:25:58:9a:92:43:10:63:
                    e3:1a:eb:0d:c6:af:31:0d:7a:07:d5:b6:e3:a5:5d:
                    b6:d0:bd:9d:ee:88:fb:2d:9e:9d:ce:fd:72:92:9b:
                    01:f1:4a:73:75:37:60:ff:02:99:20:ac:30:5b:2f:
                    10:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3F:7B:0A:2A:06:41:2C:A9:75:1F:CC:9F:C4:BE:3E:01:11:EE:40
            X509v3 Authority Key Identifier:
                keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:90:ce:fb:b4:d2:62:68:4c:a0:ef:1a:a4:74:05:9b:72:db:
         50:e6:35:df:8f:09:64:c6:6e:3f:a7:f3:fc:d5:4f:bb:35:7e:
         7b:2b:68:ae:9a:b0:d3:a8:d7:e2:5d:39:11:97:5f:6a:5f:e4:
         cb:61:16:4d:5a:3a:f6:d2:52:54:9a:0e:d3:e8:bb:e2:fb:68:
         f9:06:8a:7d:4b:20:b7:67:8c:f5:e7:45:87:86:07:b2:9d:a6:
         c4:7c:02:07:fc:32:2a:74:5c:fe:c1:30:43:0b:c5:0e:ba:9a:
         ae:42:79:28:2a:60:87:ce:f4:27:bc:14:18:c0:11:22:44:70:
         2b:c4:8d:0e:58:90:72:d6:b0:7c:72:6b:aa:ad:c1:8a:f3:d9:
         81:f8:23:63:82:82:74:f7:6e:11:91:31:fe:82:6c:0d:5b:d8:
         67:78:96:af:e0:a7:23:11:e4:31:ce:b8:96:6f:cf:62:79:8e:
         f1:bd:c5:a7:2c:62:98:b4:d0:44:e3:a9:90:82:f7:26:71:8e:
         95:0c:b5:2f:1e:f0:14:78:8f:0e:15:d9:1e:cc:af:9a:e2:cf:
         97:d0:a7:dc:da:4e:49:09:21:6c:f1:23:67:c3:b7:73:30:42:
         1f:84:78:9e:c2:57:bd:1d:e0:cc:73:7e:91:95:5b:09:cd:7d:
         24:1c:b7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:29:52 2026 by rpki-client