Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
File:                     EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json)
Hash identifier:          Fc5+iacoXQwuuBh2vnmjTFQxndKLAfziQ82QYNr2UMw=
Subject key identifier:   50:07:48:08:A4:34:68:7E:9A:5E:6A:B7:EA:A0:FF:91:45:E2:F3:1C
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Certificate issuer:       /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial:       0199FCFD90E482BD77F29A743D10F694FEE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
Manifest number:          0D09
Signing time:             Sun 19 Oct 2025 15:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:40 +0000
Files and hashes:         1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: D2m3FdfuH6xW/62OUCmhQEEay9vYJuqA8Gcys474ATQ=)
                          2: rOwp4EEdXg6LDTSQ0vKwhdv6jlA.roa (hash: GRZCNLtPKsPA6POGMydW8xxkB4XDVI2vNMs1Ud2kuDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:90:e4:82:bd:77:f2:9a:74:3d:10:f6:94:fe:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
        Validity
            Not Before: Oct 19 15:01:40 2025 GMT
            Not After : Oct 20 15:01:40 2025 GMT
        Subject: CN=50074808a434687e9a5e6ab7eaa0ff9145e2f31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:64:cc:8d:94:12:c8:7e:14:7e:12:5b:33:12:
                    69:8d:91:2f:0c:a2:37:fb:19:0a:9e:39:a3:f0:7e:
                    da:8e:8f:2e:cc:71:95:bf:06:73:06:41:3d:5b:09:
                    3c:2c:71:99:b2:82:85:3b:76:ac:db:1e:bd:91:00:
                    e3:c6:a8:25:db:ef:85:ff:17:4e:73:56:6d:43:00:
                    c2:64:85:e5:c2:2b:19:19:ad:5e:7d:4f:07:f0:ea:
                    0b:63:52:53:84:0c:87:b3:37:f0:60:2b:a6:4f:04:
                    66:bb:31:a6:ff:86:c0:df:e5:55:d3:c2:a1:25:ba:
                    f2:d4:cd:0d:cb:4f:08:0a:a1:13:d7:b4:ac:b2:a2:
                    6a:e5:e7:d4:f4:40:f4:72:fe:3b:d7:7f:de:41:ab:
                    e1:7e:8b:e5:de:a6:29:72:33:18:7f:59:8f:30:48:
                    c2:10:71:25:f0:c2:98:56:87:9f:32:07:8a:99:9d:
                    64:8f:88:9b:ac:d4:3d:66:e1:c5:18:88:3b:f5:81:
                    fc:61:0b:73:e2:0e:16:0a:77:8c:5d:d7:05:5d:88:
                    a2:8e:6f:5e:71:03:5f:68:40:b8:ad:74:cf:8c:91:
                    69:23:7e:4c:d4:84:b0:fd:f3:4e:44:7f:e2:92:a1:
                    09:41:77:2c:0f:20:41:57:9c:17:42:74:73:c2:55:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:07:48:08:A4:34:68:7E:9A:5E:6A:B7:EA:A0:FF:91:45:E2:F3:1C
            X509v3 Authority Key Identifier:
                keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2e:52:4a:a7:c1:b0:d7:4d:b5:ce:7e:5c:2b:3e:d4:cd:6f:
         6c:fb:02:4f:6a:e3:f4:29:1e:e5:ea:ba:d2:eb:b2:0f:fa:92:
         cf:2e:de:6c:7e:55:e1:8e:b0:05:5f:6b:08:35:f0:ac:4d:95:
         c9:8a:a5:46:19:ac:3c:cb:29:54:cc:f8:c1:ce:6e:25:68:6f:
         dd:cc:6b:25:61:e7:67:9e:b6:06:1d:08:82:d9:a8:ca:82:c1:
         58:85:a2:72:14:e3:55:59:60:08:67:4a:3b:7f:57:5b:79:c8:
         d0:f9:06:22:62:33:a4:7b:84:ab:e6:70:b5:a6:48:01:fc:be:
         35:52:71:cc:ac:fa:0d:32:48:5e:99:25:90:33:b5:20:36:7b:
         74:e9:ec:2d:ba:ad:b8:6e:82:a2:4b:50:3d:e2:cf:b7:8a:13:
         fa:1a:07:fd:41:4f:b3:29:4e:d8:89:f5:24:a6:fd:22:aa:7d:
         14:79:66:11:f1:77:8b:88:fc:94:14:5a:b6:f2:32:3d:13:49:
         b1:18:f3:42:b3:c3:31:2d:2e:20:15:83:c5:32:57:7e:70:2f:
         1c:69:6d:9f:40:f1:ec:ce:aa:aa:52:a8:e9:31:95:84:82:c5:
         14:40:92:53:0a:9e:f3:90:b5:b8:f6:99:29:e4:33:1e:15:a6:
         dc:bc:c9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:31 2025 by rpki-client