Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
File:                     EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json)
Hash identifier:          Sig5dlFTQOJZGreYVaKYj7kRoTcISDqL9qL1Ca8G70E=
Subject key identifier:   43:A2:9F:42:7D:39:5A:2C:8D:9C:93:46:FC:F6:56:B4:7E:9F:F0:14
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Certificate issuer:       /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial:       019E1F117818F79D5B51036F9C5554B1605E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
Manifest number:          0F2D
Signing time:             Wed 13 May 2026 02:01:38 +0000
Manifest this update:     Wed 13 May 2026 02:01:38 +0000
Manifest next update:     Thu 14 May 2026 02:01:38 +0000
Files and hashes:         1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: h0Nl/NS3XSxfWNoS5MhJiZpdrIYOrDKI8YJWBw+4mhQ=)
                          2: td4dGRbuQXuKOfRIriO4IH6YFGY.roa (hash: h708rv3/l6vNPHP6e/EPvLnr8GERga9y5D+OKNGmAAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:78:18:f7:9d:5b:51:03:6f:9c:55:54:b1:60:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
        Validity
            Not Before: May 13 02:01:38 2026 GMT
            Not After : May 14 02:01:38 2026 GMT
        Subject: CN=43a29f427d395a2c8d9c9346fcf656b47e9ff014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5c:f7:ae:68:50:84:60:49:3a:e7:c6:37:28:
                    e0:14:ee:71:95:78:dd:5e:5a:81:91:7b:11:37:11:
                    57:3e:40:e4:c4:59:eb:d4:c2:c2:de:b1:2e:7f:54:
                    56:4a:28:b9:dd:ee:da:02:41:ed:44:96:7e:95:69:
                    f7:05:c4:df:a6:89:5f:a6:36:1a:14:9e:c4:78:4a:
                    90:7a:1d:0b:ef:2e:6f:45:e5:dc:8f:2e:24:53:7d:
                    a4:b0:8f:e9:cb:a2:8d:5c:46:87:60:b1:da:6a:81:
                    e6:96:02:be:ae:23:ec:fb:81:56:b8:35:95:7a:34:
                    82:25:80:d7:e6:74:fd:1b:20:a5:d5:46:5b:47:e2:
                    87:41:69:9d:30:ea:9e:06:e6:40:c3:a1:a1:89:c2:
                    0e:0f:5e:6c:84:64:a6:65:b5:df:50:e7:7c:9a:8b:
                    7a:51:ab:94:7d:bd:0c:e0:fe:fa:1f:ea:4e:c4:9a:
                    da:4a:34:ca:1a:c2:38:2d:d7:d3:e1:b8:eb:e6:52:
                    f4:fc:b1:ab:1c:b6:c3:82:e4:2f:04:fc:98:43:d1:
                    5d:ca:22:04:b9:61:08:d9:43:65:f6:a0:b7:0f:89:
                    45:25:da:db:81:c2:d1:74:9e:2c:fb:71:fa:1c:96:
                    66:41:2a:80:9e:5c:c8:8f:48:cc:a1:88:ca:e9:21:
                    05:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A2:9F:42:7D:39:5A:2C:8D:9C:93:46:FC:F6:56:B4:7E:9F:F0:14
            X509v3 Authority Key Identifier:
                keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:45:55:3c:73:57:ac:f5:f0:0b:b3:26:46:20:df:5d:37:f0:
         fc:5e:1d:5b:a7:08:7e:73:fb:8a:f5:4b:fb:0e:52:45:49:b1:
         3f:1c:4d:d6:97:19:16:bc:12:a2:f1:cf:90:47:69:50:7c:97:
         68:41:7c:69:66:fa:36:6f:f3:59:e2:71:e3:ab:78:ac:82:56:
         71:18:14:ee:23:0f:4e:dc:c5:cd:8d:a4:70:e7:fb:a1:f4:e7:
         09:5f:32:2e:15:6e:fb:d6:8e:06:7d:59:2f:1c:59:25:e3:f1:
         c5:1c:7b:62:5d:e9:c7:bc:59:b3:ad:ae:11:d9:09:53:26:4c:
         52:56:ab:8a:44:e0:8a:e0:62:f7:70:09:81:8a:2b:f8:e0:0a:
         c8:79:ab:79:02:0a:e7:fb:73:58:f8:c3:24:d0:81:29:38:ee:
         68:15:82:35:87:a4:93:c8:cf:d3:f6:a6:44:3f:1b:08:21:10:
         8b:72:46:79:9a:90:aa:e7:35:38:d5:9c:32:d3:0c:71:19:88:
         5d:b0:de:6d:9d:0e:46:7b:5b:8f:89:fa:21:f5:00:36:b8:6c:
         e5:06:3a:f5:79:8d:b5:b3:ae:46:dd:7e:c2:65:9f:82:1f:9c:
         61:27:cd:ac:da:c2:8a:a2:08:63:07:df:61:69:2c:d3:8a:e0:
         fe:c2:45:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:50 2026 by rpki-client