Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
File:                     ENSbc8raAe6FGBLsRAt6HsmGSLM.mft (raw, json)
Hash identifier:          ODUKDZNsbAAotwAbAgPmAkGT/+WQdNMtJTVyWYh9cHI=
Subject key identifier:   79:ED:C0:9D:26:64:8E:2E:7F:07:D6:D0:33:6A:81:0B:2A:56:A6:E3
Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
Certificate issuer:       /CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Certificate serial:       019D2A7299529D8731133A6A237DA2071D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 14:00:46 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:46 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:46 +0000
Files and hashes:         1: ENSbc8raAe6FGBLsRAt6HsmGSLM.crl (hash: 5nu9cXeieALx1c9FUF4OFIMsjcYGeRFNuEyW+9jL6tY=)
                          2: eSrmop84goo0iEWfYlqPX_ANRJ0.roa (hash: ztPjyknlOnXPUcaGUj1KAhGBxdHzv46hT4CpZXwcNUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:99:52:9d:87:31:13:3a:6a:23:7d:a2:07:1d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3
        Validity
            Not Before: Mar 26 14:00:46 2026 GMT
            Not After : Mar 27 14:00:46 2026 GMT
        Subject: CN=79edc09d26648e2e7f07d6d0336a810b2a56a6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:69:7a:f1:52:b7:0e:e3:dd:85:6a:b1:e0:
                    e8:7a:60:af:8a:a4:37:ef:63:96:fb:f6:71:34:73:
                    9f:2e:f6:9e:56:1d:2a:61:0c:a5:99:2c:52:db:da:
                    bf:ca:a7:43:b1:f5:72:29:8f:b2:2d:e6:c8:90:64:
                    43:c4:07:dd:05:77:40:e1:94:a7:34:9b:b8:00:05:
                    93:3d:be:e3:9c:c1:0e:84:5e:da:bd:97:93:01:73:
                    28:c3:2b:4b:43:77:9f:06:8c:55:71:68:7e:64:0e:
                    55:52:83:84:49:4a:42:a9:ca:d1:99:3b:dc:8d:b9:
                    49:e1:75:49:50:34:f1:eb:62:5e:f1:4e:c4:98:8b:
                    fd:df:07:a5:d9:56:15:8e:b9:99:e9:8b:9a:d8:fe:
                    ae:92:94:36:fe:e2:ad:3e:95:e7:3e:11:cb:12:66:
                    d0:5a:01:6f:dd:03:b1:16:f6:02:bf:f0:c1:2e:d2:
                    32:f2:9c:65:bc:ac:18:70:a8:fe:94:9c:2f:b3:33:
                    3a:10:6b:4b:86:dd:43:b8:e5:61:1a:67:08:21:0b:
                    1c:ca:fd:ac:ff:2c:48:1d:2d:99:e4:49:eb:f2:17:
                    cc:51:08:7c:f4:fb:51:95:4d:a9:44:a0:32:07:10:
                    7a:bb:45:2a:2d:c7:bb:c6:79:bf:41:ad:dc:19:67:
                    b6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:ED:C0:9D:26:64:8E:2E:7F:07:D6:D0:33:6A:81:0B:2A:56:A6:E3
            X509v3 Authority Key Identifier:
                keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:4a:81:1c:5d:4f:c1:aa:db:72:5d:d5:fe:df:af:5b:33:1e:
         9c:e8:1d:1b:7f:73:45:a2:c0:58:a5:22:ad:a5:fc:07:33:45:
         9f:33:d0:ab:9a:79:db:e3:56:4c:79:6e:a6:83:da:d6:77:f6:
         c2:3c:e5:8c:75:16:30:ce:e4:4f:c8:5e:dd:68:43:db:a0:e4:
         db:80:b8:38:1a:5b:51:8e:4b:c6:3d:82:d1:a6:b7:f5:27:f0:
         eb:19:a1:f1:50:ae:6d:6e:e2:2a:61:33:9a:d9:2c:82:fd:f5:
         a5:2b:44:42:03:1d:7a:3e:ee:48:77:5c:5a:6e:64:66:02:0f:
         eb:d0:bd:82:fc:0f:55:24:cc:7f:0a:50:5c:f7:2f:83:4e:e2:
         7e:80:4a:34:bf:06:f5:aa:04:22:f4:e1:9c:d8:0c:f2:62:de:
         88:ff:bc:1a:ff:35:8d:63:8f:66:ba:b6:9f:c3:9f:19:d7:15:
         38:b7:5a:b5:26:7a:0d:54:00:08:a5:8c:68:9b:1a:73:f9:09:
         b0:cc:d7:fe:8a:38:79:12:f0:87:d0:52:6f:a8:e5:75:e3:a6:
         8e:3d:5c:2b:f5:21:84:a3:33:61:a7:94:f6:43:d6:00:a2:69:
         2c:76:7a:1b:89:5e:8e:29:78:64:b0:da:cd:94:77:d5:0e:cf:
         41:85:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:01:46 2026 by rpki-client