Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft
File:                     enzxoqqDsSb_TO70c6Rzl6v4_w0.mft (raw, json)
Hash identifier:          lUbk8emDZ8VHq95Tlm5EyRHSQXa7GHlTNhPlS1rfydg=
Subject key identifier:   F6:5B:70:A7:78:C6:CE:CE:B3:A2:15:77:00:27:4F:11:AE:D0:B9:38
Authority key identifier: 7A:7C:F1:A2:AA:83:B1:26:FF:4C:EE:F4:73:A4:73:97:AB:F8:FF:0D
Certificate issuer:       /CN=7a7cf1a2aa83b126ff4ceef473a47397abf8ff0d
Certificate serial:       0199FCFDADFF4C47FA5B6492B3AC2FFBC541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft
Manifest number:          13D2
Signing time:             Sun 19 Oct 2025 15:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:47 +0000
Files and hashes:         1: enzxoqqDsSb_TO70c6Rzl6v4_w0.crl (hash: DF2JVqqEEBYDWnVKeoeZINwB31EBYL9iwxdEcU5kGJU=)
                          2: xb2NvHdajED54_SL3MKVNIAlUGs.roa (hash: Grou1zplFJxqish9A4XkxSqO0Yr0gOy017NWwV2yOds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:ad:ff:4c:47:fa:5b:64:92:b3:ac:2f:fb:c5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a7cf1a2aa83b126ff4ceef473a47397abf8ff0d
        Validity
            Not Before: Oct 19 15:01:47 2025 GMT
            Not After : Oct 20 15:01:47 2025 GMT
        Subject: CN=f65b70a778c6ceceb3a2157700274f11aed0b938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:f5:bd:7e:ba:52:a9:9c:ba:ae:0c:10:7c:
                    4f:93:a4:a7:f6:3f:6f:b3:a3:d9:65:b2:ec:d5:25:
                    a3:85:b4:1e:78:37:e7:69:49:30:dc:a7:a3:a1:13:
                    a5:b4:25:6a:8c:ad:75:0d:fc:30:3a:d8:fc:fe:b6:
                    38:48:ee:31:71:52:2f:56:56:e8:67:4a:e9:70:6f:
                    06:5b:03:e0:59:1c:00:a7:de:0e:29:08:aa:4e:c6:
                    a8:d3:2a:9f:d6:21:8a:59:4c:6f:b4:19:4b:4a:ca:
                    3b:13:b2:51:bb:2b:2c:98:b8:19:79:da:bd:bf:aa:
                    74:b8:cf:91:69:98:45:77:b7:04:4f:e9:f2:a4:50:
                    ea:ba:ac:52:17:c4:dd:2a:87:b5:2f:6d:92:7b:a6:
                    f4:58:1b:f9:65:1d:fa:d5:1b:89:3e:57:c0:db:b1:
                    a5:39:28:c3:cc:b7:4f:76:96:02:7d:e8:46:e9:d8:
                    64:a1:2c:16:c5:c6:08:00:81:f4:8a:a2:a9:1f:26:
                    0e:5c:03:67:4d:15:87:12:e7:c8:d7:38:5e:cb:4c:
                    44:17:9d:d2:f6:73:f8:38:ed:f9:0c:6d:e2:28:93:
                    7d:5a:da:40:bb:05:f8:16:4e:cc:a9:62:4e:86:a0:
                    4b:0f:35:3a:f6:35:29:79:54:c0:07:60:92:0d:93:
                    c6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5B:70:A7:78:C6:CE:CE:B3:A2:15:77:00:27:4F:11:AE:D0:B9:38
            X509v3 Authority Key Identifier:
                keyid:7A:7C:F1:A2:AA:83:B1:26:FF:4C:EE:F4:73:A4:73:97:AB:F8:FF:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enzxoqqDsSb_TO70c6Rzl6v4_w0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8af8e6-19c1-4be1-af23-19916a4aeeb3/1/enzxoqqDsSb_TO70c6Rzl6v4_w0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:14:54:23:ec:e2:e6:51:a8:b9:06:fc:1f:af:cb:e5:e0:e9:
         f3:d1:f9:d0:a3:22:b0:86:1c:c7:a5:8e:ea:a9:cd:f3:0b:1e:
         b9:fe:32:23:1c:f2:01:60:b8:48:5d:29:53:18:dc:23:bf:26:
         bc:ba:18:e7:31:82:9c:35:c5:ab:d2:27:64:c6:7d:d6:d4:80:
         e3:26:9b:98:ee:82:89:f0:d8:5c:1c:43:9a:19:2a:3b:54:d8:
         55:52:d1:03:30:95:39:b1:a8:74:a0:9c:85:f4:3a:d0:40:f5:
         da:71:57:3a:58:7e:e2:39:ff:c1:e8:a0:ef:67:7d:53:8a:f0:
         f7:56:0d:bb:9c:8a:12:52:24:4c:0d:39:6d:29:3a:42:e2:bb:
         de:60:41:1f:02:be:94:b6:5a:06:dd:01:15:7b:6c:1a:35:38:
         74:85:e7:b4:f2:21:4a:37:12:4c:54:93:df:05:a3:60:79:0d:
         b6:65:eb:37:e2:6e:2a:f3:1f:75:05:07:f5:25:7e:72:81:be:
         ea:f1:4c:7a:ee:1c:55:5b:07:3f:5b:a2:f8:fa:2f:d2:b4:36:
         98:2a:b7:a1:fb:0c:b7:fd:f7:fc:8e:91:31:67:61:fb:3c:dd:
         13:be:d8:e0:13:5e:4b:5e:b4:4f:1c:f8:d2:f0:c5:38:ff:60:
         d5:3e:0b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:58 2025 by rpki-client