Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
File:                     ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft (raw, json)
Hash identifier:          A/rAPsX6OUgTnQreNmZnnWmnoUjD5NJG8xuTRe3DxGA=
Subject key identifier:   6E:C9:A3:73:9E:CA:8E:CE:00:55:A6:86:4E:23:B8:8C:69:9C:97:E8
Authority key identifier: 10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3
Certificate issuer:       /CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
Certificate serial:       0198D65FEA5620CA60A6CD3BFE24D5758E3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
Manifest number:          0572
Signing time:             Sat 23 Aug 2025 10:01:06 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:06 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:06 +0000
Files and hashes:         1: ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl (hash: soTj41UYeKyAlg4y2WtdS1uZVI9BXJy4LT60X9VKnNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:ea:56:20:ca:60:a6:cd:3b:fe:24:d5:75:8e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
        Validity
            Not Before: Aug 23 10:01:06 2025 GMT
            Not After : Aug 24 10:01:06 2025 GMT
        Subject: CN=6ec9a3739eca8ece0055a6864e23b88c699c97e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:a7:57:32:04:b2:b9:fb:59:97:bb:5c:79:
                    98:e5:db:be:08:d6:e8:15:49:e5:fa:12:3f:64:c1:
                    f2:c3:60:35:83:06:2b:a3:9d:a3:b3:ac:f7:25:3c:
                    27:41:8a:6b:22:7c:74:c5:9b:8d:97:67:f7:48:90:
                    8d:04:a2:e8:72:28:09:f9:0d:be:37:1c:e0:1f:a8:
                    bd:7c:8e:65:52:0f:d0:e2:56:3b:91:49:cc:ab:cd:
                    5c:ae:ef:93:c8:24:3f:ff:fb:f6:a2:2f:00:20:92:
                    80:b7:d3:9c:f0:80:e4:3a:16:4f:0e:26:6a:1a:a9:
                    24:13:c9:18:8d:d0:69:bb:a4:ce:ec:34:fb:1a:50:
                    54:76:57:77:15:37:11:85:25:59:1f:32:ee:d3:de:
                    27:5d:5c:ba:9a:e5:51:77:71:62:73:6d:cf:5d:25:
                    fb:ab:b7:20:c7:10:34:37:2a:ef:ed:fa:ed:59:f2:
                    b9:f2:9a:f6:1f:10:6d:5f:d3:4c:b3:dd:a4:d3:27:
                    35:dd:e7:62:e2:ec:aa:1f:ca:76:aa:04:3e:68:07:
                    43:bc:75:ae:2a:78:00:91:a1:1a:d3:42:25:4c:21:
                    54:09:44:ce:cc:cc:f1:9e:c7:c2:d2:2e:18:f4:45:
                    e8:78:a7:5e:36:97:ad:62:48:24:ce:47:b0:96:39:
                    0b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C9:A3:73:9E:CA:8E:CE:00:55:A6:86:4E:23:B8:8C:69:9C:97:E8
            X509v3 Authority Key Identifier:
                keyid:10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:07:a9:6a:fe:59:0e:a4:c5:e7:c8:5a:f5:b8:6b:e2:ce:fc:
         a9:75:c6:d9:f2:c8:ef:68:7c:90:3d:78:94:bf:fc:d2:c1:c6:
         9b:b0:a5:b7:31:ce:85:06:4d:d6:db:a0:cf:d0:12:36:8a:4b:
         bf:a6:29:6c:0f:0d:b5:19:0a:c6:83:d8:14:9d:66:c2:3d:e2:
         40:d2:ce:a5:40:48:fa:eb:33:a3:54:5d:e7:33:7d:53:1e:4f:
         4d:03:ef:4c:45:38:ee:1c:27:fa:54:fa:f2:74:18:d4:97:6b:
         cd:d8:9f:8a:e7:0f:75:f2:76:70:e3:87:ef:5f:a1:83:24:5c:
         dd:f3:57:97:3d:93:32:62:7d:a8:11:1b:4d:ec:b5:f4:7b:bf:
         5a:87:39:0f:20:2b:30:6e:3c:27:bc:f2:dc:79:b0:30:da:e8:
         f4:82:ab:4e:71:2a:14:dc:7b:fd:fc:7f:92:b6:87:2d:07:b9:
         32:f2:c6:81:b0:a1:22:bc:fb:54:b1:da:e5:f4:6f:47:ea:34:
         fe:67:3e:53:c1:f0:e6:e4:a6:dd:db:f9:00:a0:d3:5d:4b:fd:
         82:03:6d:9b:ae:1f:66:47:7c:eb:2e:97:df:20:37:bd:59:33:
         01:b6:6d:56:71:83:c9:85:06:01:78:49:f2:15:e9:f2:08:db:
         5c:a1:15:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:39 2025 by rpki-client