Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
File:                     ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft (raw, json)
Hash identifier:          /I2ngGn3vF0q/SfBHvFUyTIH+sXdlcwsVjEmM5xBNcM=
Subject key identifier:   A2:0F:72:7E:F7:8D:C2:17:0C:82:14:52:C2:D2:5F:A3:0B:41:D0:4E
Authority key identifier: 10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3
Certificate issuer:       /CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
Certificate serial:       0199FDD8FF5942A40620D78E2CB3058B942E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
Manifest number:          060B
Signing time:             Sun 19 Oct 2025 19:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:20 +0000
Files and hashes:         1: ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl (hash: wzJzMS/XQ7khlGFeRuxMSdZZfoKY2ljMCC6WcS8r3vQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:ff:59:42:a4:06:20:d7:8e:2c:b3:05:8b:94:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
        Validity
            Not Before: Oct 19 19:01:20 2025 GMT
            Not After : Oct 20 19:01:20 2025 GMT
        Subject: CN=a20f727ef78dc2170c821452c2d25fa30b41d04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:65:4c:e3:6e:9f:d3:5c:3f:a7:c2:61:3e:1d:
                    81:11:74:d6:90:d8:5b:d6:62:31:7d:6f:70:25:92:
                    a5:fd:54:34:b0:2c:45:c0:41:0b:28:af:12:b0:39:
                    02:c5:1f:53:f0:2f:ee:4a:77:4a:f0:95:21:62:9a:
                    e5:e9:3e:94:f7:e9:db:24:4a:c8:0d:a3:fc:f5:0f:
                    c1:c0:4f:5b:2d:83:50:09:ec:83:ae:0f:90:a6:b7:
                    66:54:46:4c:2d:1f:44:61:13:49:dd:d9:70:9d:9f:
                    b9:df:93:ce:1f:5f:88:29:31:ba:94:3d:d0:f9:08:
                    5e:1a:c3:fe:4b:1b:cd:84:48:d7:a3:eb:88:de:85:
                    dd:79:9a:c9:03:55:e0:31:3d:f7:ea:7a:a2:22:e2:
                    18:d5:75:56:77:73:0f:5c:25:b2:12:7a:3a:dc:3a:
                    33:45:56:bd:8e:2b:3a:f2:d2:6d:78:a2:47:84:06:
                    2c:9b:a0:6f:1c:99:40:f8:de:db:e6:37:be:c4:22:
                    7e:9f:38:12:65:17:80:7c:5e:80:83:3f:af:a3:13:
                    e0:4a:01:c9:4a:d3:59:26:c7:04:04:ed:14:9b:41:
                    36:a6:a6:36:59:5e:db:6f:6b:d5:90:ba:bd:ce:d0:
                    1e:fa:b0:10:c8:44:88:ab:95:e9:f2:0c:33:45:3c:
                    c1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0F:72:7E:F7:8D:C2:17:0C:82:14:52:C2:D2:5F:A3:0B:41:D0:4E
            X509v3 Authority Key Identifier:
                keyid:10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:19:8a:d7:a3:c8:71:36:f0:8d:cd:ba:87:8f:31:70:28:80:
         cc:6e:d9:2d:cc:4a:69:25:ae:60:32:98:df:8c:ac:16:05:dc:
         54:c7:b8:83:c0:e3:94:23:ef:f3:9a:7f:84:3c:c2:c2:66:6a:
         b1:3f:8c:2c:f0:97:e4:a2:c3:68:48:57:4f:02:e2:15:5e:62:
         d1:45:5f:1d:c9:b8:c3:f3:2e:9e:a5:4e:52:3d:65:c4:1d:ee:
         9a:ca:8c:22:46:91:e6:9f:ab:74:d1:61:2e:99:fb:5c:8b:fb:
         de:b4:9b:4b:ae:df:9d:2e:4f:8c:03:1e:bc:e9:26:e0:18:1b:
         ca:98:51:84:f2:08:93:2f:2f:c9:82:8f:90:a4:62:d2:53:9f:
         d6:c5:f4:eb:c3:f5:ee:75:15:0d:87:69:8f:90:46:7a:e6:ba:
         54:72:a1:c1:24:c3:bc:30:84:f3:b4:33:ef:9b:4b:09:46:2a:
         c3:a2:92:e7:50:66:25:3b:a0:02:78:37:c1:07:0a:92:9e:92:
         96:79:98:8a:fd:9a:e5:79:ef:9b:39:ba:a7:ed:94:ed:56:39:
         6e:2a:f4:28:b1:43:a8:78:eb:dd:5e:76:1e:23:2d:cd:21:8f:
         da:03:ce:2d:b0:b3:65:13:8f:7a:d0:5d:ac:6e:8f:83:93:e5:
         b1:ce:ec:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:13 2025 by rpki-client