Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File:                     enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier:          Grtxs2SfOQN+TLcFqSCLehyF8kNmh1zza678TEQu7TU=
Subject key identifier:   8E:2D:92:19:BB:C5:AE:9A:EF:7E:0E:E8:D7:4D:06:29:C4:13:21:34
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer:       /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial:       019849D3A8AC30012FFC699C63E414AC48CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number:          15FD
Signing time:             Sun 27 Jul 2025 03:01:04 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:04 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:04 +0000
Files and hashes:         1: 8XlQvIDhpPQ41b7UH7Z2sRM6eGI.roa (hash: yZNJig4JgY1DsDIZ1QJlrtuiOKYOnriud1FD+SZ6qrQ=)
                          2: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: OEf6AqqfqYFbzfBNv++v2+7ob0tM5baSdk7mo6XXR2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:a8:ac:30:01:2f:fc:69:9c:63:e4:14:ac:48:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
        Validity
            Not Before: Jul 27 03:01:04 2025 GMT
            Not After : Jul 28 03:01:04 2025 GMT
        Subject: CN=8e2d9219bbc5ae9aef7e0ee8d74d0629c4132134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:78:d7:cc:65:68:48:2c:af:07:85:ea:e4:
                    28:be:21:79:84:cc:81:55:00:77:0b:d4:cb:6d:d7:
                    09:84:7b:9f:24:c7:aa:ba:b1:72:eb:1d:ac:96:e4:
                    77:a3:ca:49:09:ab:05:37:38:2c:aa:bf:6b:2f:ec:
                    13:97:d3:44:51:de:ed:94:19:57:d1:b3:49:ae:4d:
                    3c:5a:82:86:23:e7:87:16:7f:2e:ec:c7:e3:db:b0:
                    78:81:a7:be:c2:43:54:74:66:43:1e:26:cf:87:47:
                    65:7f:52:b6:58:ff:e8:2d:3e:03:34:3d:d3:a7:4d:
                    dd:14:f9:56:05:32:45:b9:e3:19:2c:1c:ec:5b:ca:
                    3d:9a:4d:09:a6:58:5e:12:96:e1:61:c3:f9:06:bf:
                    08:70:f0:98:fe:9e:2b:5c:26:74:89:37:b3:63:5c:
                    57:8f:c3:e6:b7:34:d2:ea:8b:ea:6b:cb:a1:4b:9e:
                    35:d2:d2:45:98:ff:58:b9:ec:12:2a:b4:37:cd:7d:
                    4a:3f:3e:f5:ac:5b:3b:59:88:72:a9:57:7c:c4:33:
                    35:79:9d:20:35:12:ac:ae:bb:ce:59:dc:fd:75:81:
                    b3:33:f2:a6:e7:e1:64:61:21:cb:c0:69:e6:99:a3:
                    a8:db:61:0a:ea:8c:b4:01:2b:c7:bd:0b:05:9d:57:
                    6d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2D:92:19:BB:C5:AE:9A:EF:7E:0E:E8:D7:4D:06:29:C4:13:21:34
            X509v3 Authority Key Identifier:
                keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:2f:07:10:c8:3a:4c:57:49:a2:62:05:e1:01:c2:79:5e:95:
         8a:75:62:be:76:16:6d:5c:4c:03:a4:23:33:44:dc:ce:1e:e1:
         d8:38:5c:71:8a:f7:02:59:13:97:83:19:2c:9c:21:f5:77:d6:
         7a:55:c1:a9:81:01:74:83:86:bb:3e:21:d2:47:4f:1a:3a:ea:
         f8:fb:41:ae:a7:ef:82:06:43:ac:8c:80:6b:52:e3:90:b8:b2:
         a8:e0:0c:ea:41:5c:66:9f:61:2a:6b:3b:bc:19:c7:8d:75:92:
         cb:58:b4:34:5b:8d:20:32:6a:a3:06:47:3c:23:7d:27:33:d1:
         fa:aa:4f:e9:f3:f3:79:15:99:28:79:2e:73:58:71:3c:b3:a0:
         e5:9e:26:a6:9d:d4:1e:cf:59:06:90:f2:6e:cd:81:01:26:a4:
         a1:81:8a:f5:c6:c8:31:77:df:1f:2f:79:3d:d2:df:29:bc:43:
         f6:4d:ce:6d:81:b6:6d:ea:9e:5a:56:70:c4:c7:16:10:b8:87:
         73:45:85:83:0b:68:39:73:e5:1e:66:79:2f:d7:33:f5:ef:7a:
         41:4f:dd:a9:57:c1:29:6d:b4:69:4d:88:7b:1f:e9:00:8c:ea:
         a6:7f:73:bd:03:82:e4:ad:f6:fd:34:a9:83:ad:28:11:2e:0c:
         bd:b1:b9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:20 2025 by rpki-client