Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft
File:                     Enr2xpNXOiJwySN4dUVsLfC1A8I.mft (raw, json)
Hash identifier:          5u2NQxCFKjR/zQFCSQpgFNaWlxGcDOG0uom/9XsKamw=
Subject key identifier:   D7:CB:E7:8C:55:14:FD:D5:E3:59:54:A6:5F:FD:F2:F2:67:77:03:8F
Authority key identifier: 12:7A:F6:C6:93:57:3A:22:70:C9:23:78:75:45:6C:2D:F0:B5:03:C2
Certificate issuer:       /CN=127af6c693573a2270c9237875456c2df0b503c2
Certificate serial:       019A71B7F43D2B79062ECD0DC840A083929C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft
Manifest number:          0B6B
Signing time:             Tue 11 Nov 2025 07:01:12 +0000
Manifest this update:     Tue 11 Nov 2025 07:01:12 +0000
Manifest next update:     Wed 12 Nov 2025 07:01:12 +0000
Files and hashes:         1: Enr2xpNXOiJwySN4dUVsLfC1A8I.crl (hash: LmjO66Sgt517QBon06DtsOCAQsrxjjIezymAA6p/JFg=)
                          2: VDxX1bu_IneAzz4Yg7mHL9qU8nI.roa (hash: wTZ4abffSQNMN+9KEZc/y4JfVZ87xDtbLN5IYZv+F0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b7:f4:3d:2b:79:06:2e:cd:0d:c8:40:a0:83:92:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127af6c693573a2270c9237875456c2df0b503c2
        Validity
            Not Before: Nov 11 07:01:12 2025 GMT
            Not After : Nov 12 07:01:12 2025 GMT
        Subject: CN=d7cbe78c5514fdd5e35954a65ffdf2f26777038f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:78:ed:1d:e8:a6:e6:9b:b8:e7:92:c5:5b:76:
                    a3:dc:8f:70:39:5b:0b:bc:db:21:e3:76:0a:54:ce:
                    f5:10:32:f7:24:4c:ff:d1:35:75:df:84:f6:0b:ac:
                    fd:99:5d:d8:3a:33:d9:85:cc:26:9e:6a:fd:09:17:
                    ad:4f:c4:9e:e9:ca:65:b7:0a:fb:dc:a1:c5:98:2d:
                    54:7d:5c:71:dc:9a:6d:32:3f:f4:42:4b:74:09:58:
                    86:f0:06:ed:82:a8:a8:6b:db:86:66:41:11:58:b2:
                    44:72:af:1a:ca:67:fb:47:f8:ee:6a:b5:4d:3e:1c:
                    14:ab:92:dc:b1:97:06:45:ab:5e:14:ae:f5:3c:7c:
                    9c:5b:af:58:ee:36:41:13:07:18:56:62:90:86:6f:
                    9e:87:50:ba:07:05:f4:90:aa:2c:e0:10:c5:f4:86:
                    58:93:8c:ee:2e:e8:b2:7f:b0:cf:37:5d:7d:88:34:
                    e4:c4:63:df:eb:de:59:7b:b3:32:89:9f:00:f0:e5:
                    0d:f0:32:8e:05:4f:df:90:d7:d3:6c:0b:fc:ea:68:
                    5c:75:22:5e:47:31:35:6d:3e:60:b4:65:e5:af:b0:
                    17:17:96:b0:a0:1e:8a:8c:2f:f9:6b:7d:23:92:f4:
                    ce:b0:4b:eb:89:ed:b9:45:90:f5:a0:f6:72:26:e6:
                    0b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CB:E7:8C:55:14:FD:D5:E3:59:54:A6:5F:FD:F2:F2:67:77:03:8F
            X509v3 Authority Key Identifier:
                keyid:12:7A:F6:C6:93:57:3A:22:70:C9:23:78:75:45:6C:2D:F0:B5:03:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:93:7e:35:64:2f:b3:e1:bd:19:c1:71:ba:ff:56:7a:7e:d9:
         8e:06:70:90:b6:f5:c3:30:1a:59:dc:47:16:fd:08:a7:99:b0:
         d9:9f:b8:cb:4e:64:a5:b8:13:cd:7e:d4:f6:2b:a6:58:c6:e0:
         eb:57:26:7f:a1:94:1a:8a:cd:a2:98:a0:66:c9:95:e4:ba:ae:
         de:55:6e:1a:4b:cb:84:4f:c0:a3:d6:6b:b3:d4:ee:a1:27:aa:
         fb:37:40:09:0e:9a:11:da:56:ca:8e:77:ca:5b:af:a1:cc:47:
         df:57:fc:40:9f:19:08:17:c3:a7:57:8f:93:bf:ac:61:47:38:
         2e:d6:c9:8f:a5:f5:0b:dc:88:01:ac:e7:38:e1:26:1f:23:59:
         e6:46:54:bc:a5:43:74:98:cc:a2:37:03:67:6b:f3:69:df:cf:
         d6:7e:8f:d4:da:79:b9:4c:0a:ca:4b:be:fb:02:aa:38:ae:48:
         56:fb:f8:ef:2a:1a:6d:a7:eb:5a:49:9f:3e:5d:94:26:9a:6c:
         58:22:5b:3b:f1:bd:93:2e:09:ca:8e:49:88:eb:e7:6c:89:40:
         e1:3d:22:1e:dc:34:b4:c9:7c:c1:6a:26:4c:ca:4f:3d:06:fc:
         63:74:99:cb:52:73:e3:05:9e:3c:6a:42:f6:20:46:fd:87:b3:
         60:be:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:12 2025 by rpki-client