Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File:                     enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier:          tH8m3HFRLJNQEphFkbkdWs8Do7tSitfbZFNMCAr78E8=
Subject key identifier:   4A:4B:DB:79:35:E2:39:8C:61:B8:C5:88:64:2D:6E:E4:98:A9:28:3C
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer:       /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial:       019EB98F46B65B678BE5BAD718EAF604A39C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number:          1953
Signing time:             Fri 12 Jun 2026 02:00:35 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:35 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:35 +0000
Files and hashes:         1: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: lxgxfIxyo5vbLz/HCZy5f+ZMgKFz486q60fEAy1z0WE=)
                          2: n2RXCHmE2mIVVK86mWjjYTONVEY.roa (hash: vfexF/zKDf9M5bj3mCjRl7MbjkVTZHBSgi+Kjne7g2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:46:b6:5b:67:8b:e5:ba:d7:18:ea:f6:04:a3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
        Validity
            Not Before: Jun 12 02:00:35 2026 GMT
            Not After : Jun 13 02:00:35 2026 GMT
        Subject: CN=4a4bdb7935e2398c61b8c588642d6ee498a9283c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1a:c1:be:a6:3a:d5:4a:36:d6:aa:44:ad:e6:
                    36:aa:da:7b:1f:23:0f:e3:17:2c:80:0f:e5:d9:d0:
                    6b:3e:15:b4:a8:63:b3:9c:5a:2c:e4:cb:ed:27:57:
                    ae:a8:37:f4:fe:4f:64:f4:5e:70:de:c0:1f:a8:6b:
                    88:35:e2:a9:bd:30:9e:1d:a1:bb:72:e8:39:c8:51:
                    49:56:90:46:21:1a:25:2f:b4:3d:9e:2d:c4:cd:11:
                    02:68:12:c3:25:71:85:81:0e:30:31:20:da:3c:55:
                    d9:23:72:c4:b5:81:06:d1:d9:3b:1d:97:ab:94:1e:
                    d2:73:eb:d2:21:62:69:75:fb:5e:3a:08:3d:d7:6a:
                    f8:12:c8:6b:92:3a:60:fd:7b:a8:19:47:44:1d:23:
                    8a:63:f5:2b:0e:e4:17:98:e1:8f:62:2c:9c:df:81:
                    96:8d:6e:e5:b3:28:a9:71:b4:22:78:70:d7:c2:d7:
                    23:e9:c6:66:c9:49:9c:69:7f:4c:42:b7:47:e0:e4:
                    59:e9:64:8a:c7:fc:70:b0:0c:a5:82:24:ac:b5:37:
                    9c:b0:7d:49:63:35:ec:32:02:d9:6b:69:a5:cd:1f:
                    16:38:2d:a2:d8:4b:f1:e1:08:6a:93:2f:4a:2f:47:
                    c1:1d:03:77:4e:28:1a:d2:87:d2:42:5c:24:dd:ea:
                    b8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4B:DB:79:35:E2:39:8C:61:B8:C5:88:64:2D:6E:E4:98:A9:28:3C
            X509v3 Authority Key Identifier:
                keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fc:9c:1d:32:95:23:bc:db:4e:6b:37:d0:41:96:33:96:e2:
         be:0a:f6:8d:57:0c:9a:ee:be:2f:89:fa:b5:c4:7f:9d:35:6f:
         42:52:43:2b:db:83:c0:9b:16:cc:65:c6:f4:a7:77:80:f4:74:
         bd:f2:9d:d9:f8:35:32:cf:fe:31:05:9b:9b:9a:e0:94:42:a9:
         2b:c3:b2:53:af:ed:89:61:3f:e7:96:ce:b9:63:6e:39:c5:6b:
         dc:7a:07:69:63:1b:3e:3e:47:1c:0f:92:c6:e3:5d:ac:23:5d:
         ca:3e:c3:02:f0:be:74:64:e3:a9:48:92:da:89:f3:a9:5f:75:
         ab:d4:d0:56:9c:6d:41:aa:1c:e2:66:3d:d9:76:cb:fc:c0:71:
         d1:b4:a1:4c:41:78:26:43:c2:ce:29:d5:31:a0:30:a0:79:11:
         08:a0:f4:50:40:5e:7a:f7:4b:0e:45:a1:4f:f9:0b:4d:a3:c4:
         69:cb:c5:65:bd:68:ba:53:dd:b6:35:31:d0:6b:e8:57:fb:24:
         27:db:a1:e0:41:2b:e2:98:80:b7:ba:75:10:44:56:9f:46:f3:
         be:53:cc:19:31:b8:e1:75:10:f4:22:22:22:8e:76:31:25:b2:
         3b:0e:7d:c0:6e:5b:04:9b:9b:53:cc:f3:ce:af:13:3a:25:ca:
         5d:1b:fb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:04:27 2026 by rpki-client