Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
File:                     ENJnhg06QDsA4aYcVDSs_265c5Q.mft (raw, json)
Hash identifier:          1ig8rnHCU4CagxrpLGyqQUizbSP5G2VjAGBNBJYpiGs=
Subject key identifier:   87:F2:EB:AD:41:96:D5:61:B0:34:B5:20:BE:92:C1:F9:19:E9:C7:1E
Authority key identifier: 10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
Certificate issuer:       /CN=10d267860d3a403b00e1a61c5434acff6eb97394
Certificate serial:       019A270AB277E5DC113C131CC5FADD896D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
Manifest number:          168B
Signing time:             Mon 27 Oct 2025 19:00:03 +0000
Manifest this update:     Mon 27 Oct 2025 19:00:03 +0000
Manifest next update:     Tue 28 Oct 2025 19:00:03 +0000
Files and hashes:         1: ENJnhg06QDsA4aYcVDSs_265c5Q.crl (hash: a/l9KzNad6ZkPgE8TaBRDdWVa88LesfxlxArR5XCQz8=)
                          2: dBEJ6Z4T0iJXRXy3ic-Gmbtq2zk.roa (hash: 2ngGgbsBeXS5oDaHpMWchshDHqxPpAQ3xlLFSQTtD/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 15:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:27:0a:b2:77:e5:dc:11:3c:13:1c:c5:fa:dd:89:6d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d267860d3a403b00e1a61c5434acff6eb97394
        Validity
            Not Before: Oct 27 19:00:03 2025 GMT
            Not After : Oct 28 19:00:03 2025 GMT
        Subject: CN=87f2ebad4196d561b034b520be92c1f919e9c71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:31:83:a9:2c:ee:6c:b7:2b:98:99:f1:00:ee:
                    86:ce:46:49:38:36:e9:69:76:36:71:18:16:0d:b0:
                    9d:e3:5d:50:cb:84:00:b0:5d:33:26:23:16:48:6b:
                    4f:3f:c5:be:71:03:fb:fb:74:37:38:65:5a:9f:c8:
                    53:ae:bf:66:1b:6e:2d:b8:3a:1b:0f:94:4f:a6:60:
                    f1:2f:2a:58:c8:0a:ae:a3:c7:3d:f4:4e:15:62:b3:
                    cc:94:c1:f7:17:f5:50:8e:e3:b1:f9:13:cb:c6:b2:
                    51:e4:7d:8a:bd:b6:12:8b:ea:79:11:b6:9b:47:09:
                    46:f8:8b:ac:5f:0e:2b:70:dd:5f:50:96:30:a5:7a:
                    e7:14:f9:69:5a:1d:1c:d3:26:f4:f6:d1:19:a1:fd:
                    3d:3e:dc:86:b1:6f:96:f7:f6:3f:25:d9:38:fe:19:
                    cd:56:02:4a:e7:cb:a5:60:9e:a7:6d:df:7f:92:fb:
                    fe:f4:ea:a7:6d:2a:97:f3:15:e1:af:31:b0:20:4d:
                    b8:fb:80:27:9b:99:73:3c:b8:d4:40:75:c7:2f:77:
                    6c:bb:a5:73:2e:f5:09:a8:b8:75:18:e4:e2:3f:a9:
                    4c:03:2b:aa:b8:aa:d4:c2:c4:48:34:96:b2:db:6d:
                    ba:f1:8f:6b:e3:52:37:0e:2c:66:54:5e:46:19:5e:
                    f4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F2:EB:AD:41:96:D5:61:B0:34:B5:20:BE:92:C1:F9:19:E9:C7:1E
            X509v3 Authority Key Identifier:
                keyid:10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:64:32:15:67:1a:70:5b:7e:68:db:53:1b:ae:09:1a:f0:3b:
         85:c5:00:67:08:32:63:54:18:f9:ee:2d:83:e2:dc:b0:c7:be:
         6d:31:d4:a1:84:9c:f4:ab:22:6a:42:20:47:cb:32:5a:d5:15:
         e8:b6:a1:2a:96:ec:1d:db:19:42:4b:18:93:c3:7c:4d:da:56:
         57:e8:f8:2f:4c:43:fb:68:ce:e0:4e:37:f4:df:a2:db:b4:dd:
         04:7a:0f:b0:c0:c3:69:cf:08:96:86:f3:51:85:56:9f:46:9c:
         d7:88:2e:85:58:e8:97:b5:5d:44:10:e5:2d:44:a1:ad:04:48:
         97:7f:12:f1:d7:ef:71:85:4e:47:10:9d:b2:2a:54:ed:8a:9a:
         c6:19:4a:38:96:c1:6f:53:bb:7f:69:46:9d:a1:ad:27:a7:62:
         cd:6c:d6:14:a0:9b:f3:cf:d5:8a:17:bc:09:f3:f4:88:e2:5f:
         55:a5:c6:93:a9:a1:eb:b5:7f:f1:96:da:f8:54:c0:c8:81:e5:
         ad:ca:d1:ae:57:94:44:5d:c0:55:dc:9d:e9:f2:07:c1:33:40:
         e0:ef:af:54:78:1d:0b:a3:21:d8:1b:87:e1:f7:d9:ce:ee:0b:
         cc:12:0e:a3:e4:80:fa:b2:c9:a2:20:e9:74:78:3a:42:0b:20:
         12:2c:98:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:38:50 2025 by rpki-client