Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/ENBX6g_-NsF3H2sGPdRMIqcO64c.mft
File:                     ENBX6g_-NsF3H2sGPdRMIqcO64c.mft (raw, json)
Hash identifier:          dTTeyzkWYjG60Z6nkntXCQyv5XqauBWrmxAxNQlnuRo=
Subject key identifier:   F6:D8:DC:79:8E:B7:DB:07:7A:F1:ED:D4:5E:2D:A6:DA:A3:AC:59:C4
Authority key identifier: 10:D0:57:EA:0F:FE:36:C1:77:1F:6B:06:3D:D4:4C:22:A7:0E:EB:87
Certificate issuer:       /CN=10d057ea0ffe36c1771f6b063dd44c22a70eeb87
Certificate serial:       019D3A541DB33B6B8CCB9E4045A9551F57F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENBX6g_-NsF3H2sGPdRMIqcO64c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/ENBX6g_-NsF3H2sGPdRMIqcO64c.mft
Manifest number:          18
Signing time:             Sun 29 Mar 2026 16:01:24 +0000
Manifest this update:     Sun 29 Mar 2026 16:01:24 +0000
Manifest next update:     Mon 30 Mar 2026 16:01:24 +0000
Files and hashes:         1: ENBX6g_-NsF3H2sGPdRMIqcO64c.crl (hash: 9biSAu/BCiXI6VrP8IGroYEP89QYcnsuXMZmABZaFFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/ENBX6g_-NsF3H2sGPdRMIqcO64c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/ENBX6g_-NsF3H2sGPdRMIqcO64c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENBX6g_-NsF3H2sGPdRMIqcO64c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:54:1d:b3:3b:6b:8c:cb:9e:40:45:a9:55:1f:57:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d057ea0ffe36c1771f6b063dd44c22a70eeb87
        Validity
            Not Before: Mar 29 16:01:24 2026 GMT
            Not After : Mar 30 16:01:24 2026 GMT
        Subject: CN=f6d8dc798eb7db077af1edd45e2da6daa3ac59c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f5:cb:00:93:cf:a9:63:b3:12:7d:46:26:19:
                    47:99:89:86:f7:ea:27:5a:25:5d:c6:80:eb:c9:7c:
                    40:cd:e5:27:0c:e5:19:6f:70:74:17:e6:41:ea:7f:
                    47:7b:86:9e:76:fb:69:d5:b2:c9:ba:8e:a5:24:c4:
                    81:4d:14:e3:46:c7:92:eb:a1:b1:b8:ad:ad:9a:5c:
                    7f:7b:b3:44:d3:9f:15:76:5f:8b:99:f8:0b:8c:c1:
                    08:44:f6:37:e7:7b:b2:a5:de:19:32:0b:7f:8f:74:
                    7f:d3:4f:55:71:8e:44:3d:c9:fd:fb:f6:5a:2a:54:
                    16:d4:2d:0e:11:78:27:1e:63:ee:99:7f:9a:3e:20:
                    f4:48:f0:ea:7b:3f:69:eb:a3:e8:ba:24:f5:d1:34:
                    86:90:22:5d:53:80:e9:52:e6:53:7a:2a:2e:9c:fe:
                    8d:82:f8:5f:3b:a8:1f:4a:d9:e4:b8:89:f3:de:4c:
                    42:cb:01:5b:20:c2:df:1a:e9:77:fa:8c:f9:3f:5c:
                    2d:f9:19:3f:fc:32:f4:de:6b:cb:2b:65:cf:74:d8:
                    df:95:57:89:9d:66:f8:72:49:94:78:27:3b:16:e4:
                    96:b7:f3:f8:64:c9:a0:ce:18:88:c6:a3:0f:94:3a:
                    4d:0b:c5:ca:7d:34:6d:07:a0:80:fc:94:fe:ce:6f:
                    4d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D8:DC:79:8E:B7:DB:07:7A:F1:ED:D4:5E:2D:A6:DA:A3:AC:59:C4
            X509v3 Authority Key Identifier:
                keyid:10:D0:57:EA:0F:FE:36:C1:77:1F:6B:06:3D:D4:4C:22:A7:0E:EB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENBX6g_-NsF3H2sGPdRMIqcO64c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/ENBX6g_-NsF3H2sGPdRMIqcO64c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/ENBX6g_-NsF3H2sGPdRMIqcO64c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fd:95:d9:f5:3d:d4:95:d0:46:00:ec:9f:e4:f3:64:ae:24:
         0a:6f:73:82:77:fb:ec:c1:29:31:9c:c5:e7:82:9d:fb:48:d9:
         63:69:11:4d:a4:a3:c1:aa:de:f0:ec:a8:e4:d2:cf:22:34:c4:
         2b:38:a3:10:73:08:2e:95:cf:4e:21:ca:70:7a:a9:7e:f3:e5:
         87:43:7c:31:51:d8:26:53:70:a8:4a:85:23:90:3e:a9:c0:02:
         40:fe:7a:90:57:e1:fe:bc:fa:94:b5:2e:82:e3:d0:dd:01:df:
         90:43:96:60:2e:89:3d:7e:41:90:ca:9d:5b:11:55:05:83:b9:
         41:b3:c4:9a:0f:d5:0b:59:15:32:71:1c:75:f5:73:08:07:3e:
         2d:9c:4a:04:a5:a3:92:39:68:ee:31:31:04:88:0c:50:c3:ee:
         a2:94:7e:4a:9d:73:1c:41:6f:72:31:07:ed:28:23:88:73:9e:
         e9:b5:4d:f6:3d:5b:51:de:bc:31:20:36:67:ce:17:b5:1b:df:
         ff:f9:d9:e6:b5:da:ec:10:f0:5a:03:0b:50:ec:ef:2d:23:a6:
         5f:74:04:f2:e8:de:19:7a:3b:99:fe:ad:99:e9:2a:c3:26:d8:
         1f:1f:5d:bb:79:79:b1:bb:78:47:90:1b:44:bb:6c:d0:a0:e6:
         54:6b:b8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:30 2026 by rpki-client