Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
File:                     EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json)
Hash identifier:          VwpbhaNxSSlSBO3FfLoO1W2/uk41rJnpoAfSO6Wd880=
Subject key identifier:   27:43:2C:45:E5:C3:25:00:62:CA:9B:AC:7A:F2:53:9C:87:3A:5F:51
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Certificate issuer:       /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial:       01A15F6936F41B6990A4DA86CDF77A6559D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
Manifest number:          10DC
Signing time:             Wed 21 Oct 2026 17:01:33 +0000
Manifest this update:     Wed 21 Oct 2026 17:01:33 +0000
Manifest next update:     Thu 22 Oct 2026 17:01:33 +0000
Files and hashes:         1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: wQwHk2HNlT0tLMQCYXxotkN3KlCZanE5pZMkQdPKJg4=)
                          2: td4dGRbuQXuKOfRIriO4IH6YFGY.roa (hash: h708rv3/l6vNPHP6e/EPvLnr8GERga9y5D+OKNGmAAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 17:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5f:69:36:f4:1b:69:90:a4:da:86:cd:f7:7a:65:59:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
        Validity
            Not Before: Oct 21 17:01:33 2026 GMT
            Not After : Oct 22 17:01:33 2026 GMT
        Subject: CN=27432c45e5c3250062ca9bac7af2539c873a5f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:47:45:ec:89:59:75:c1:5a:53:3e:d1:1a:
                    b4:6a:3c:f1:7a:02:73:9d:7b:ce:e3:64:bd:8c:4e:
                    e0:dc:2c:7b:05:a7:7c:7e:9d:62:83:4d:7e:ec:b6:
                    40:b2:1b:0f:48:ce:51:77:dd:0e:b9:87:2b:9a:6e:
                    fa:d0:27:3b:05:d2:6f:64:84:e4:3b:68:a8:71:51:
                    5f:d2:10:b8:94:8e:9a:c6:95:45:82:8f:16:04:e8:
                    4c:a9:12:64:07:34:dc:ee:e9:23:14:47:ff:5b:05:
                    28:00:37:14:71:7d:1c:f6:59:47:87:c1:1d:e4:50:
                    c3:ad:d7:52:72:60:eb:03:90:34:e0:cb:73:ca:ef:
                    d0:01:21:5e:8b:8a:5a:04:69:46:54:95:5c:0f:aa:
                    60:9a:5f:0a:e4:ba:2d:9a:3b:ed:d9:a0:39:59:71:
                    34:d5:26:92:81:95:c0:b8:83:82:2e:47:f7:52:e2:
                    16:a2:53:ea:68:fd:c7:3a:7f:fd:a9:2b:65:e0:81:
                    59:d4:8a:96:f0:58:bd:6d:a1:9f:07:62:23:ce:62:
                    a8:ca:0b:c4:a7:ac:1d:d3:37:97:5d:51:7f:38:d2:
                    58:25:91:b3:b7:b2:1b:5e:ad:c7:dd:be:4f:cb:f0:
                    e2:20:2f:bb:53:55:a2:72:6e:9d:d5:21:ce:b6:e7:
                    d1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:43:2C:45:E5:C3:25:00:62:CA:9B:AC:7A:F2:53:9C:87:3A:5F:51
            X509v3 Authority Key Identifier:
                keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:17:9c:bb:2d:a1:6d:d8:7b:92:99:c0:20:76:40:74:c0:c1:
         b2:eb:59:e9:7a:58:9a:c5:f9:11:e6:bd:61:58:36:9c:1f:ea:
         7f:4e:41:96:50:77:66:11:06:10:85:1f:b3:a8:c4:76:3d:59:
         7b:fa:d5:53:83:8c:5c:dd:d2:d7:3a:1e:9f:30:b5:e3:59:33:
         36:1a:3a:7f:b4:0e:fa:6b:0a:38:02:ca:1f:48:ff:03:af:a0:
         2e:4d:b1:31:0c:24:32:ec:a3:5c:be:0a:87:43:c1:96:5b:6b:
         e2:23:91:aa:82:56:aa:b8:76:a5:2a:d9:db:74:80:eb:ff:64:
         61:ad:34:15:a1:72:aa:c8:b8:a0:04:55:65:cf:2f:c4:ac:32:
         63:1c:b1:9b:83:01:4d:20:12:6d:e8:39:20:c8:37:85:7a:ed:
         5f:09:d2:aa:63:e9:44:c7:7f:23:84:87:d9:50:5b:ea:b6:ef:
         43:0f:2f:81:72:45:e9:fe:68:e0:14:1a:b9:07:1b:8e:08:4a:
         21:ce:e3:99:02:de:a3:ab:d8:db:01:5c:f3:ec:43:f2:17:b9:
         a4:b9:8f:08:ca:1d:61:04:68:14:f6:c0:3f:0f:fb:96:98:b0:
         74:25:7f:16:0b:c7:a6:d4:95:dc:9c:59:ab:b9:bc:34:55:cb:
         6e:d9:24:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:18:54 2026 by rpki-client