Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
File:                     ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft (raw, json)
Hash identifier:          K4bLnR48BCnW9d27dcEyBIoezz5O2HXv3eg+JweCbGU=
Subject key identifier:   0B:9C:2A:17:A5:18:5B:ED:5A:7A:8E:89:C3:73:36:7E:EB:7E:22:EA
Authority key identifier: 10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3
Certificate issuer:       /CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
Certificate serial:       019921B13EA4CA6F3CD6F2B920BCB02AB1F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
Manifest number:          0599
Signing time:             Sun 07 Sep 2025 01:01:27 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:27 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:27 +0000
Files and hashes:         1: ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl (hash: H1QNOg5CC9lcUrADhKBtnRtRWtaN4bDj1XNF0RoL//8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:3e:a4:ca:6f:3c:d6:f2:b9:20:bc:b0:2a:b1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
        Validity
            Not Before: Sep  7 01:01:27 2025 GMT
            Not After : Sep  8 01:01:27 2025 GMT
        Subject: CN=0b9c2a17a5185bed5a7a8e89c373367eeb7e22ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:fb:60:0a:ae:5d:05:39:ae:2c:8e:8e:4a:
                    75:65:2c:42:f1:6e:f7:9c:6f:a5:45:17:a3:74:49:
                    37:9a:40:17:6f:d2:10:0e:92:30:36:e8:51:37:63:
                    be:78:b6:99:34:89:23:e6:d5:e1:74:48:95:c1:d4:
                    03:1f:94:33:5b:f7:66:cd:32:61:47:8c:88:1a:df:
                    49:6e:80:7f:a0:61:a6:58:d7:be:39:f0:fc:f0:e0:
                    2a:8c:67:9e:38:a1:54:c0:b1:8c:23:f1:09:d7:46:
                    1d:b0:7c:3d:94:28:58:b4:a5:23:f0:20:65:03:af:
                    4a:d4:a4:59:85:ae:97:08:4c:b0:33:12:ad:f6:ea:
                    de:aa:ad:08:39:7f:f0:87:e4:3f:f3:2b:0c:39:fc:
                    84:9b:3e:4d:9a:a0:f1:97:1a:f2:f3:86:36:c5:c5:
                    0c:7a:37:bd:37:08:2a:60:cc:2d:20:d8:1d:28:bc:
                    cf:f0:a1:bc:13:04:ab:a0:3f:a5:77:6a:bd:99:e1:
                    b5:ab:07:83:e1:49:f6:f0:eb:c8:b3:7d:d6:70:30:
                    19:71:99:2a:30:19:8a:e1:50:06:b3:f3:b6:25:6f:
                    83:c4:d8:c1:1a:6d:41:ab:06:b5:e8:d8:24:3f:93:
                    5f:92:e3:d2:29:f3:42:18:ac:11:97:16:7e:5a:95:
                    9b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9C:2A:17:A5:18:5B:ED:5A:7A:8E:89:C3:73:36:7E:EB:7E:22:EA
            X509v3 Authority Key Identifier:
                keyid:10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:56:ef:25:32:74:66:68:a4:46:1d:a4:9c:48:23:69:5a:bf:
         60:e3:53:72:96:b6:78:2e:e4:77:3c:09:06:b8:8e:db:61:e1:
         ff:32:b3:93:70:f5:a9:0d:2d:3a:5a:5a:ea:d4:1d:df:86:c5:
         05:e4:6e:aa:11:2b:93:ae:17:24:15:a8:02:79:58:60:b0:58:
         d8:b8:05:c1:30:5e:fc:bb:a2:10:4f:5d:be:10:67:12:49:3a:
         21:1a:79:6d:f9:13:5f:0c:bb:31:0f:1d:e0:23:bb:62:1c:3e:
         c9:99:58:48:84:40:53:e5:03:15:89:5d:ab:c6:4e:a8:74:84:
         18:72:1e:36:92:f2:29:ab:23:db:41:ad:6e:84:5d:fd:cb:1b:
         38:6f:63:ef:17:17:30:e3:f0:14:c9:fe:50:f4:8d:74:d5:66:
         bb:c8:c9:75:20:59:4a:68:d9:a1:74:3d:07:2b:1e:cc:af:64:
         44:06:45:ce:da:97:dd:1c:14:0f:ac:11:db:04:ee:07:15:d3:
         65:a7:a4:47:52:74:7e:00:17:b0:7b:51:8b:b0:9e:c2:5a:80:
         f0:43:5e:e3:64:ba:fe:27:97:ff:5d:0d:50:10:f1:08:a9:a1:
         5e:ba:00:bb:40:e6:3b:7a:72:0f:c6:53:6f:a0:2b:03:98:7b:
         ae:b9:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:02 2025 by rpki-client