Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
File:                     ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft (raw, json)
Hash identifier:          MzdtIHwE6wsWDj8mR+tVZIqJaWNbT3HyOVriBaChiCc=
Subject key identifier:   C4:DF:1B:1F:5B:B1:7B:E9:52:27:75:73:89:B3:B0:89:0A:33:15:E3
Authority key identifier: 10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3
Certificate issuer:       /CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
Certificate serial:       01A13DB80D466F63AC439CEE3D43F324C912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
Manifest number:          09CC
Signing time:             Thu 15 Oct 2026 04:00:34 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:34 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:34 +0000
Files and hashes:         1: ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl (hash: 3WHok+elfGAUH6EHRQ9yz7iX4KExxPQkMrw1GpafqMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:0d:46:6f:63:ac:43:9c:ee:3d:43:f3:24:c9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
        Validity
            Not Before: Oct 15 04:00:34 2026 GMT
            Not After : Oct 16 04:00:34 2026 GMT
        Subject: CN=c4df1b1f5bb17be95227757389b3b0890a3315e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:7d:f7:cb:0d:35:7e:aa:94:97:4e:b5:dd:
                    c8:c2:18:b1:85:1f:e1:db:9c:73:0a:c3:d7:ec:63:
                    e3:9d:22:a5:c5:a0:dc:a9:cb:7c:21:6f:39:e8:f2:
                    88:b5:24:9b:84:43:5a:c1:2b:96:99:c2:39:34:d5:
                    45:e9:92:e3:3d:29:94:92:08:ba:7e:38:50:17:36:
                    13:f7:e9:56:62:12:ad:11:b0:7a:14:52:02:f2:12:
                    71:6e:4d:9d:83:e4:8c:0f:96:25:69:17:35:7e:38:
                    23:37:9a:38:6e:c7:d8:b4:fe:8b:2f:7e:71:a6:64:
                    c1:42:b6:40:9f:4f:70:a7:63:07:0e:33:1f:e0:71:
                    a3:a5:61:72:55:4d:b2:e1:c8:96:2e:02:0f:91:3a:
                    09:4a:10:fa:dc:cf:d2:84:11:b9:be:e9:39:1e:5b:
                    aa:58:32:55:6f:45:56:9c:20:69:67:04:03:7a:4b:
                    1a:a4:74:6f:83:c0:ef:13:cb:77:37:02:85:53:b1:
                    a2:38:3a:18:14:f6:79:82:6c:2d:f2:90:2d:7c:de:
                    19:63:91:62:bd:82:c4:dd:0a:60:92:06:df:10:48:
                    0e:14:31:de:a4:ba:f3:03:27:36:bf:26:1f:66:a1:
                    43:fd:0d:16:4b:b3:b8:52:55:6e:c6:0c:04:07:73:
                    94:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DF:1B:1F:5B:B1:7B:E9:52:27:75:73:89:B3:B0:89:0A:33:15:E3
            X509v3 Authority Key Identifier:
                keyid:10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:81:47:55:48:0e:06:d5:c6:e8:71:8f:f3:ce:e5:83:eb:f1:
         8a:6c:25:3e:c0:11:ee:f8:81:bb:4d:34:2d:cf:01:49:2a:be:
         4b:21:e3:9d:e4:8e:9e:9e:c2:3b:44:a6:91:81:ae:fd:bf:34:
         31:5d:9b:18:01:16:88:f8:34:91:48:ed:69:8d:dc:4f:d2:3a:
         b1:7a:fc:2d:82:d0:80:2c:a7:0c:77:95:f1:36:f1:21:22:eb:
         98:fa:b0:67:56:16:aa:db:d6:b0:a6:3a:bc:3b:d5:ef:57:22:
         c5:d5:2b:fb:a3:8f:24:74:4d:fb:82:c1:cd:de:79:aa:7e:0d:
         d3:d4:7e:ab:55:b8:b2:1a:b9:42:2e:b8:77:86:63:1b:29:5e:
         1f:69:b2:1e:ed:18:00:64:5c:8c:d7:03:1d:60:9f:8b:f0:04:
         4f:ea:0c:f2:da:bb:df:d1:d7:a2:17:de:e3:8f:61:c4:98:a7:
         91:52:51:5a:89:79:92:38:10:9d:25:49:bf:ea:1a:3a:0b:fd:
         4f:2f:86:be:d6:e2:48:d3:66:39:8f:19:81:7f:e5:4f:82:5e:
         5c:2e:b8:49:be:d5:d0:bf:9f:29:fc:24:dd:cd:5f:38:1c:fd:
         a6:7a:54:93:f0:b1:3e:57:8b:3a:3b:82:ac:f1:c3:08:0c:93:
         59:4c:73:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:02 2026 by rpki-client