Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File:                     enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier:          5mqoMx/ykywJBzqtDpHkGQWeLsQ3AEk7mgod2oc4eYQ=
Subject key identifier:   FE:25:97:F3:03:56:8D:49:CB:88:60:2F:DC:3C:4C:FF:21:AD:37:95
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer:       /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial:       019D97E23851AD126BFCF4B9F3EF9D5D3E2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number:          18BD
Signing time:             Thu 16 Apr 2026 20:01:18 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:18 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:18 +0000
Files and hashes:         1: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: YcmXMXmdqflqbtTF9En6xCHAQtUQl+V71rHjMEOXiho=)
                          2: n2RXCHmE2mIVVK86mWjjYTONVEY.roa (hash: vfexF/zKDf9M5bj3mCjRl7MbjkVTZHBSgi+Kjne7g2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:38:51:ad:12:6b:fc:f4:b9:f3:ef:9d:5d:3e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
        Validity
            Not Before: Apr 16 20:01:18 2026 GMT
            Not After : Apr 17 20:01:18 2026 GMT
        Subject: CN=fe2597f303568d49cb88602fdc3c4cff21ad3795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:18:3e:34:57:1e:66:5d:2c:e0:21:4e:3d:40:
                    96:22:5d:e8:fd:d3:8b:83:27:f8:0a:03:c0:6e:a3:
                    9b:cc:6a:8c:c5:5d:7a:5f:4e:d1:81:b5:7b:a3:7e:
                    f6:59:4d:f9:b6:fa:d1:63:77:59:02:59:9e:04:47:
                    3a:42:ee:e0:4f:c1:18:9b:55:14:89:62:86:09:db:
                    81:62:ee:7d:a3:16:65:0b:0f:8a:66:c8:38:44:b6:
                    41:52:cc:91:9d:b5:91:28:47:bb:a6:e3:42:bd:d0:
                    47:73:46:a0:5f:2e:32:7e:4f:0f:71:cf:11:cf:cc:
                    d0:df:5d:42:b0:c4:72:83:9e:21:f1:e4:26:46:e8:
                    24:38:20:dc:df:b5:d7:61:0d:17:44:c0:92:1f:c1:
                    c4:5d:90:e9:6b:3c:86:85:4b:4c:5b:f9:70:50:29:
                    51:fd:43:9d:f9:a5:52:c8:f8:48:99:68:c1:4f:5e:
                    fa:d9:71:05:8c:fc:fd:05:d6:7f:d1:af:9a:cb:aa:
                    b4:f7:09:8f:9f:c7:7c:7d:99:ba:10:07:89:0f:ac:
                    ab:d2:01:d2:83:70:0a:ac:9d:dc:60:01:f8:32:2d:
                    25:0d:79:e1:f2:ac:74:5f:c9:31:9f:69:cf:fe:02:
                    ef:a2:3b:e0:0c:b4:b9:55:ef:65:d0:1c:85:79:44:
                    df:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:25:97:F3:03:56:8D:49:CB:88:60:2F:DC:3C:4C:FF:21:AD:37:95
            X509v3 Authority Key Identifier:
                keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6e:63:92:e4:21:b0:db:48:15:45:52:19:f5:b6:5e:40:6f:
         87:99:7d:ea:6d:18:73:df:52:c2:8a:9d:36:b3:e3:88:a7:a4:
         60:b3:e9:00:bc:3a:da:e2:63:12:f5:85:ef:2d:0b:9a:4b:ef:
         8c:22:57:4f:09:ef:ab:f3:40:94:34:da:6f:f3:ae:34:ff:57:
         5c:9e:1b:a5:ed:c8:a4:45:5b:bf:ed:69:a5:e4:12:a8:2a:ce:
         82:56:a5:f9:80:1b:71:be:34:61:f8:67:13:f3:69:f0:f6:c4:
         67:48:33:26:c0:0e:48:ac:eb:2c:ad:83:19:ee:98:62:77:d4:
         11:e4:65:c5:d8:e9:c5:cc:f4:4f:43:3f:8c:e7:27:7e:ac:a8:
         3d:a6:70:20:8f:75:ce:6d:0c:47:6b:01:fe:46:b3:85:6f:be:
         04:e8:a1:c2:c7:98:c8:fd:8d:28:9f:da:24:37:ef:7f:eb:23:
         a6:c6:60:ee:92:50:94:43:49:75:f2:1c:85:65:12:a1:81:19:
         14:a5:7b:60:6d:36:cd:3c:a5:0a:36:17:26:21:71:0f:31:9b:
         88:9c:7f:cd:c5:61:0e:c5:b3:f0:04:4c:18:cb:c1:70:00:2f:
         05:ae:55:d9:35:1e:80:af:19:ae:6a:f6:c6:21:fb:28:f5:12:
         08:ba:92:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:27:20 2026 by rpki-client