Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
File:                     EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json)
Hash identifier:          P2BNHU/MZjPs7TxQuUD6R341I1z9GmdvF/q/NzWSjFo=
Subject key identifier:   98:82:75:85:8F:EA:89:0A:8C:84:A0:56:C0:E3:AC:8D:11:FC:71:9C
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Certificate issuer:       /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial:       019A55D2887A75E7423245308F8DBB8DA4D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
Manifest number:          0D37
Signing time:             Wed 05 Nov 2025 21:00:52 +0000
Manifest this update:     Wed 05 Nov 2025 21:00:52 +0000
Manifest next update:     Thu 06 Nov 2025 21:00:52 +0000
Files and hashes:         1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: au7N7tL+7/BSr7P/FFR88KH1S0pSORsf8MNymHOfOEU=)
                          2: rOwp4EEdXg6LDTSQ0vKwhdv6jlA.roa (hash: GRZCNLtPKsPA6POGMydW8xxkB4XDVI2vNMs1Ud2kuDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 21:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:55:d2:88:7a:75:e7:42:32:45:30:8f:8d:bb:8d:a4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
        Validity
            Not Before: Nov  5 21:00:52 2025 GMT
            Not After : Nov  6 21:00:52 2025 GMT
        Subject: CN=988275858fea890a8c84a056c0e3ac8d11fc719c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:67:ea:d8:a8:b5:dc:71:63:3e:db:42:d6:
                    f6:43:0d:da:d5:ae:ea:03:cf:53:8f:05:3c:29:9e:
                    66:02:35:99:58:04:d1:29:67:bc:23:96:2f:8a:d9:
                    cd:a6:bb:c3:7c:98:12:ad:2d:02:a6:cd:aa:41:d9:
                    60:50:5b:01:43:92:e9:f5:2d:d3:52:ba:94:36:ff:
                    d1:84:6f:0a:a9:fb:9e:4f:e8:64:18:a9:ad:8b:34:
                    9d:7c:02:cf:e7:4a:76:de:60:ae:50:cb:f0:43:72:
                    8f:c4:30:66:46:c8:a1:b1:ee:8e:4f:d7:c9:2f:d7:
                    e1:fa:a3:30:77:c4:74:35:d2:cf:d1:81:66:ee:3a:
                    31:fe:81:58:e8:3c:44:c4:42:65:b8:68:7c:fd:85:
                    4c:11:e9:5f:8a:17:a0:e7:75:50:0b:36:d6:d1:1f:
                    bb:17:bf:7a:dd:18:8f:ac:c4:0e:57:52:33:98:a4:
                    c3:d2:f9:78:d3:9d:a7:75:c8:9c:ff:3f:cf:15:08:
                    5e:b0:d6:bb:d3:7a:cc:3a:b3:c8:b9:d9:63:aa:95:
                    03:9f:6c:26:18:a8:8a:8c:79:80:75:95:cd:6e:ca:
                    21:0a:d5:c0:bb:6e:27:09:c5:01:eb:5b:b8:fc:5b:
                    d8:73:7e:2b:76:b3:cf:5a:41:4e:68:62:a6:5f:69:
                    3e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:82:75:85:8F:EA:89:0A:8C:84:A0:56:C0:E3:AC:8D:11:FC:71:9C
            X509v3 Authority Key Identifier:
                keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:40:66:c8:c9:7c:8b:3b:1b:13:a4:c0:f7:ca:e5:cf:6a:68:
         71:ab:b5:4a:b8:52:e8:c2:c5:34:66:88:5e:9e:db:51:75:bf:
         a9:95:9e:61:06:1a:f8:22:ab:c3:d3:08:93:f1:9b:7f:87:9c:
         b8:b7:03:a7:99:6e:5c:10:49:38:bb:0f:d6:18:2a:aa:9b:bf:
         0d:d5:98:4f:f3:a2:c4:4f:b6:36:5e:25:9f:b9:3a:b7:3f:27:
         3c:4f:cb:c4:6d:93:c5:c9:eb:27:98:91:fb:9d:38:2c:d9:83:
         82:90:fa:02:25:b5:22:b5:e7:17:a7:ad:55:a2:b2:01:b3:44:
         76:16:34:1a:21:ab:c9:9b:3e:67:bd:bb:43:99:7a:88:9c:ab:
         79:94:0c:07:d0:2c:e1:b1:cc:5d:3b:4e:f5:c2:e9:98:0a:fa:
         62:79:f4:a3:b5:f6:a3:b6:52:1a:51:48:d8:56:07:b6:5c:7f:
         81:51:c9:88:42:d2:58:09:b5:e5:08:2e:9a:b2:1d:94:e7:9d:
         7c:34:16:9c:23:f4:97:82:61:6f:bc:c9:cb:0d:ab:e6:b3:ec:
         23:5d:ab:7b:3c:c2:1e:db:77:e7:31:95:70:0e:06:25:64:80:
         d7:97:0a:8a:4c:8c:75:99:c6:e8:7b:34:44:99:85:ef:af:ac:
         79:af:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:11:50 2025 by rpki-client