Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
File:                     ENSbc8raAe6FGBLsRAt6HsmGSLM.mft (raw, json)
Hash identifier:          WtIMyWfuRtTvU8k7e4iLHZqmZrr0Ha3DK0fO+2ZmvuU=
Subject key identifier:   D3:76:EC:8D:52:A3:40:A8:26:B6:A9:20:28:D8:C4:38:02:03:C8:DE
Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
Certificate issuer:       /CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Certificate serial:       019D988626D38FE2B884CF2F9D954FFACE13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
Manifest number:          18C2
Signing time:             Thu 16 Apr 2026 23:00:21 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:21 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:21 +0000
Files and hashes:         1: ENSbc8raAe6FGBLsRAt6HsmGSLM.crl (hash: Coumf1gji5o9NlQ9Gs3A1ZeefB/BqviDmudlQyhtm6M=)
                          2: eSrmop84goo0iEWfYlqPX_ANRJ0.roa (hash: ztPjyknlOnXPUcaGUj1KAhGBxdHzv46hT4CpZXwcNUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:26:d3:8f:e2:b8:84:cf:2f:9d:95:4f:fa:ce:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3
        Validity
            Not Before: Apr 16 23:00:21 2026 GMT
            Not After : Apr 17 23:00:21 2026 GMT
        Subject: CN=d376ec8d52a340a826b6a92028d8c4380203c8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7a:14:ac:61:cd:cd:95:3b:38:ef:66:a5:19:
                    aa:5a:ce:7b:11:32:68:ab:b9:a2:2b:1d:85:a3:a6:
                    88:2d:8c:69:87:89:07:08:d9:cb:9e:33:9e:99:96:
                    3f:e6:84:8b:61:5b:d8:a7:fb:e7:1a:fe:a6:5b:9b:
                    b5:13:d1:e1:03:9a:52:7e:6f:79:42:e1:67:d8:75:
                    24:83:5c:cb:95:9a:24:cb:56:1d:d5:ec:0f:b0:15:
                    5f:78:f8:d1:5a:38:05:33:d3:38:1c:58:15:23:c5:
                    35:1d:c8:76:17:46:39:db:3b:2d:c9:ad:f3:b7:39:
                    f8:02:d2:1a:61:56:fa:ff:66:a5:dc:51:58:e0:15:
                    42:18:93:6f:fe:7d:b1:ae:5a:36:8c:04:7e:a6:8f:
                    81:81:d6:56:b8:20:68:a0:04:63:80:db:e2:26:19:
                    62:30:9a:d1:89:d3:5e:9c:26:e3:89:02:78:fa:28:
                    de:4b:47:d1:81:90:28:96:7b:e0:ad:ae:b8:25:0b:
                    63:8c:f8:36:bd:3d:9d:b3:4e:4f:75:6b:50:a5:f3:
                    27:64:1a:11:c2:4e:69:9f:e7:54:4d:7b:69:2d:b0:
                    af:c7:37:82:3c:2c:ff:ea:bd:61:71:99:3e:59:e5:
                    af:99:58:3f:9c:c7:37:58:59:2f:3a:90:92:ba:d6:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:76:EC:8D:52:A3:40:A8:26:B6:A9:20:28:D8:C4:38:02:03:C8:DE
            X509v3 Authority Key Identifier:
                keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e0:82:ff:ff:a9:a5:db:0a:95:00:3c:22:e1:b4:7b:a7:16:
         2b:ff:e8:ad:73:55:48:3a:b5:2f:61:81:65:87:2c:3e:6f:36:
         da:29:de:41:d6:e2:8c:c5:81:9c:94:e5:82:22:59:40:e3:8b:
         1a:00:e9:04:01:d4:e8:ea:9e:dd:5d:97:ac:16:35:4c:16:97:
         84:c1:aa:01:2f:16:46:49:15:1b:f1:66:e1:69:8e:06:d9:fd:
         1b:77:50:49:15:3a:71:f6:11:43:a1:c7:b3:d8:2d:9a:97:16:
         a7:ab:4a:a6:a6:48:48:cd:d0:23:16:6a:a0:ad:8e:c4:fa:81:
         2e:0e:86:fa:53:0f:f1:54:a9:5e:cf:8e:86:f8:1f:00:e1:0f:
         53:36:0d:82:ed:aa:b6:3d:50:c5:88:02:11:ed:b0:c4:ea:73:
         f6:a3:8f:54:d2:0d:d6:b4:12:d2:b7:4a:ed:fa:59:fd:5a:3b:
         ff:3a:d3:18:0a:ac:67:06:08:57:40:f9:c9:2b:3a:a8:70:cb:
         43:7d:10:de:01:34:e2:e3:77:67:cf:ad:0e:77:53:87:b8:4a:
         ce:91:46:87:96:9e:c2:70:05:77:eb:96:4a:3f:1a:f8:50:e4:
         85:0e:32:70:26:b4:3c:56:c6:8a:92:e3:47:e4:7e:7b:9b:da:
         55:61:b5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:28:08 2026 by rpki-client