Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
File:                     ENSbc8raAe6FGBLsRAt6HsmGSLM.mft (raw, json)
Hash identifier:          Ch1Ahe1H4LibMUxgo3d8QY9KrBMUnmyWgX9qt41Vll4=
Subject key identifier:   60:05:FC:C4:6F:C6:F7:53:3C:EE:B8:83:BB:42:7D:5E:A2:D6:46:C4
Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
Certificate issuer:       /CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Certificate serial:       01977D1E444BDD2938BF5448633A9188C6CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
Manifest number:          1598
Signing time:             Tue 17 Jun 2025 09:00:24 +0000
Manifest this update:     Tue 17 Jun 2025 09:00:24 +0000
Manifest next update:     Wed 18 Jun 2025 09:00:24 +0000
Files and hashes:         1: ENSbc8raAe6FGBLsRAt6HsmGSLM.crl (hash: FSWgNajKax2zLatThq/bThT5hN8+xS79uCFlJ3GE63I=)
                          2: LbvGosx0sr1hJwd78ZXVswGnqXM.roa (hash: zrhSsms7Xu5tLT+xCwRwdoOuFODUIch3dzNZbH3HeT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:1e:44:4b:dd:29:38:bf:54:48:63:3a:91:88:c6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3
        Validity
            Not Before: Jun 17 09:00:24 2025 GMT
            Not After : Jun 18 09:00:24 2025 GMT
        Subject: CN=6005fcc46fc6f7533ceeb883bb427d5ea2d646c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:82:a1:b6:86:89:c9:37:51:e4:58:24:ec:
                    a1:b2:d8:df:ba:8a:dc:97:0a:20:c3:ab:e9:28:2b:
                    d9:63:e0:3a:34:92:74:24:10:15:a9:c2:5c:55:9c:
                    bc:89:ed:f0:0c:fe:ef:cd:75:16:dc:e0:24:09:66:
                    bb:61:56:97:46:ec:e9:76:ef:2d:e2:e8:c9:4e:df:
                    8b:e9:ee:ab:d2:23:87:d9:e6:06:88:9a:59:1b:60:
                    09:51:34:28:06:e7:97:c0:7f:a3:66:a8:46:2e:9a:
                    b7:9c:cd:9a:35:97:85:49:00:51:4c:b8:2c:9f:b3:
                    0b:8a:a0:4f:98:f2:a6:aa:5a:b9:63:04:81:54:42:
                    f7:e9:b2:a7:09:d0:3e:5c:5c:f1:47:43:ea:2f:89:
                    70:bb:ca:e8:82:99:81:0e:51:e0:93:1c:72:a0:87:
                    64:bd:c2:82:44:bc:38:0d:6e:45:df:a6:24:f1:57:
                    1e:b6:d0:6e:94:3c:ca:c1:2c:11:5a:10:82:23:06:
                    3e:5c:ba:68:b4:a6:58:42:2c:ad:15:dd:7f:ab:de:
                    26:00:6b:c7:80:bc:26:47:fd:c1:16:6a:c0:9b:db:
                    1a:c6:41:59:bb:01:3f:0c:81:3a:95:49:45:9e:92:
                    7c:99:33:07:fa:5a:2a:65:46:42:be:02:21:92:ac:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:05:FC:C4:6F:C6:F7:53:3C:EE:B8:83:BB:42:7D:5E:A2:D6:46:C4
            X509v3 Authority Key Identifier:
                keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:60:53:89:60:4c:32:8e:ba:eb:89:79:22:82:e6:9b:03:11:
         7c:f0:c8:1a:a2:a3:f6:d3:a3:3e:f0:f8:cf:b5:d5:eb:dc:6d:
         96:6f:2f:a8:6f:eb:7b:02:8b:df:10:40:59:1e:d5:3a:2d:9a:
         ca:47:c5:62:5d:1a:af:3c:6f:1d:8a:de:ec:1e:22:11:dc:74:
         1a:33:78:13:44:a5:97:e8:a1:23:84:ce:89:c2:62:c6:87:c4:
         27:0a:a1:66:29:9a:a6:cf:60:e2:ea:cd:e1:59:7e:af:7d:d5:
         c3:60:97:1b:27:26:30:f9:01:63:05:49:aa:fa:07:38:3b:3a:
         3f:be:99:8a:d1:e1:fd:f3:53:30:69:a8:87:61:88:4c:38:3d:
         f3:81:99:47:6c:87:9d:c4:86:96:30:83:00:6d:f5:3e:d3:9d:
         12:b7:04:fc:a7:a3:4c:aa:9f:bb:15:e6:1f:81:ff:8e:5c:a1:
         42:36:bf:b0:4b:81:c1:56:d8:8b:96:9b:89:0c:66:1f:1f:4a:
         80:20:2b:73:82:bc:4a:bf:10:d0:de:1b:02:37:31:b5:a1:3b:
         25:57:bd:18:a5:fb:8a:ab:ed:f3:c4:f6:8f:22:27:67:b6:18:
         0a:8b:a8:15:4b:4d:d3:61:41:36:14:c4:23:cb:de:93:b9:e6:
         0a:b5:ac:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:14:49 2025 by rpki-client