Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
File:                     ENSbc8raAe6FGBLsRAt6HsmGSLM.mft (raw, json)
Hash identifier:          uHeDZX6/qJZ3JkyhYtQu1qwH7WGtx5HTX+QfNwhs0+M=
Subject key identifier:   A0:C3:BC:6A:76:D3:68:66:48:53:3A:7C:80:DE:36:C8:6D:E6:93:C2
Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
Certificate issuer:       /CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Certificate serial:       019881D524E663435042A5269C14A931582B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
Manifest number:          161F
Signing time:             Thu 07 Aug 2025 00:01:26 +0000
Manifest this update:     Thu 07 Aug 2025 00:01:26 +0000
Manifest next update:     Fri 08 Aug 2025 00:01:26 +0000
Files and hashes:         1: ENSbc8raAe6FGBLsRAt6HsmGSLM.crl (hash: 5ncsvWqFcmjo13YfdVWVf3SBd+jcFlspoe+/kWh9rk4=)
                          2: LbvGosx0sr1hJwd78ZXVswGnqXM.roa (hash: zrhSsms7Xu5tLT+xCwRwdoOuFODUIch3dzNZbH3HeT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d5:24:e6:63:43:50:42:a5:26:9c:14:a9:31:58:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3
        Validity
            Not Before: Aug  7 00:01:26 2025 GMT
            Not After : Aug  8 00:01:26 2025 GMT
        Subject: CN=a0c3bc6a76d3686648533a7c80de36c86de693c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:1a:79:8f:b5:38:67:ca:69:78:18:6a:66:
                    04:b4:e7:6e:e1:a9:7a:70:04:74:06:f5:31:4d:68:
                    24:50:15:3c:2d:ba:d6:8b:e1:c8:8b:2a:fb:3f:e2:
                    21:5a:32:39:b1:16:4b:31:d4:3a:dc:83:03:c1:15:
                    78:39:eb:37:21:3b:bc:e6:b9:52:91:fd:a0:2b:09:
                    b5:7a:21:a3:ac:2a:63:5b:cc:38:83:87:5b:a8:4e:
                    66:1d:bd:b2:b0:8e:fa:39:d2:d3:c5:28:d9:6d:85:
                    2a:3c:30:23:2d:03:6b:f8:8d:58:1a:12:e1:3b:27:
                    f5:a4:4f:58:8c:ee:c1:07:ef:1e:5c:4b:31:7a:fa:
                    36:32:4c:58:7b:a6:f2:48:a9:88:62:7a:87:c9:47:
                    fa:27:de:20:dc:92:1d:6a:32:86:24:e5:3c:38:f5:
                    f3:e6:6a:5b:33:c3:a3:11:6e:07:52:9b:f9:e1:89:
                    37:73:b4:87:dc:ba:c7:60:d1:b1:8f:51:df:90:08:
                    92:78:2b:6c:89:29:42:6c:9c:cc:96:8f:ca:24:27:
                    2b:23:b6:ba:5c:66:98:74:84:32:42:ef:5b:a3:fd:
                    e1:f0:99:13:f7:66:bc:e7:8d:8f:7d:56:fc:0e:bb:
                    72:a4:f1:17:0c:eb:f1:3f:fa:94:cc:37:90:84:06:
                    28:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C3:BC:6A:76:D3:68:66:48:53:3A:7C:80:DE:36:C8:6D:E6:93:C2
            X509v3 Authority Key Identifier:
                keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:0c:0a:8b:19:6e:af:88:86:c4:88:b8:43:b1:4c:51:0a:
         3c:43:6a:32:d0:17:a4:0b:5c:42:8d:a7:e2:ad:14:67:db:cf:
         c7:a6:c7:a1:2c:98:c8:c5:d7:28:36:07:9b:98:75:df:55:1b:
         c7:d4:4f:21:39:3e:08:04:08:7a:f3:b9:e4:ea:9d:26:ac:7a:
         66:91:92:df:45:be:5f:66:09:bb:be:c7:ba:bc:6a:f4:92:dc:
         b3:98:9b:3a:2b:fa:45:9e:b8:30:f8:6f:ab:a8:ac:9f:96:03:
         d0:3c:5a:b1:dc:5a:f3:d8:44:8c:30:69:2c:18:25:78:c2:15:
         c8:59:04:2e:b9:97:64:f2:5a:d5:56:55:35:a7:44:69:69:fa:
         bb:46:fa:2e:47:f2:a5:e9:15:4a:c8:cb:41:37:b6:96:c1:2d:
         ff:65:a7:34:52:a3:ca:0c:33:1c:54:90:e5:56:4f:2e:fb:65:
         fa:67:36:53:ff:48:8a:08:45:1b:b0:a0:76:e7:4b:9e:68:14:
         ac:9a:53:7d:03:5f:6e:92:11:e8:72:69:88:9d:29:3a:f2:1e:
         e9:fe:97:1f:63:31:0a:b8:6b:f9:70:9c:fa:9d:2f:b4:80:35:
         84:e1:f8:ce:72:c0:cf:60:6f:74:90:e8:a0:97:e8:4b:c3:97:
         70:33:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:34:49 2025 by rpki-client