Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File:                     AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier:          tiuIc4nbmFTqF38OuUc3KX6uOAaFm19vOSUbulAHMGM=
Subject key identifier:   7A:35:64:1B:06:D0:A4:9E:0D:D7:DF:68:5F:56:77:B4:FB:FF:AD:32
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer:       /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial:       019D9C2D512E70B55CBF24E26884681407E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number:          18C6
Signing time:             Fri 17 Apr 2026 16:01:48 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:48 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:48 +0000
Files and hashes:         1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: 1kc0GG+Mt077V9gFk20ZYdQYpI3kgPGuj091cqymgzc=)
                          2: lU3BCZBDNlCDk-8OFyyOit3pGFs.roa (hash: AWI11iVTlePwywxMYMGqGux5nESZadW+LVNcBQPGHWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2d:51:2e:70:b5:5c:bf:24:e2:68:84:68:14:07:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
        Validity
            Not Before: Apr 17 16:01:48 2026 GMT
            Not After : Apr 18 16:01:48 2026 GMT
        Subject: CN=7a35641b06d0a49e0dd7df685f5677b4fbffad32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:fb:2c:40:05:1e:f9:41:4e:0f:d7:ee:e3:
                    ec:ab:3b:79:f0:86:14:ba:7b:ef:a1:9b:5e:2c:47:
                    40:68:4c:b9:73:56:49:b1:bc:58:e7:2c:9b:fd:ff:
                    8b:cc:31:7f:5e:50:fa:10:42:50:c5:d8:a9:7f:a1:
                    06:a4:ec:9d:b0:b3:99:e1:b1:84:b7:e3:07:d9:2e:
                    80:e7:47:fd:ef:8b:3b:d7:77:47:be:27:ae:78:d3:
                    6b:7f:da:00:7b:af:a9:60:f0:65:cf:57:2b:81:6c:
                    5b:12:cb:a9:a5:ce:1a:9d:00:3f:d8:ca:e3:10:e1:
                    d6:f8:13:af:42:6d:0c:9f:b6:1a:05:87:0c:c3:f9:
                    a0:6b:a5:85:19:12:28:56:31:2f:58:31:e3:5f:17:
                    1d:fd:b0:6e:33:44:6e:96:4d:46:fe:36:db:a3:cd:
                    69:5d:93:dd:11:5a:cf:ab:5a:7e:ab:8b:5a:b4:6d:
                    fe:6a:d6:9b:30:31:de:de:af:05:a1:a6:c5:30:c4:
                    19:40:d1:0e:86:03:d9:8a:bc:b6:30:ad:51:92:94:
                    62:2c:d5:60:b8:0e:2b:87:a7:eb:7e:b6:39:0a:56:
                    42:12:3d:97:e3:87:35:23:0e:b8:b2:da:3c:91:3d:
                    20:a7:03:06:e2:49:d4:84:0a:d0:c8:29:17:88:4c:
                    a6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:35:64:1B:06:D0:A4:9E:0D:D7:DF:68:5F:56:77:B4:FB:FF:AD:32
            X509v3 Authority Key Identifier:
                keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:91:25:02:65:b2:e2:cb:7c:ac:3a:9d:25:65:7a:21:ce:51:
         dd:5a:9a:0e:d2:9a:fe:bc:ad:66:85:fb:35:f3:35:74:d3:8c:
         97:3e:cc:70:98:60:7d:94:f1:43:44:37:be:8a:98:26:1a:af:
         f4:d7:91:50:17:5e:33:fa:37:a9:c4:08:76:5d:53:7d:e8:89:
         e8:47:af:b9:2b:97:6d:9c:95:5d:e5:16:53:7d:54:c7:08:f3:
         d0:d6:38:61:6a:11:35:82:f3:9c:53:ef:bc:17:d2:e3:fb:17:
         a5:de:b4:4b:dc:bf:df:80:59:30:23:c1:f3:d3:29:d5:66:2e:
         ae:f9:76:45:6a:b7:f3:6a:ef:6b:e3:8f:b2:f5:65:6c:4e:01:
         90:7b:65:3d:40:f1:33:28:70:51:4b:f8:0b:57:41:0c:fb:0d:
         91:86:d9:a4:2b:89:43:92:c1:b8:95:3a:3e:24:40:72:a2:7c:
         c5:b3:6b:b0:e0:d4:5c:bc:2b:d4:c3:03:2c:b7:ef:8e:11:83:
         e4:65:a4:13:a7:6c:1f:ab:69:f3:79:34:fa:ce:c3:d6:df:f5:
         bd:de:11:54:95:42:39:8b:2c:c1:bf:10:fd:89:e4:9c:7c:67:
         c3:21:11:bc:37:f6:3c:53:c9:bc:e9:91:4a:3a:fc:fa:c7:02:
         73:fd:fb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:20 2026 by rpki-client