Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File:                     AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier:          iONzOpkWT8C/yz7NrQX9vZAl3lIKmF0hoYdpzT5ndzw=
Subject key identifier:   07:53:9F:47:7D:AB:A0:7D:01:7A:8F:B6:16:4B:35:FF:3E:FC:19:A3
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer:       /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial:       019FAB2C3B7D0DFC76407338633997111281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 00:00:30 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:30 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:30 +0000
Files and hashes:         1: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: ON4i0a9TcImbezfSpjUsEu/AP2UNJDEsNc01oInh7IY=)
                          2: ScMeUXtgJA8SRus0dm3wNSK0EOE.roa (hash: cMjCrYF2rReOwGbNBwruLGRrluqmFIhueIspSRNu/dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:3b:7d:0d:fc:76:40:73:38:63:39:97:11:12:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
        Validity
            Not Before: Jul 29 00:00:30 2026 GMT
            Not After : Jul 30 00:00:30 2026 GMT
        Subject: CN=07539f477daba07d017a8fb6164b35ff3efc19a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:a5:a0:71:e1:93:2d:4b:9a:bc:7f:97:a5:
                    db:e0:b6:7a:e1:17:5e:4c:71:19:6f:bd:e9:8c:3a:
                    3e:33:23:6e:cd:80:52:1b:23:ce:79:a7:a9:5b:7e:
                    df:ea:fb:6d:26:2f:d8:f0:50:9b:cc:10:96:48:a2:
                    3a:94:a1:13:f6:ce:5f:bd:66:03:32:b8:2e:66:85:
                    22:b4:68:f2:33:32:53:8d:f4:12:85:87:9a:9e:6d:
                    ce:8c:4e:1f:b4:d6:36:3a:f6:89:8f:5d:79:f1:a5:
                    b5:c3:c7:98:05:dc:af:ee:fc:4c:8e:07:80:06:11:
                    9c:b6:63:41:64:63:65:ca:10:42:50:7b:d4:e9:58:
                    d5:61:fd:6e:b2:2b:b8:84:27:6e:ea:32:4c:e8:5b:
                    da:90:45:be:a3:0a:3c:4e:51:fa:42:df:00:11:8e:
                    29:a6:16:13:8a:7a:86:90:18:da:66:63:fc:e9:0a:
                    16:cd:bb:bf:47:4f:ee:78:9b:41:e5:60:f7:17:5d:
                    d9:5b:0a:84:d9:55:11:9c:96:6c:8c:11:b2:1f:cb:
                    e6:7e:89:06:3a:b1:17:ad:4f:1f:c3:d7:26:b6:9c:
                    9a:33:54:f5:05:ed:c2:3f:08:08:72:78:da:2c:4e:
                    49:99:2b:bb:56:f7:d0:94:e9:bf:3f:09:a8:7a:ee:
                    b7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:53:9F:47:7D:AB:A0:7D:01:7A:8F:B6:16:4B:35:FF:3E:FC:19:A3
            X509v3 Authority Key Identifier:
                keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:4a:7f:4c:bf:1f:5d:05:4a:23:f8:7d:62:e3:92:65:dc:a0:
         e9:56:a8:d1:2f:af:90:07:d6:94:64:c2:72:8d:df:9d:45:cb:
         dd:56:ab:a4:d9:3d:37:da:14:94:1a:05:8b:5b:5b:11:df:22:
         e6:9f:93:b9:68:57:12:12:f1:3b:7a:84:33:47:e1:58:5e:68:
         4c:77:75:65:c9:54:59:b3:59:84:bd:1f:65:cd:86:21:81:16:
         19:3b:f8:78:b6:ae:75:cc:47:94:5c:d3:23:cd:dc:a7:f0:22:
         43:7e:ab:a7:9f:08:23:b0:b7:62:fe:ff:f3:ed:a1:80:e7:89:
         18:57:fb:af:5f:c1:82:e6:cb:2f:0b:07:5b:9e:51:a6:c4:56:
         22:d6:52:63:62:91:cd:3f:20:90:ed:36:91:13:8a:3a:41:4d:
         07:c2:62:cc:43:92:f1:2f:ed:22:41:0a:8c:3b:32:a5:6d:99:
         54:93:0d:68:ec:28:78:16:43:31:ae:73:b0:b0:fe:22:00:f8:
         63:60:22:a7:33:27:5d:e9:c2:a5:48:cf:04:8b:ef:df:5d:32:
         7b:ff:58:5a:70:74:b7:8c:34:98:c6:0b:6c:04:e3:87:cf:8a:
         0c:fd:b4:d6:0c:57:b2:79:e1:7b:c8:03:04:29:db:a4:49:9a:
         3f:fb:89:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:55:58 2026 by rpki-client