Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File:                     AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier:          kua6xdtACcO/IUyW7wx1ex+x5bwyKEq77dxmUVs48w0=
Subject key identifier:   12:D5:1C:E8:E7:D1:06:4E:22:96:A1:61:9B:6B:82:4F:DD:8B:D3:59
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer:       /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial:       019FAABE67B0587E9FE0490B6DAE2E0ABFDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number:          1447
Signing time:             Tue 28 Jul 2026 22:00:32 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:32 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:32 +0000
Files and hashes:         1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: j8VFO0dvRPCKpX0kMt3goQLyRzkRIQNZ2ODnZ3Nd87Q=)
                          2: Tovu6XYvf5FhR28kdlA-7wKtBkE.roa (hash: mC271DkpvmHL0CjopsqGxIT+uNy91sh6WEkjNwzeRxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:67:b0:58:7e:9f:e0:49:0b:6d:ae:2e:0a:bf:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
        Validity
            Not Before: Jul 28 22:00:32 2026 GMT
            Not After : Jul 29 22:00:32 2026 GMT
        Subject: CN=12d51ce8e7d1064e2296a1619b6b824fdd8bd359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:be:37:0b:b1:68:c6:35:5b:17:71:e5:fd:e9:
                    91:88:27:3f:08:a0:be:5b:a3:13:46:be:dd:ae:6d:
                    b6:60:dd:6e:c1:43:a1:65:e0:5e:d5:25:8f:a9:70:
                    d8:b2:bc:40:06:69:dc:8a:34:f9:c1:f4:14:6e:d6:
                    33:19:c6:b0:1e:2f:29:2e:71:a6:5a:9e:7f:84:68:
                    b3:f1:1d:c6:92:37:a2:85:a2:d2:7c:7e:64:04:ed:
                    b9:5c:92:74:c0:a3:fa:ab:17:a5:2d:96:20:b9:7d:
                    c1:dd:89:c8:ad:32:a5:ca:7e:b2:c4:70:a1:dd:e5:
                    2c:f3:db:3e:71:42:33:b7:3e:a9:53:b9:09:51:de:
                    9f:ea:90:b8:58:0c:1f:c1:08:0e:0b:a0:73:c5:35:
                    28:52:30:3d:69:de:04:d6:02:4f:15:a7:0e:7f:02:
                    d0:e8:43:a7:07:5d:d5:d2:b6:8c:8b:6b:ae:66:6d:
                    b6:d5:14:f8:81:ef:aa:a7:72:22:c2:71:99:a0:37:
                    ee:bc:d8:2c:fb:58:df:a4:96:b5:3f:ce:5e:49:4c:
                    25:a4:c3:ef:cd:a6:69:66:63:03:40:33:84:aa:c6:
                    20:23:8f:d1:bb:59:1a:6c:b1:f6:d7:15:0e:a4:d5:
                    44:22:1b:85:88:4c:7d:25:ad:0c:e8:3a:37:a5:a9:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D5:1C:E8:E7:D1:06:4E:22:96:A1:61:9B:6B:82:4F:DD:8B:D3:59
            X509v3 Authority Key Identifier:
                keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5f:00:5c:d8:21:90:e8:31:59:73:4b:e0:ad:e0:ea:36:09:
         f9:50:8a:1e:c9:f3:75:34:72:f8:7a:a4:aa:9e:95:b5:6d:f4:
         84:0c:d1:ae:19:58:cf:78:60:a6:e4:79:7c:d9:ae:70:81:96:
         51:5c:e8:b7:80:dd:0b:12:cd:8b:65:8e:58:80:c7:3c:16:41:
         ec:31:93:21:5f:68:ae:d1:4b:ad:c6:74:3b:c2:24:17:7c:bb:
         e8:5a:92:5b:f8:6f:8d:e6:ad:40:75:63:b1:3c:ac:b9:31:d4:
         49:7c:66:24:cd:1f:63:11:73:dd:eb:bf:dd:8d:01:29:b2:d8:
         28:91:2f:81:ef:da:c1:6d:ae:52:00:e0:b1:69:5c:45:c9:d8:
         d3:44:84:e6:e0:cc:2b:fa:f6:93:f2:1d:df:78:64:c9:40:ac:
         b2:f8:e1:4e:2d:48:1e:a1:0a:a6:65:e6:3e:ff:97:86:42:c0:
         5c:1a:cb:a9:0a:5f:f1:ae:c7:80:72:dd:c6:60:4b:47:d1:d7:
         8d:23:6f:40:e1:12:e5:12:d6:98:13:d0:fd:3b:62:1f:37:5a:
         d7:58:8b:98:59:5e:b1:b2:a3:49:41:55:1a:78:62:3c:7d:95:
         af:db:3c:8b:11:a8:78:ec:99:e9:c4:a5:67:ef:9e:07:04:5e:
         ce:63:64:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:47 2026 by rpki-client