Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File:                     AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier:          2BECVXhk+uNxdg60wk+phmCyjN2hLeqC1SVoSZVvMDw=
Subject key identifier:   B6:65:EC:5C:B7:D7:44:A2:76:F1:82:3D:85:48:B9:FA:03:F3:AC:08
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer:       /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial:       01987418C4CBC2E173BA139EBE5011A6FE85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number:          108A
Signing time:             Mon 04 Aug 2025 08:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:36 +0000
Files and hashes:         1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: QSVeDYazsG1ze0bbtNNjEgrwMeE7AVnnSI8WSRJcMEk=)
                          2: r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa (hash: ZoMymQkL6qzTxWYBfF5BxJb7oUgkp1cRchZsdJ96SAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:c4:cb:c2:e1:73:ba:13:9e:be:50:11:a6:fe:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
        Validity
            Not Before: Aug  4 08:00:36 2025 GMT
            Not After : Aug  5 08:00:36 2025 GMT
        Subject: CN=b665ec5cb7d744a276f1823d8548b9fa03f3ac08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:58:e1:9a:0a:0c:84:66:98:59:30:44:3c:fb:
                    a4:0c:c2:a0:97:f0:20:ad:7c:bc:df:a3:ac:f8:35:
                    81:ac:2b:52:f4:d9:4d:87:af:87:80:c7:ab:e6:77:
                    db:eb:52:47:3b:c0:bb:36:98:79:45:cd:83:81:fe:
                    6e:81:5a:ed:b1:55:40:48:87:8e:70:3e:64:7d:ce:
                    5f:53:5e:ee:7d:40:2c:2f:3e:e5:f2:09:c6:ee:83:
                    d5:e7:f7:c3:e8:46:83:95:cb:e0:2a:16:bc:84:4e:
                    38:aa:bb:39:1d:a3:1a:31:2c:2e:57:d2:f9:81:d9:
                    d6:cf:1a:0f:cc:4f:ac:c4:1e:b3:cd:0e:89:13:9e:
                    be:8b:7a:9e:40:e9:ca:dc:49:08:49:ca:f2:fa:27:
                    03:f5:e5:69:8d:d7:76:73:6a:07:78:7d:0e:e1:df:
                    92:6e:45:1d:40:92:b6:b2:b6:c8:4b:34:8c:f1:af:
                    af:00:19:f6:36:24:59:10:78:de:6c:1a:b8:62:1a:
                    ef:2f:e2:ec:bf:8a:f1:15:36:c5:7d:f1:15:de:6d:
                    d1:8f:e6:18:c3:93:ef:fa:41:81:78:cb:1a:8b:44:
                    87:d8:73:65:93:32:cf:58:30:f3:5a:41:30:49:53:
                    d4:8c:5d:98:83:2f:ba:17:6e:29:b2:4b:d4:31:51:
                    88:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:65:EC:5C:B7:D7:44:A2:76:F1:82:3D:85:48:B9:FA:03:F3:AC:08
            X509v3 Authority Key Identifier:
                keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1e:be:a5:12:bf:5e:40:4c:a1:27:ed:e6:42:d1:b4:42:3a:
         81:90:11:8e:f0:be:24:14:b4:f4:1f:62:c8:e7:39:31:c5:15:
         93:ff:4d:e9:5c:87:9c:1d:6f:29:ab:c5:2a:36:c0:f5:90:7d:
         0f:27:db:53:3e:68:22:c4:13:c1:fa:52:20:9c:ae:ca:99:38:
         39:e5:12:ed:32:20:45:91:02:c1:ac:17:b5:d8:2d:23:78:ba:
         0e:58:36:c4:a6:5a:25:ec:6d:3f:c0:8f:ab:81:f0:be:c7:4c:
         0f:4e:2e:36:8d:4a:3b:95:0c:74:99:aa:7a:0a:c0:6f:a4:69:
         84:8a:76:b4:4e:d6:e6:45:f4:68:8c:cb:e0:c2:39:d7:e4:89:
         e6:69:a4:98:8a:a0:91:e2:8a:97:4b:f6:4b:f5:40:b3:70:76:
         b7:df:76:7e:cd:54:65:4b:c2:7d:61:5a:32:47:0e:2e:3e:27:
         7a:fd:db:98:f6:b3:e9:9d:da:d1:78:20:9b:d3:58:b3:9c:ac:
         8c:d1:71:71:ff:31:f9:43:61:62:e2:17:68:cc:ca:0b:53:e6:
         d9:4b:73:66:ac:ff:e1:a3:ae:9f:95:13:e0:8e:65:f2:c5:4f:
         02:6b:6d:ee:34:64:64:3b:04:2b:85:46:06:31:ac:56:9e:59:
         ee:0f:33:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:54 2025 by rpki-client