Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
File:                     Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft (raw, json)
Hash identifier:          YUY1PWaCnseJaZNjtHNyjn8EgczqX0Is0TbLLRnCFik=
Subject key identifier:   1C:02:DB:4C:F2:46:0E:D1:51:45:83:21:3E:13:BA:E3:1F:8E:CA:53
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Certificate issuer:       /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial:       019D9A7540632311FC8CB1F5B23450259A56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
Manifest number:          1705
Signing time:             Fri 17 Apr 2026 08:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 08:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 08:01:08 +0000
Files and hashes:         1: Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl (hash: la072BhdO5+zi9NhQ5vcipsXFzfe0I7IXilry9mQF8Q=)
                          2: AqeEArFXVprPp5Ifa6hKfeHjgZo.roa (hash: SNZsKTAZfwwb0XNOZZFJ3zpSaVaqLY7YkuyejngEFEA=)
                          3: Uf7iuAvCb8JExC01Vm1kk--X2_c.roa (hash: 40r7y1upg5B1BksvHIdC+LJW8WKcY2ft8E1/DsGo58g=)
                          4: euMg0PBrEwdg34FUafeH1CwRG_Y.roa (hash: hIv94tAmUnb+bfy5u57zu0mwJIG8VdW8glZpcNFnYq0=)
                          5: stlziWxLYNCEQsNpe3-_IYmseYU.roa (hash: 5ts4qAFhhFZ3bDpqFGhmwqrpFkC7LGxGEgA0C9oCVoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:40:63:23:11:fc:8c:b1:f5:b2:34:50:25:9a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
        Validity
            Not Before: Apr 17 08:01:08 2026 GMT
            Not After : Apr 18 08:01:08 2026 GMT
        Subject: CN=1c02db4cf2460ed1514583213e13bae31f8eca53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4d:03:b2:68:74:59:37:db:d9:8b:eb:da:70:
                    e3:b5:53:58:96:9c:c9:7a:86:59:62:f9:7c:5e:79:
                    65:44:71:00:ef:63:4c:47:eb:af:a4:f3:ba:e7:ff:
                    da:67:29:2e:1b:a4:0a:ba:47:67:39:03:61:96:79:
                    61:8f:18:a5:a9:7b:fe:76:6a:19:a6:2e:bb:b3:75:
                    27:e4:3c:cc:28:50:6e:9d:ba:c1:4e:dd:03:ef:e8:
                    2e:ce:06:da:d0:08:20:eb:a2:66:43:c2:85:af:93:
                    39:73:85:dc:f4:e1:18:e8:ec:2b:71:30:16:a4:9f:
                    d5:db:41:53:95:da:78:b2:cc:32:6d:ef:1b:e3:26:
                    c1:86:e9:6b:58:f2:61:99:57:9a:43:97:27:71:8d:
                    f6:48:fa:b4:f2:30:48:8d:ba:eb:82:3a:57:a1:1b:
                    a3:23:30:e9:4f:18:0c:0d:c2:fe:37:7d:53:8a:13:
                    86:24:8a:e2:69:62:b5:bf:4d:93:bb:33:b0:a8:4c:
                    59:46:36:22:73:41:f6:69:35:4f:5b:9a:fc:34:9d:
                    2b:63:fc:98:b7:a1:ea:88:49:fb:96:2b:f8:fa:1b:
                    03:fb:21:16:8b:89:b5:4a:2a:47:aa:bb:8a:f5:f5:
                    3e:f8:df:0d:a6:c1:a7:f4:4f:eb:1f:54:53:01:39:
                    dd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:02:DB:4C:F2:46:0E:D1:51:45:83:21:3E:13:BA:E3:1F:8E:CA:53
            X509v3 Authority Key Identifier:
                keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b1:21:47:d7:a4:b3:4b:1d:ee:df:2e:d9:36:f3:75:70:57:
         2e:c2:4d:c5:b6:94:d2:b9:e3:8b:fa:4b:f0:a8:fc:33:5e:03:
         7f:75:11:0d:5a:e9:da:56:3d:08:56:01:d2:7e:42:aa:95:7a:
         58:90:d4:59:2d:48:96:83:62:3d:95:c6:fb:6a:b5:0e:7b:73:
         83:0e:bc:bd:8a:5f:73:25:2a:ca:d0:24:ec:ea:25:0c:48:f6:
         c8:0d:c4:9e:4e:9f:4a:77:7b:06:c7:46:ba:a1:ac:65:a7:8f:
         43:9f:62:03:c5:89:95:9c:f7:53:48:ac:7f:d7:de:c6:0d:21:
         57:fc:1b:1f:ad:f9:7e:9d:fc:67:b0:40:81:43:c7:45:e0:42:
         6c:20:a6:40:ff:3d:05:a0:d2:6c:19:27:9d:33:a3:a4:2e:4e:
         77:2f:16:a3:e5:51:81:9c:e4:a6:bc:1a:3e:ba:df:00:71:72:
         57:ec:04:50:1e:f6:3d:0e:5b:8e:6d:4d:3d:f0:52:7a:c1:45:
         0b:0f:7e:61:86:5e:92:37:f9:e5:02:6b:56:74:50:47:62:3d:
         3f:12:cd:e2:61:22:f4:19:67:b2:c9:21:5e:b5:ae:4c:79:9b:
         0f:70:45:5b:b3:3c:a4:de:d7:98:d3:05:14:8b:50:6e:38:ad:
         e1:ef:e9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:26:04 2026 by rpki-client