Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
File:                     1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft (raw, json)
Hash identifier:          2oy5iU/gRrvaNkJ5Oc8G4COYBk/0qNN1+5gXlzjH62A=
Subject key identifier:   DA:6D:1E:AA:0F:53:82:FF:87:78:05:9D:F9:EE:32:5D:DC:69:66:48
Authority key identifier: F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78
Certificate issuer:       /CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
Certificate serial:       019F90C82DFE58C5D94CE5003276A4C310FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
Manifest number:          1709
Signing time:             Thu 23 Jul 2026 21:01:05 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:05 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:05 +0000
Files and hashes:         1: 1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl (hash: 2PB8Loi4DdcYhfV7+klOj9zw+4O9NBPpxvT1YojaHAo=)
                          2: 6q2q3YFmVQNANHpUplZUUHfT0yk.roa (hash: TaYDbuxiCpELLVVW2DBFRgmKqdXKNPW01u8ESdMBcms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:2d:fe:58:c5:d9:4c:e5:00:32:76:a4:c3:10:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
        Validity
            Not Before: Jul 23 21:01:05 2026 GMT
            Not After : Jul 24 21:01:05 2026 GMT
        Subject: CN=da6d1eaa0f5382ff8778059df9ee325ddc696648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:16:67:ad:59:f2:7d:d1:d2:5c:cf:1d:13:
                    2b:9f:72:09:2e:7b:e7:35:b0:39:b4:34:f9:c9:c5:
                    39:28:de:69:c8:46:53:b5:e1:ea:7d:d4:2d:76:3f:
                    0a:96:63:a0:4d:86:6c:9c:ea:0a:92:03:f6:cb:26:
                    5c:e8:0d:11:31:cd:09:4a:af:9b:6b:c7:7d:09:9b:
                    58:c2:80:d5:15:df:a7:9d:4f:40:16:c0:52:9e:be:
                    8f:ed:3f:1b:5d:c5:e2:b0:68:88:cd:fd:9a:f6:1c:
                    82:04:2b:7f:ee:e8:65:fa:73:56:60:57:dd:99:15:
                    55:e8:3a:69:a2:3e:33:a2:84:d7:14:92:3f:fe:cd:
                    37:9d:e6:2b:bd:18:6c:9c:e9:0e:1c:bb:d2:2d:fc:
                    c6:f0:e9:fc:63:a0:5d:32:4b:b0:ba:56:ed:1c:55:
                    cf:3d:a5:bf:15:d1:ce:6c:1e:b9:be:e1:3d:58:97:
                    70:5d:10:d6:0b:d8:a8:7f:4d:e4:5a:dc:5c:d8:c2:
                    2c:37:f5:f6:bb:d0:94:86:45:08:48:f0:d0:e3:5c:
                    da:22:d5:39:89:5d:81:09:aa:d4:07:41:27:c1:9f:
                    6e:b1:84:54:3b:30:24:45:b1:92:f8:7d:de:61:61:
                    06:0a:74:dd:83:0a:ee:a1:05:bf:14:c4:3c:cc:b8:
                    00:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6D:1E:AA:0F:53:82:FF:87:78:05:9D:F9:EE:32:5D:DC:69:66:48
            X509v3 Authority Key Identifier:
                keyid:F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:39:80:32:0c:f9:2f:d4:01:29:f9:fe:2f:6f:80:d4:64:46:
         ec:29:c8:e2:07:d2:0d:95:15:11:78:d7:32:ca:19:29:2f:d8:
         5d:0c:08:ec:16:ef:a1:b8:fe:82:70:50:6c:e3:49:c8:6c:37:
         fe:03:32:62:29:04:7d:4d:95:15:96:f4:3a:97:63:46:3c:dd:
         78:67:77:ba:82:ee:8a:d5:11:a5:eb:84:c6:0d:a5:bc:60:db:
         2b:b2:ed:26:cb:3d:10:66:b6:86:07:08:20:42:68:4c:12:b3:
         82:d1:4c:cd:98:e8:4d:68:67:a5:b3:39:aa:a7:9b:9f:4b:ae:
         30:00:21:7e:7d:11:16:19:46:b6:6b:15:f7:da:9a:0e:da:4f:
         27:b7:cc:e1:ac:2e:3d:1e:20:90:4c:80:77:1e:07:67:cc:72:
         55:4d:3f:5a:19:72:b0:d7:d3:99:21:92:47:e3:da:01:f3:08:
         87:91:c8:4b:a5:51:cb:a4:70:cc:fb:2a:61:8c:1a:3a:bf:b5:
         34:1f:44:95:7e:f2:39:ee:f4:fb:c6:1e:5b:8a:e8:4a:b2:00:
         bc:fc:a6:81:c1:f4:b3:66:48:41:2c:46:3a:0f:0a:4f:ad:5b:
         82:aa:e8:91:7a:68:8a:42:af:db:f4:d6:ca:eb:81:f6:28:22:
         56:64:f2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:32:32 2026 by rpki-client