Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
File:                     1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft (raw, json)
Hash identifier:          zIyNccCvJZBJSJ8nD7bkfIfxRv1M9bIiK2+g7TG/b3c=
Subject key identifier:   DB:B9:E7:D4:7A:FE:8F:3C:E2:59:5B:04:B9:19:05:00:98:78:93:23
Authority key identifier: F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78
Certificate issuer:       /CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
Certificate serial:       019E1C101070CE680BD4632898133FBC56B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
Manifest number:          1648
Signing time:             Tue 12 May 2026 12:01:15 +0000
Manifest this update:     Tue 12 May 2026 12:01:15 +0000
Manifest next update:     Wed 13 May 2026 12:01:15 +0000
Files and hashes:         1: 1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl (hash: 0/ScjsngJmLunycxr6Yb/B6+ie0qUlKVf8c6sQJa+Ls=)
                          2: 6q2q3YFmVQNANHpUplZUUHfT0yk.roa (hash: TaYDbuxiCpELLVVW2DBFRgmKqdXKNPW01u8ESdMBcms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:10:70:ce:68:0b:d4:63:28:98:13:3f:bc:56:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
        Validity
            Not Before: May 12 12:01:15 2026 GMT
            Not After : May 13 12:01:15 2026 GMT
        Subject: CN=dbb9e7d47afe8f3ce2595b04b919050098789323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:b3:3a:ed:bd:39:b6:e7:81:cb:2a:27:55:
                    32:e8:1d:17:da:3d:e8:6a:bf:f6:3e:ea:ac:1c:f1:
                    7c:a2:d5:d4:18:a4:68:9b:2f:67:fd:35:dd:de:90:
                    6e:e4:4b:60:ea:9c:7b:75:fe:2a:67:f7:9e:09:a7:
                    83:0f:c2:c2:ee:b1:e0:e9:3a:e2:e1:9d:00:a5:24:
                    8f:59:06:3a:f5:4f:05:e0:d2:84:c9:37:bd:71:63:
                    3f:92:7c:8d:95:da:dd:3f:55:d8:2b:03:ef:f6:48:
                    0b:e1:86:e3:87:2b:1e:5d:0c:55:70:12:5d:f1:fd:
                    17:08:78:64:3f:49:c1:2c:47:3e:3b:a1:d9:14:5b:
                    68:d8:ca:a7:98:1b:8f:ca:d6:52:7b:80:48:15:e0:
                    d3:89:e8:82:60:e5:8c:95:9a:12:2c:cd:14:19:4b:
                    08:c6:c3:74:a5:f3:52:c2:29:e6:ec:57:0d:2b:48:
                    7f:25:db:75:59:d6:00:62:00:26:2f:ab:c2:f8:f4:
                    23:0e:9d:9b:a5:1b:1c:36:8b:d4:d9:51:c5:8b:b0:
                    8e:c3:7e:a1:03:15:a3:e0:6d:ee:4f:fc:bb:21:90:
                    00:ac:b1:b7:4c:e1:80:0e:60:30:c8:7f:9a:94:81:
                    a4:35:fd:b2:5a:99:43:f3:24:32:45:5c:91:dd:dd:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B9:E7:D4:7A:FE:8F:3C:E2:59:5B:04:B9:19:05:00:98:78:93:23
            X509v3 Authority Key Identifier:
                keyid:F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:51:cf:38:b4:cd:7c:8e:3e:e8:49:58:db:1d:10:0a:52:fa:
         29:8a:1d:cc:41:b0:43:a1:c8:de:6f:52:75:c9:71:75:10:54:
         d5:91:5d:d0:23:46:41:01:b4:5d:20:c1:d2:91:c2:8e:93:d6:
         f7:a7:96:b1:23:95:4b:c5:43:49:9c:42:61:96:d0:cc:68:ad:
         6a:3c:c5:dc:b1:ae:5a:e5:e5:eb:17:93:34:64:f9:47:36:69:
         83:e4:b6:c0:56:88:10:c2:e4:6e:95:b6:17:24:2a:68:a8:35:
         8a:34:f4:5b:9f:a5:28:56:9a:09:e7:d0:e5:c8:37:67:df:a6:
         24:6c:3b:92:29:e6:9d:a4:53:4b:b9:71:67:dd:bd:a4:77:88:
         f5:d6:da:50:56:f7:69:91:ab:87:4b:ad:75:ad:ae:d0:78:c0:
         ec:ef:a3:4d:47:fb:51:20:b0:36:d7:2c:5b:7d:0b:a7:87:88:
         98:de:da:5d:ae:20:3e:38:bc:7f:e6:23:0d:4a:25:71:5b:c9:
         08:1a:3f:1e:8e:e5:4c:74:32:1b:61:f9:26:a7:a4:71:18:38:
         b8:62:29:c5:b8:29:1a:ab:f1:bb:27:e0:18:be:c2:e1:eb:36:
         70:06:96:bc:d4:ea:ec:29:d6:45:eb:1a:cf:d5:eb:ba:d7:55:
         7d:0f:67:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:53 2026 by rpki-client