Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File:                     AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier:          zRTBl2zjIsSBZGISO9aTIxTgXLV2/41rJQI1hxckeI8=
Subject key identifier:   97:CD:F9:E9:4E:9D:00:4E:A4:EC:18:D1:B6:83:BF:C3:EA:C1:58:AA
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer:       /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial:       0197B6D7B10D7E90D932F46E5579BC96A95D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number:          1028
Signing time:             Sat 28 Jun 2025 14:01:18 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:18 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:18 +0000
Files and hashes:         1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: VEqGdHWDMonNWaAVe2zCE0ScK89j7vngIkJmB5SGbN8=)
                          2: r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa (hash: ZoMymQkL6qzTxWYBfF5BxJb7oUgkp1cRchZsdJ96SAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:b1:0d:7e:90:d9:32:f4:6e:55:79:bc:96:a9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
        Validity
            Not Before: Jun 28 14:01:18 2025 GMT
            Not After : Jun 29 14:01:18 2025 GMT
        Subject: CN=97cdf9e94e9d004ea4ec18d1b683bfc3eac158aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:68:a8:0d:eb:6d:58:c6:62:cd:ba:9b:e7:
                    06:ae:38:2c:79:50:96:5c:87:70:5b:a9:f6:90:78:
                    08:f6:a6:f5:05:6f:b0:d6:04:86:5b:b4:45:49:51:
                    7d:f8:f6:68:d3:0f:d4:65:a8:8e:2f:13:31:2c:ea:
                    03:83:51:bd:4a:a8:fc:f5:ee:ec:24:8a:b3:dd:c1:
                    01:1d:58:5f:1c:2e:06:74:42:cf:8f:75:a8:1b:8d:
                    32:ac:43:f8:0c:ed:b5:c7:37:a8:af:2d:ee:94:c1:
                    56:15:c2:36:9f:21:98:cb:2c:e2:51:45:ca:93:78:
                    3f:55:53:0e:ae:c8:49:3a:66:a2:4a:40:fc:7e:16:
                    24:55:58:d4:22:44:5a:77:2d:52:90:4b:d4:79:dd:
                    74:0e:97:61:d7:49:21:1e:13:b7:6d:99:90:87:24:
                    94:df:85:f5:c0:e6:be:7d:bc:36:02:b0:60:bd:db:
                    d1:01:1a:66:0d:1d:73:97:51:7f:7b:4d:d7:54:b8:
                    e1:6f:10:78:03:ee:56:e3:16:1b:55:6c:d1:9c:85:
                    e4:20:ab:ce:4e:f3:ce:d8:4a:c4:10:02:f7:7a:3c:
                    f2:06:70:56:88:1e:3d:43:b6:16:98:0c:12:c4:c4:
                    19:c3:f1:20:6c:b0:4b:d4:74:02:00:79:6f:df:51:
                    4b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CD:F9:E9:4E:9D:00:4E:A4:EC:18:D1:B6:83:BF:C3:EA:C1:58:AA
            X509v3 Authority Key Identifier:
                keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:11:35:be:f5:d6:ae:aa:78:57:9c:31:57:7a:94:44:9a:04:
         bc:f9:b9:41:e0:bd:7c:f5:0d:1b:ad:03:79:60:f6:8f:01:e2:
         9a:6a:ef:bf:f1:04:65:a6:1a:89:83:3a:c6:8f:1a:d1:a1:00:
         23:7a:8c:09:2e:14:93:39:e3:8c:3b:03:58:b2:ed:2b:3e:d8:
         78:9a:50:ca:d5:af:12:33:6b:d5:cf:d0:60:b8:01:a6:87:b5:
         6d:82:4f:85:95:55:57:9e:57:39:24:d0:56:a7:b9:ca:b4:01:
         91:f8:54:16:1a:ef:db:f6:71:e8:73:73:ab:bf:ed:ca:c3:46:
         01:e5:d3:38:5d:af:e5:af:b7:93:60:06:7e:bd:a0:0f:c8:83:
         8b:23:d7:b6:53:d6:f5:7e:e7:59:9f:51:7c:ae:fa:9a:be:55:
         ac:0a:e3:79:0a:d4:3c:b2:97:56:6a:92:26:b9:db:f4:9c:cb:
         20:04:71:16:3f:81:93:b8:9c:38:e1:82:23:bd:ec:34:59:fa:
         07:f7:4e:cc:f0:a3:b1:f9:a3:a1:15:1a:25:28:35:3c:c9:a5:
         57:d8:72:91:72:5e:4e:be:30:40:bf:a7:29:8f:43:ab:54:71:
         95:25:fb:30:dd:68:19:37:4c:21:b0:42:76:df:3b:63:d9:54:
         3b:e5:07:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe217ENfpDZMvRuVXm8lqldMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYmFlNTA5ZGY3ZWM1MjRkNGY3NTBmZjgwOTI3NGFiMDA2
NDkzMjIwHhcNMjUwNjI4MTQwMTE4WhcNMjUwNjI5MTQwMTE4WjAzMTEwLwYDVQQD
Eyg5N2NkZjllOTRlOWQwMDRlYTRlYzE4ZDFiNjgzYmZjM2VhYzE1OGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukBoqA3rbVjGYs26m+cGrjgseVCW
XIdwW6n2kHgI9qb1BW+w1gSGW7RFSVF9+PZo0w/UZaiOLxMxLOoDg1G9Sqj89e7s
JIqz3cEBHVhfHC4GdELPj3WoG40yrEP4DO21xzeory3ulMFWFcI2nyGYyyziUUXK
k3g/VVMOrshJOmaiSkD8fhYkVVjUIkRady1SkEvUed10Dpdh10khHhO3bZmQhySU
34X1wOa+fbw2ArBgvdvRARpmDR1zl1F/e03XVLjhbxB4A+5W4xYbVWzRnIXkIKvO
TvPO2ErEEAL3ejzyBnBWiB49Q7YWmAwSxMQZw/EgbLBL1HQCAHlv31FLswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfN+elOnQBOpOwY0baDv8PqwViqMB8GA1UdIwQY
MBaAFAG65QnffsUk1PdQ/4CSdKsAZJMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJybENkOS14U1RVOTFEX2dKSjBxd0Jra3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZmJhYzAtZTdhNS00Yzk1LTg4YjYt
ODRhOWVmZWMwZDFiLzEvQWJybENkOS14U1RVOTFEX2dKSjBxd0Jra3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZmJhYzAtZTdhNS00Yzk1LTg4YjYtODRhOWVmZWMwZDFi
LzEvQWJybENkOS14U1RVOTFEX2dKSjBxd0Jra3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBE1vvXW
rqp4V5wxV3qURJoEvPm5QeC9fPUNG60DeWD2jwHimmrvv/EEZaYaiYM6xo8a0aEA
I3qMCS4UkznjjDsDWLLtKz7YeJpQytWvEjNr1c/QYLgBpoe1bYJPhZVVV55XOSTQ
Vqe5yrQBkfhUFhrv2/Zx6HNzq7/tysNGAeXTOF2v5a+3k2AGfr2gD8iDiyPXtlPW
9X7nWZ9RfK76mr5VrArjeQrUPLKXVmqSJrnb9JzLIARxFj+Bk7icOOGCI73sNFn6
B/dOzPCjsfmjoRUaJSg1PMmlV9hykXJeTr4wQL+nKY9Dq1RxlSX7MN1oGTdMIbBC
dt87Y9lUO+UHWQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:31 2025 by rpki-client