Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File:                     AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier:          VJjYL2nM/T0WLz0fM+hr9CsmrUary7Pl0xbEXAvOpTo=
Subject key identifier:   7F:D5:9F:E0:4A:23:ED:69:84:DB:5C:78:90:CE:83:5F:BF:47:2A:9C
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer:       /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial:       01A0D42695C21047A95489370A5244260608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number:          14E1
Signing time:             Thu 24 Sep 2026 16:01:33 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:33 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:33 +0000
Files and hashes:         1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: fihf3NRQal3QkM/9f+Fecf5aexLuDDYQo/EWMspvJCY=)
                          2: Tovu6XYvf5FhR28kdlA-7wKtBkE.roa (hash: mC271DkpvmHL0CjopsqGxIT+uNy91sh6WEkjNwzeRxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:95:c2:10:47:a9:54:89:37:0a:52:44:26:06:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
        Validity
            Not Before: Sep 24 16:01:33 2026 GMT
            Not After : Sep 25 16:01:33 2026 GMT
        Subject: CN=7fd59fe04a23ed6984db5c7890ce835fbf472a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:0c:9d:32:79:70:49:9a:c4:2c:ae:f5:e0:
                    c1:e0:54:88:99:c0:ae:a9:2b:52:1b:6c:da:87:5b:
                    18:64:a5:5e:fc:5f:04:cd:99:38:7f:2f:a5:fc:eb:
                    e3:4f:85:2f:3c:65:48:0d:7e:c6:a3:4b:d4:09:f0:
                    d3:6e:61:f3:b1:d8:51:5d:0a:fc:78:4c:ad:a1:2d:
                    55:ab:fd:fe:a8:9b:fc:2a:d6:76:f9:69:ad:5c:b7:
                    74:c7:be:e6:7f:c0:c2:ac:54:f6:f1:e5:0d:10:77:
                    87:49:f0:57:1e:7c:18:9f:45:8b:c5:77:da:b7:45:
                    ba:15:50:24:c8:1a:26:d3:99:ac:7e:87:c0:16:8f:
                    88:25:8a:f3:d4:57:1a:ee:f4:81:0c:82:68:b0:1f:
                    49:4b:13:a7:b8:e5:c1:a6:f0:0a:84:0a:15:bd:56:
                    88:fc:3d:71:1a:26:f9:4e:2c:93:f1:0c:34:9f:57:
                    b7:e8:61:9b:00:6c:79:7a:c2:39:96:56:6d:7b:96:
                    f6:51:34:57:bc:57:c2:d8:be:90:10:ec:05:33:19:
                    96:44:a7:9a:2d:3b:17:35:81:05:be:87:58:80:5f:
                    46:2f:e7:12:2f:1a:91:0f:d9:c2:1c:d1:71:df:9e:
                    a3:d5:e4:64:d1:17:78:03:fb:87:77:f7:53:f8:b1:
                    d6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D5:9F:E0:4A:23:ED:69:84:DB:5C:78:90:CE:83:5F:BF:47:2A:9C
            X509v3 Authority Key Identifier:
                keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:11:a0:cb:e6:d1:41:a3:ed:8e:04:69:4a:17:4d:d9:2e:6b:
         c1:68:46:e2:2c:cf:f0:1c:7a:bb:92:0e:a5:ca:18:55:0c:7a:
         42:1a:4b:45:0d:22:5f:48:4a:db:10:9c:2c:36:87:47:42:dd:
         d9:0f:cb:78:01:17:88:86:56:e3:1a:3b:d4:65:9b:27:bc:33:
         13:71:d6:3e:01:e7:b9:af:55:03:94:3f:d1:22:44:ea:22:ce:
         39:93:40:5b:56:93:14:64:b9:30:16:ce:c4:6d:0a:99:3f:48:
         b5:9d:1d:df:ae:67:e9:18:3e:4f:52:b9:c1:f8:5e:f9:27:8e:
         8c:e1:f9:31:6d:5e:9f:59:df:41:3d:f7:b1:29:49:b0:5c:7b:
         32:81:6c:e8:49:15:48:5b:8e:27:01:af:ad:a3:4b:dc:3e:93:
         69:d7:23:f2:6f:e4:18:2f:22:f3:d1:fd:65:1a:85:d2:cf:24:
         8b:25:68:66:24:2f:21:f2:3e:5d:34:99:27:39:72:78:4c:43:
         20:65:7b:c9:8e:4b:04:53:9c:a8:5a:8f:bf:15:b3:7f:e2:3b:
         6c:ec:2e:71:7b:fe:fb:78:18:3e:ce:98:61:02:72:42:cc:a8:
         06:ee:95:20:b7:ef:e4:22:7f:b5:21:48:cd:23:60:48:1c:c2:
         c6:58:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:52:19 2026 by rpki-client