Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File:                     AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier:          XwAF5jhXA9VuwAHkRhv8hMCqGRkun1GQpEmFh21wBPc=
Subject key identifier:   1B:C3:07:83:8F:8D:2B:70:8A:9C:27:DE:C0:02:D2:A3:01:72:D9:AF
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer:       /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial:       019E1CEBA5F003E25C827AEDB0F8881BFE73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number:          1379
Signing time:             Tue 12 May 2026 16:01:05 +0000
Manifest this update:     Tue 12 May 2026 16:01:05 +0000
Manifest next update:     Wed 13 May 2026 16:01:05 +0000
Files and hashes:         1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: c+eoh0Tr+V80Sxu7f1cpCg6rauuh62xCaUxZxgMYNkw=)
                          2: Tovu6XYvf5FhR28kdlA-7wKtBkE.roa (hash: mC271DkpvmHL0CjopsqGxIT+uNy91sh6WEkjNwzeRxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:a5:f0:03:e2:5c:82:7a:ed:b0:f8:88:1b:fe:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
        Validity
            Not Before: May 12 16:01:05 2026 GMT
            Not After : May 13 16:01:05 2026 GMT
        Subject: CN=1bc307838f8d2b708a9c27dec002d2a30172d9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:39:02:83:1b:7d:d9:0b:59:41:f3:98:26:
                    b1:0d:00:89:e5:c1:59:31:59:df:e6:8b:6e:98:d7:
                    a6:8c:ad:72:90:c6:f0:62:79:b1:95:9c:c7:65:71:
                    78:51:96:b8:8a:43:a2:aa:5e:ad:54:0e:97:55:7f:
                    05:00:3d:c5:c3:b8:09:51:3c:3d:c8:9f:97:b4:83:
                    08:8c:bd:c6:4b:ac:1c:3a:6f:f3:32:5d:c1:d9:92:
                    fa:30:e5:e2:4b:5b:53:93:af:b6:b6:2d:9d:ae:6c:
                    15:9c:e7:32:58:4e:6f:65:86:fb:0c:3e:62:4d:1b:
                    d6:bc:e3:55:a5:ef:e0:3e:3a:ba:7e:d6:f9:67:d4:
                    13:51:65:ae:bd:30:62:09:19:d3:f8:18:f3:03:07:
                    28:0d:7a:f3:48:15:d3:d9:ab:26:ab:32:b6:87:b9:
                    ac:a3:1c:07:57:e9:28:52:2e:2d:de:a1:27:77:3f:
                    39:e9:a7:61:e6:a2:a0:da:75:8c:e2:f3:f6:3c:f8:
                    56:c8:93:d0:11:f0:10:53:3b:db:76:46:2b:df:d7:
                    74:1b:57:ff:50:77:da:84:d2:4d:f9:46:e0:23:1c:
                    ad:ae:52:b9:f7:79:49:45:9a:8b:39:fb:fa:2c:fe:
                    86:3c:d5:13:43:44:dc:b1:8d:ca:b1:d9:f1:f6:01:
                    3a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C3:07:83:8F:8D:2B:70:8A:9C:27:DE:C0:02:D2:A3:01:72:D9:AF
            X509v3 Authority Key Identifier:
                keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:bb:39:27:84:a9:0e:ab:15:e4:be:d1:50:d7:62:e0:34:06:
         9f:30:67:b5:a2:b6:59:3b:ea:95:db:97:9d:e4:24:bb:2a:5c:
         b4:29:05:e1:46:41:58:28:25:51:bf:6f:8d:cc:5e:d5:59:1d:
         6c:0d:0b:f0:92:90:e2:be:b7:2b:db:9e:b0:b6:c7:bb:cc:16:
         f6:07:24:50:10:f5:90:75:ed:98:74:cb:29:4d:54:85:13:ec:
         46:4d:f6:01:f6:cc:a7:a3:e1:82:87:60:9f:2f:72:44:79:2b:
         c5:c1:ed:19:ff:57:54:a3:0a:ad:ac:d1:29:22:4f:31:b6:ff:
         26:cd:c4:e7:3f:3d:c4:bf:f5:fd:40:86:80:d0:7c:f6:e4:b2:
         fb:fb:39:1c:57:fe:48:ab:37:b0:8b:e8:9b:7b:e0:7e:23:fd:
         32:5d:30:cc:6f:25:9b:31:d7:fd:32:6a:21:be:96:6e:34:e3:
         f9:e6:ff:9c:d5:c4:6e:70:5e:51:3f:49:e6:55:be:77:c5:69:
         b3:f9:b3:74:00:a4:38:5d:ac:3f:c9:5a:3e:5c:26:73:d2:35:
         8d:82:60:ec:47:70:67:82:ce:ac:a1:a1:28:cc:d1:4e:f5:e6:
         57:a9:e9:e9:d2:02:7e:1f:c2:cb:0f:3f:3d:4c:43:df:bd:74:
         26:92:13:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c66XwA+JcgnrtsPiIG/5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYmFlNTA5ZGY3ZWM1MjRkNGY3NTBmZjgwOTI3NGFiMDA2
NDkzMjIwHhcNMjYwNTEyMTYwMTA1WhcNMjYwNTEzMTYwMTA1WjAzMTEwLwYDVQQD
EygxYmMzMDc4MzhmOGQyYjcwOGE5YzI3ZGVjMDAyZDJhMzAxNzJkOWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKU5AoMbfdkLWUHzmCaxDQCJ5cFZ
MVnf5otumNemjK1ykMbwYnmxlZzHZXF4UZa4ikOiql6tVA6XVX8FAD3Fw7gJUTw9
yJ+XtIMIjL3GS6wcOm/zMl3B2ZL6MOXiS1tTk6+2ti2drmwVnOcyWE5vZYb7DD5i
TRvWvONVpe/gPjq6ftb5Z9QTUWWuvTBiCRnT+BjzAwcoDXrzSBXT2asmqzK2h7ms
oxwHV+koUi4t3qEndz856adh5qKg2nWM4vP2PPhWyJPQEfAQUzvbdkYr39d0G1f/
UHfahNJN+UbgIxytrlK593lJRZqLOfv6LP6GPNUTQ0TcsY3Ksdnx9gE6nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvDB4OPjStwipwn3sAC0qMBctmvMB8GA1UdIwQY
MBaAFAG65QnffsUk1PdQ/4CSdKsAZJMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJybENkOS14U1RVOTFEX2dKSjBxd0Jra3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZmJhYzAtZTdhNS00Yzk1LTg4YjYt
ODRhOWVmZWMwZDFiLzEvQWJybENkOS14U1RVOTFEX2dKSjBxd0Jra3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZmJhYzAtZTdhNS00Yzk1LTg4YjYtODRhOWVmZWMwZDFi
LzEvQWJybENkOS14U1RVOTFEX2dKSjBxd0Jra3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7s5J4Sp
DqsV5L7RUNdi4DQGnzBntaK2WTvqlduXneQkuypctCkF4UZBWCglUb9vjcxe1Vkd
bA0L8JKQ4r63K9uesLbHu8wW9gckUBD1kHXtmHTLKU1UhRPsRk32AfbMp6Phgodg
ny9yRHkrxcHtGf9XVKMKrazRKSJPMbb/Js3E5z89xL/1/UCGgNB89uSy+/s5HFf+
SKs3sIvom3vgfiP9Ml0wzG8lmzHX/TJqIb6WbjTj+eb/nNXEbnBeUT9J5lW+d8Vp
s/mzdACkOF2sP8laPlwmc9I1jYJg7EdwZ4LOrKGhKMzRTvXmV6np6dICfh/Cyw8/
PUxD3710JpITxA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:03:35 2026 by rpki-client