Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File:                     AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier:          4ucERqE2ExZrTwi0t79mvCyB5w68TWrQtrPwcP4EeJs=
Subject key identifier:   BD:79:D3:8A:24:14:6F:83:93:93:7A:43:77:A0:1F:AC:B6:DB:55:C4
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer:       /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial:       019F91A3A6B04CE570984FD5622B855AC172
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number:          143A
Signing time:             Fri 24 Jul 2026 01:00:49 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:49 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:49 +0000
Files and hashes:         1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: aiPXv9sUHR4XOAUowdOJtCpu1SXu4UMK+eXVw2gxIE0=)
                          2: Tovu6XYvf5FhR28kdlA-7wKtBkE.roa (hash: mC271DkpvmHL0CjopsqGxIT+uNy91sh6WEkjNwzeRxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:a6:b0:4c:e5:70:98:4f:d5:62:2b:85:5a:c1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
        Validity
            Not Before: Jul 24 01:00:49 2026 GMT
            Not After : Jul 25 01:00:49 2026 GMT
        Subject: CN=bd79d38a24146f8393937a4377a01facb6db55c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:16:c8:d1:a6:61:2d:c7:34:01:82:40:97:
                    6f:82:13:14:74:52:b2:66:25:5d:0d:4a:7e:72:a5:
                    1f:2a:20:25:82:b2:b2:7a:8a:71:39:ee:22:6a:99:
                    40:b2:89:d2:02:ea:41:a6:88:b2:9d:cf:6a:bc:b5:
                    d7:59:ed:6b:f6:2b:92:55:81:a3:16:c4:12:53:6d:
                    d2:4d:2a:6d:6e:6c:44:06:0a:69:08:c4:3b:93:08:
                    cb:32:37:32:59:55:8a:2d:90:d9:33:e2:6a:de:49:
                    07:31:f8:db:26:1e:bb:d7:e8:9f:7c:32:98:3b:e1:
                    30:dd:f1:cb:6a:f4:ce:5d:48:0f:99:1d:4b:99:44:
                    d8:83:27:b5:01:6b:3d:74:e4:19:9b:19:da:52:f4:
                    59:80:15:1b:a1:16:9a:1f:fb:82:1a:b6:c9:bf:42:
                    43:c9:cc:48:52:aa:03:df:32:3c:c8:d6:f0:41:38:
                    5d:d5:8a:e8:81:16:12:83:19:f9:8b:48:2e:47:b7:
                    1e:99:06:06:45:ed:66:cf:d1:96:0c:8a:c9:95:59:
                    11:a7:19:d9:82:1f:5f:52:bb:38:57:3a:43:32:8a:
                    35:d0:d8:c4:ed:71:a0:14:af:db:77:6f:37:09:54:
                    36:8d:db:dd:23:c7:7f:8e:bf:f9:1e:26:1a:58:65:
                    0a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:79:D3:8A:24:14:6F:83:93:93:7A:43:77:A0:1F:AC:B6:DB:55:C4
            X509v3 Authority Key Identifier:
                keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e9:97:d4:5e:e3:e2:7b:5e:50:02:e3:36:f8:db:79:53:2a:
         e3:02:99:68:49:b5:b6:bc:1d:fd:b3:a4:bf:93:43:94:ef:07:
         90:19:82:8a:c7:a0:41:b0:3c:c3:ca:cf:b2:de:11:fd:0a:3d:
         0c:74:cb:0c:92:c4:cd:0e:6b:cf:90:5f:7c:fd:08:d0:36:40:
         a2:5f:b5:c0:f7:9e:cd:ec:02:53:84:23:bb:f0:ce:66:bf:77:
         d0:d6:a6:02:3e:d5:56:dc:c7:27:57:5f:19:25:50:f5:77:4a:
         e0:a1:1c:53:7c:d8:73:0f:b0:47:a4:c9:6c:1b:81:e5:c0:6b:
         47:1a:6c:03:7f:d0:88:88:50:97:d4:01:58:d6:8f:8b:4b:14:
         c1:4a:a1:1e:62:b3:84:fa:db:f2:b2:7d:f9:8a:6b:89:71:06:
         92:e7:e9:0d:89:48:ef:dc:20:31:74:b5:80:ee:06:f5:b7:19:
         aa:3d:ad:ae:96:21:c0:b7:f8:8f:76:22:ca:ac:ea:4a:db:a9:
         aa:13:75:07:fe:ee:80:c6:76:f7:9c:12:31:6e:00:32:33:67:
         59:1c:2a:a6:39:f3:35:48:0d:b5:e3:2b:0d:4f:78:c2:0b:c4:
         c6:98:b6:8a:63:6f:5e:dd:ca:bf:e3:57:98:75:69:ec:cd:e7:
         a0:bf:73:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:02 2026 by rpki-client