Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
File:                     Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft (raw, json)
Hash identifier:          7R+oyWhKXfSMcieZVaR4OiGOoFJpqSPbLiVugbxVQYE=
Subject key identifier:   71:35:28:BE:75:94:82:AC:F7:66:AE:08:15:E5:B2:E3:49:C1:59:73
Authority key identifier: 01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80
Certificate issuer:       /CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
Certificate serial:       019D265F3E7C8F14F97EE0369662F82B20A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
Manifest number:          1884
Signing time:             Wed 25 Mar 2026 19:01:09 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:09 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:09 +0000
Files and hashes:         1: Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl (hash: 199BETpnISMnKu883jS/drWR8lKK890ajSsCbIR/e5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:3e:7c:8f:14:f9:7e:e0:36:96:62:f8:2b:20:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
        Validity
            Not Before: Mar 25 19:01:09 2026 GMT
            Not After : Mar 26 19:01:09 2026 GMT
        Subject: CN=713528be759482acf766ae0815e5b2e349c15973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e5:5b:97:0a:f9:c2:1c:73:2d:ef:af:49:80:
                    6f:1e:57:47:53:d0:f1:44:e5:f2:03:75:a1:44:8f:
                    20:51:c3:cb:dd:fa:af:a1:57:4a:fe:2f:4b:e4:74:
                    bc:a7:73:42:db:76:d1:b0:d0:c3:5b:60:f4:12:9f:
                    73:c0:88:a9:7b:97:a7:f4:9c:15:fe:17:99:d6:f6:
                    e4:af:3b:08:36:5a:12:91:fb:a5:32:c8:0b:ac:95:
                    28:62:f0:41:d6:e1:64:de:01:16:21:0f:49:36:3f:
                    f5:62:5d:2d:c7:bd:e6:55:80:81:d6:cf:d9:ef:b8:
                    24:6a:94:21:b9:4a:6e:71:98:a7:d6:8c:d9:16:f2:
                    f0:86:ea:39:28:48:a7:1a:96:2a:4c:18:11:ed:cf:
                    ab:51:75:9c:32:bc:99:b3:8c:90:3d:ca:c7:26:85:
                    b1:5b:d9:8c:71:15:e8:9c:31:d6:bf:f0:2c:55:a3:
                    72:b7:91:ae:95:a9:9b:8c:98:8d:7e:c7:ce:19:f2:
                    53:14:3c:e0:63:d4:73:f0:bd:7d:2f:fd:ad:ef:e2:
                    12:1d:9a:b7:1b:af:13:ba:d0:f2:92:f1:b6:9f:9b:
                    28:ed:40:24:a9:b0:5d:94:94:97:c7:81:2d:2d:72:
                    4c:0f:4f:3f:1f:f1:bf:7e:a1:1c:51:0b:25:63:c6:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:35:28:BE:75:94:82:AC:F7:66:AE:08:15:E5:B2:E3:49:C1:59:73
            X509v3 Authority Key Identifier:
                keyid:01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:bc:3b:9c:6f:61:d9:3d:b0:e0:af:c9:cd:7d:84:ba:ee:0b:
         5c:54:db:e0:aa:3f:7d:25:fb:cc:6c:6b:47:60:ec:75:cd:79:
         ec:24:e2:ee:fa:5e:26:7f:49:02:c5:61:a9:29:2b:6a:95:6d:
         5d:75:9b:a7:86:00:43:93:82:72:5f:11:1e:45:50:95:84:9c:
         d1:fe:f8:bf:8e:6f:c3:49:cd:f5:cb:f0:1c:60:ed:a4:f0:e2:
         9a:ea:48:c1:81:91:f3:b1:a4:29:8e:d0:fd:7d:75:e4:21:97:
         8c:fa:44:3b:a7:4a:0c:39:77:c7:10:16:57:83:68:62:f7:bd:
         cd:28:32:4a:ac:10:5b:27:53:cc:92:dd:d4:0e:af:d6:45:32:
         a6:a1:b3:ad:7f:25:12:d2:59:28:26:fd:79:57:e4:97:b4:6e:
         b9:29:84:5b:b8:ca:0f:7b:4b:58:c4:1f:d5:ef:4f:39:06:d4:
         80:c4:46:4f:ca:fb:05:2f:33:82:7a:9b:94:f4:70:a5:a4:a2:
         7e:62:88:55:9c:33:50:55:39:78:8e:77:89:fd:f7:c6:10:63:
         4b:ff:5c:c1:65:16:2c:c4:35:b2:03:d9:e8:44:36:29:e0:b2:
         00:75:a7:fa:6e:c1:0f:9e:bf:61:15:b2:4d:fa:93:fb:62:25:
         c9:b0:fd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:11 2026 by rpki-client