Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
File:                     Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft (raw, json)
Hash identifier:          4iLziFnS4BpAn88BAp8IV4QtcBDi5p8wzrD3tm0AtKc=
Subject key identifier:   5E:49:27:C4:EC:05:6E:5E:07:C6:8C:C8:5D:5B:39:82:2B:7E:5D:6B
Authority key identifier: 01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80
Certificate issuer:       /CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
Certificate serial:       01A1D981018A3DABD542C054B73FF0986295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
Manifest number:          1AF3
Signing time:             Sat 14 Nov 2026 10:01:12 +0000
Manifest this update:     Sat 14 Nov 2026 10:01:12 +0000
Manifest next update:     Sun 15 Nov 2026 10:01:12 +0000
Files and hashes:         1: Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl (hash: lMaywYWP4Ze0VPoL9GBUKOogFrZdAdQ/4dqVsxjzDBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:d9:81:01:8a:3d:ab:d5:42:c0:54:b7:3f:f0:98:62:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
        Validity
            Not Before: Nov 14 10:01:12 2026 GMT
            Not After : Nov 15 10:01:12 2026 GMT
        Subject: CN=5e4927c4ec056e5e07c68cc85d5b39822b7e5d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a7:31:69:83:b3:54:7b:51:c7:76:9a:32:30:
                    76:96:90:0d:71:21:56:86:d8:22:23:72:1d:6d:b6:
                    f9:73:44:f7:f4:6b:bd:ac:47:b2:6e:91:b9:98:d9:
                    60:32:d2:35:bc:e9:27:c7:1c:ce:55:16:ac:45:1a:
                    da:61:30:ab:cb:d2:37:37:ca:7f:72:8b:28:e3:c3:
                    8b:34:e6:2f:90:16:d9:01:0f:4b:cb:f9:57:d2:14:
                    e5:11:8d:d9:53:03:a6:6d:4b:f1:b8:5c:69:6a:63:
                    f5:c8:e9:28:80:2c:c2:3b:b8:8d:74:81:96:5f:75:
                    fc:9e:59:bc:27:82:a6:f4:b6:f2:1c:aa:5a:72:27:
                    71:82:24:b5:3b:c0:7c:68:12:4e:d8:7c:38:6e:d9:
                    d0:c2:63:7c:8e:dd:02:7d:5d:6d:fb:f8:28:80:c5:
                    08:71:c9:d7:54:2f:d5:82:1b:b8:1f:df:6f:b9:60:
                    71:0d:05:b0:7e:86:d5:d6:af:c3:b8:7d:b1:d8:55:
                    d4:f5:20:03:2a:7e:c6:04:f0:72:85:f2:7e:8a:82:
                    fc:7f:2c:f8:88:48:b0:a6:c4:03:a2:42:7f:51:9f:
                    8d:2f:39:83:a0:52:1d:88:f4:82:7e:5a:9b:0d:86:
                    6a:a8:02:bc:88:66:db:1e:88:09:52:22:86:ba:2b:
                    f5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:49:27:C4:EC:05:6E:5E:07:C6:8C:C8:5D:5B:39:82:2B:7E:5D:6B
            X509v3 Authority Key Identifier:
                keyid:01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ad:d4:7c:74:bf:53:8c:83:ef:71:0f:a6:04:18:7d:30:0b:
         b0:17:c4:e2:0d:e1:a1:48:72:e6:5a:bb:f5:ee:d2:f9:aa:07:
         52:43:7d:90:55:ac:f2:c4:e9:11:7e:ba:18:b4:0f:77:f2:40:
         41:7e:61:e2:bd:31:21:5d:c5:03:0a:e5:ea:b4:7d:54:e8:fd:
         ce:50:43:57:ed:be:c1:d8:bb:bc:e8:42:83:b3:b1:63:f5:3c:
         f2:98:83:1c:5a:77:df:89:70:4a:b2:3c:d4:45:12:1d:7d:af:
         d9:7c:96:df:2e:21:ac:ea:3c:cc:d2:8f:9b:f2:60:04:6c:70:
         fc:a0:ca:0f:6d:14:43:8e:c3:2e:3b:27:40:08:64:e2:07:c6:
         76:7b:d5:c8:05:a6:2e:ec:9c:09:1e:09:05:17:5c:f4:c8:4f:
         4e:90:b7:57:8f:15:ce:5b:fd:de:a5:de:70:a7:2d:e5:13:69:
         af:10:fa:d2:fd:ca:17:f5:f5:34:51:78:54:00:64:44:28:82:
         33:90:37:a6:f0:85:84:28:0e:af:85:3b:d6:9f:93:c8:36:33:
         92:85:1c:04:bb:76:6d:2e:64:4e:7d:c6:d8:0a:f6:8f:4c:7c:
         95:f9:cd:60:bf:ea:c0:07:2e:50:50:fa:db:42:f2:e0:3b:23:
         9e:c1:3f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:25 2026 by rpki-client