Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
File:                     Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft (raw, json)
Hash identifier:          6SzBvljUicbIoqppVgN1QoEHAB6vIjeRAbD9NZ51Mrc=
Subject key identifier:   7A:73:D9:D9:57:82:35:32:6C:99:55:A8:3E:F6:68:DB:51:E3:33:CD
Authority key identifier: 01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80
Certificate issuer:       /CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
Certificate serial:       019E1D90A5D65791160DDFE61C848CF0286B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
Manifest number:          1904
Signing time:             Tue 12 May 2026 19:01:19 +0000
Manifest this update:     Tue 12 May 2026 19:01:19 +0000
Manifest next update:     Wed 13 May 2026 19:01:19 +0000
Files and hashes:         1: Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl (hash: vfuyLqpPcJU+ZgFsG2DbEEiUN2/i1aDoTUbuSjw+gRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:a5:d6:57:91:16:0d:df:e6:1c:84:8c:f0:28:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
        Validity
            Not Before: May 12 19:01:19 2026 GMT
            Not After : May 13 19:01:19 2026 GMT
        Subject: CN=7a73d9d9578235326c9955a83ef668db51e333cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bc:1f:f0:fd:0e:75:4b:46:f3:ca:dc:50:94:
                    4f:f0:08:09:14:dd:99:0e:c3:ed:03:d8:4f:83:75:
                    4a:34:a7:84:b0:29:1d:98:5a:c3:e6:20:12:47:fd:
                    fa:ed:dd:5a:a5:37:b3:63:cd:37:52:26:0a:c9:ab:
                    f9:1b:a1:d1:22:ef:e3:92:7e:aa:e8:b3:ad:63:e8:
                    46:f5:71:9b:55:4e:3e:42:ef:71:e6:47:0f:2f:a5:
                    11:3d:a8:f4:89:d4:be:92:3f:8a:f1:ce:5f:db:31:
                    e0:c3:b8:f5:e7:ba:fb:60:1d:fa:dc:d8:0d:68:a9:
                    0b:24:0b:f4:7d:ab:59:c3:7b:2e:60:36:6c:15:9b:
                    00:d0:d7:b5:ce:77:b3:1e:07:92:fa:a0:e6:88:1f:
                    8c:36:60:74:74:76:15:dd:9b:58:cf:18:3f:68:fa:
                    06:4b:f8:8e:7b:59:4d:4f:12:fe:0d:ba:16:79:ed:
                    2f:ef:22:65:39:82:e6:d3:8c:0b:ee:12:d1:fe:e6:
                    47:6b:4c:65:23:73:d5:2b:2d:2b:c9:7d:76:e3:d2:
                    f4:e4:0f:f0:31:ef:ef:5f:89:33:67:cb:35:e3:fd:
                    eb:3d:e2:9c:0a:80:99:04:0d:24:63:fd:13:e1:7b:
                    e0:1e:92:2a:11:d5:ae:5c:da:a1:66:1d:da:25:3d:
                    3f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:73:D9:D9:57:82:35:32:6C:99:55:A8:3E:F6:68:DB:51:E3:33:CD
            X509v3 Authority Key Identifier:
                keyid:01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:38:5d:e7:47:6c:7d:b1:1a:31:ed:13:dc:40:61:1a:f5:ca:
         4c:ed:80:36:b5:66:ae:c2:9f:8e:27:67:45:9d:fd:26:96:56:
         56:7d:b2:ce:02:b3:52:6d:d4:bf:92:a7:9d:95:2a:3d:bb:16:
         36:98:12:b2:ce:22:70:a7:b2:34:0c:fd:75:5c:a0:82:75:b5:
         6b:2d:92:63:a0:8a:a7:90:b4:78:58:b5:f3:81:f5:91:6d:ba:
         bd:9c:42:25:4f:65:00:db:90:da:99:52:4f:91:7b:2d:ac:14:
         83:8f:bd:eb:d4:45:b4:f3:61:d5:81:12:26:b4:fa:8c:f1:fc:
         2c:67:2a:98:55:a7:95:cf:ba:b0:41:b7:d6:43:e1:2c:b9:2b:
         d6:62:94:b0:82:ee:ac:6d:95:d5:fa:31:7d:0a:c4:d3:52:09:
         0a:3b:37:61:ad:a6:5d:5d:a9:ce:57:c5:eb:e8:c7:9f:27:67:
         b3:83:81:2d:93:0a:2f:ef:c4:00:5a:14:cb:8e:ca:e8:8c:94:
         4e:fe:ed:ee:ef:6e:d9:36:f0:a6:b4:db:69:fd:ee:47:fd:3c:
         69:c7:21:0f:c4:e2:bf:42:54:42:27:eb:d0:e3:87:8b:3f:e0:
         d4:0f:32:f1:a1:1d:f1:86:b6:14:62:17:34:01:33:89:78:df:
         91:97:d6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:37 2026 by rpki-client