Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
File:                     ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft (raw, json)
Hash identifier:          FjN95dZ94xKPKZBD92C4P0XpRKvtOMFY/IOAL2v23T4=
Subject key identifier:   72:DC:58:CE:47:65:C9:68:CD:2B:7D:63:ED:B0:D0:3E:33:22:5A:80
Authority key identifier: 00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E
Certificate issuer:       /CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e
Certificate serial:       019F90C82B22B2299087603AB0E15F937B19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
Manifest number:          1038
Signing time:             Thu 23 Jul 2026 21:01:05 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:05 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:05 +0000
Files and hashes:         1: ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl (hash: p2WQPoj0f0RCXGLZnQOmBkRQU8SkTMrfcBvh21fEs7I=)
                          2: XUYX3TKPDXOL9F-nbpIpGRvlG8w.roa (hash: EXmgm0KKBubkjhoIVh+28P819hcnVjQyIk/PTDuS3ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:2b:22:b2:29:90:87:60:3a:b0:e1:5f:93:7b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e
        Validity
            Not Before: Jul 23 21:01:05 2026 GMT
            Not After : Jul 24 21:01:05 2026 GMT
        Subject: CN=72dc58ce4765c968cd2b7d63edb0d03e33225a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:32:94:40:bf:d9:1b:f2:ea:b7:c0:a8:66:
                    2f:0e:ae:c4:10:dc:84:8c:7d:39:6c:1b:66:7d:49:
                    9e:d2:5c:39:f6:f2:3b:d5:c4:22:69:30:2c:aa:2b:
                    c6:aa:17:f3:d7:01:1a:2f:ef:da:f8:08:28:77:c8:
                    53:0b:66:3c:09:9d:b0:ed:73:9e:40:b7:dd:37:84:
                    f1:f7:4c:98:87:14:cf:df:be:b6:e7:24:2b:c0:60:
                    26:9f:1f:87:3d:03:4a:28:36:c5:a3:1c:94:76:c0:
                    70:fe:8f:61:44:91:4a:c3:88:98:38:13:77:a9:8d:
                    6d:68:e6:38:06:cd:2e:27:4c:44:36:60:03:9c:e2:
                    d5:71:33:82:b8:75:d5:d8:9e:08:90:aa:83:1e:e9:
                    43:e3:a2:03:38:7f:5b:5e:ea:a3:bf:94:80:a3:b9:
                    d7:0f:7d:b1:d6:58:f4:95:17:a1:20:41:10:42:38:
                    15:38:9d:ed:c3:b5:c6:1e:b1:11:1e:6f:eb:0f:2b:
                    ad:9a:0a:38:9e:ef:44:46:de:1e:de:dc:46:b9:0e:
                    2e:a7:f5:f7:e6:bc:4b:c8:55:9d:65:b9:14:55:00:
                    c2:bb:97:b3:8a:67:50:ce:8b:1e:39:8d:67:07:ce:
                    59:d1:15:7d:0e:4d:33:3e:69:7f:9a:f0:2b:f5:dd:
                    77:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DC:58:CE:47:65:C9:68:CD:2B:7D:63:ED:B0:D0:3E:33:22:5A:80
            X509v3 Authority Key Identifier:
                keyid:00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:04:d7:b3:ce:27:1c:e5:fc:00:72:4f:ed:8c:bf:16:c7:5c:
         93:4e:af:6d:ad:7b:39:f1:06:d2:1a:b3:21:1b:aa:12:a8:5e:
         8e:ca:5c:ce:e1:2f:77:db:fe:38:86:30:0e:ce:fe:8b:d7:a0:
         37:ee:a8:a9:fb:58:6a:b1:9c:7f:94:53:cd:c3:b8:e6:93:21:
         b3:03:c5:e4:b0:98:3e:44:c9:38:3b:3c:62:23:58:9c:26:37:
         b5:40:7d:d3:d9:11:fb:cc:b0:45:b5:26:96:fa:51:63:35:b2:
         fd:b9:42:1d:04:f0:41:d2:fe:16:95:fc:5d:06:93:92:80:8f:
         f4:9b:8f:6e:95:c3:5d:12:4c:e9:4f:f0:2f:3c:fb:14:07:af:
         3e:4f:07:dd:2b:51:67:a0:ca:7e:62:8d:18:bf:ba:55:21:35:
         5d:c8:eb:58:87:ff:3e:b8:a2:52:61:aa:c0:fb:a9:a9:c3:8a:
         e9:5f:40:70:ef:cc:03:2a:e3:44:6c:77:d1:21:70:80:fe:c3:
         f1:0a:e9:ca:94:a2:b1:0d:3d:0b:2c:5c:cc:4e:84:1d:eb:ce:
         c2:09:96:1c:40:b3:d3:2c:d5:86:49:6b:10:86:92:dd:b7:85:
         e4:82:3a:b1:a3:78:52:e9:0f:60:29:10:d1:08:9a:2b:73:a2:
         5e:7b:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:40 2026 by rpki-client