Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/174eac-fcba-4d45-9e9a-c37876b18ff1/1/AbHJuf8wZgaLsxJXAJ6iBLt7nwo.mft
File:                     AbHJuf8wZgaLsxJXAJ6iBLt7nwo.mft (raw, json)
Hash identifier:          XxQktNAr9K7QIX2zA3MLTFyt55V9FGQ6EjixWSgtbmw=
Subject key identifier:   7E:3D:C6:5A:CA:5E:0C:73:F5:66:34:FE:E2:DD:05:97:1E:86:4D:D6
Authority key identifier: 01:B1:C9:B9:FF:30:66:06:8B:B3:12:57:00:9E:A2:04:BB:7B:9F:0A
Certificate issuer:       /CN=01b1c9b9ff3066068bb31257009ea204bb7b9f0a
Certificate serial:       01A12B44DF886D27BAC864C1EF5C3168D32B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbHJuf8wZgaLsxJXAJ6iBLt7nwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/174eac-fcba-4d45-9e9a-c37876b18ff1/1/AbHJuf8wZgaLsxJXAJ6iBLt7nwo.mft
Manifest number:          015A
Signing time:             Sun 11 Oct 2026 14:01:36 +0000
Manifest this update:     Sun 11 Oct 2026 14:01:36 +0000
Manifest next update:     Mon 12 Oct 2026 14:01:36 +0000
Files and hashes:         1: AbHJuf8wZgaLsxJXAJ6iBLt7nwo.crl (hash: RBhbQEOzHnyEkgcbgZKh1Lv/sm2oA1Lx3keQH/qJDUI=)
                          2: MGUaHqJegBCE1l5_MxFp5h6jh7k.roa (hash: DaB3NesThc8p9XuYgoBEssWaRNTwh2QHlV9mYtKvRU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/174eac-fcba-4d45-9e9a-c37876b18ff1/1/AbHJuf8wZgaLsxJXAJ6iBLt7nwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/174eac-fcba-4d45-9e9a-c37876b18ff1/1/AbHJuf8wZgaLsxJXAJ6iBLt7nwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbHJuf8wZgaLsxJXAJ6iBLt7nwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:44:df:88:6d:27:ba:c8:64:c1:ef:5c:31:68:d3:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b1c9b9ff3066068bb31257009ea204bb7b9f0a
        Validity
            Not Before: Oct 11 14:01:36 2026 GMT
            Not After : Oct 12 14:01:36 2026 GMT
        Subject: CN=7e3dc65aca5e0c73f56634fee2dd05971e864dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:5f:aa:28:36:11:b2:2b:8f:a2:30:23:a8:
                    e3:e9:55:85:88:f4:8f:c2:e6:2a:81:2a:46:e2:f7:
                    bd:0a:55:c0:fb:2c:60:cc:d0:70:4b:7d:00:ae:40:
                    85:b3:a3:1f:8b:6a:ba:d4:94:21:89:19:d2:4a:f8:
                    69:3a:51:fc:92:33:19:1a:0f:36:3c:f7:97:13:6c:
                    0f:7b:04:66:80:be:4d:bd:d7:5b:51:bd:b0:97:3c:
                    f2:5e:0e:48:13:5e:2a:a5:78:5f:2f:cf:66:9d:45:
                    3f:a1:31:4d:87:06:92:2d:5c:71:bc:32:ae:91:20:
                    52:3b:88:65:d4:73:c8:a8:2a:4d:d5:5c:32:01:ac:
                    ef:86:36:b0:60:24:30:5a:e9:73:be:58:6a:de:e1:
                    4e:91:7b:0b:00:5a:87:6f:ff:a3:62:d8:59:8a:26:
                    67:39:27:5e:e7:5b:09:a3:88:e2:5c:f5:da:59:5d:
                    c7:b1:17:18:53:f7:09:79:24:bb:32:70:1a:dd:72:
                    3e:19:a8:34:16:d8:e4:10:61:71:1e:14:79:fd:aa:
                    e7:c6:90:5d:93:4f:59:98:90:c1:6c:f8:7a:8b:c8:
                    23:36:93:15:3e:8c:76:2a:77:65:9d:1a:de:67:07:
                    c8:38:75:2e:0f:8c:39:40:49:bc:c4:ef:e7:54:ea:
                    4b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3D:C6:5A:CA:5E:0C:73:F5:66:34:FE:E2:DD:05:97:1E:86:4D:D6
            X509v3 Authority Key Identifier:
                keyid:01:B1:C9:B9:FF:30:66:06:8B:B3:12:57:00:9E:A2:04:BB:7B:9F:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbHJuf8wZgaLsxJXAJ6iBLt7nwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/174eac-fcba-4d45-9e9a-c37876b18ff1/1/AbHJuf8wZgaLsxJXAJ6iBLt7nwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/174eac-fcba-4d45-9e9a-c37876b18ff1/1/AbHJuf8wZgaLsxJXAJ6iBLt7nwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4a:44:a0:82:be:1d:53:10:57:0b:10:77:dc:35:cd:23:4b:
         63:bf:dc:bb:2e:18:31:02:cf:c2:33:c2:af:b9:3e:8f:2e:3a:
         e2:d6:90:ac:7e:47:35:ab:4d:c4:45:e9:34:a2:38:0a:18:0d:
         b1:9b:0b:b3:54:3f:8b:2f:9b:ab:07:d4:5c:73:2a:08:ec:cf:
         c8:3d:ce:da:74:b7:ae:45:92:3d:eb:3d:5e:09:c7:c4:72:2a:
         22:4a:7d:5e:2b:a5:00:79:29:3e:d4:c8:14:ec:b6:14:fa:a1:
         3b:97:be:03:f2:bc:14:14:3b:d9:6e:49:ab:09:d6:d1:cc:7d:
         34:c2:de:79:ad:1c:6b:84:72:29:d2:2d:6d:b8:5b:e5:d0:98:
         a1:96:ab:ac:8d:98:28:a3:d6:56:9f:9d:a8:ab:ee:2d:f3:c9:
         3e:d0:c6:da:de:a8:e1:40:0f:6a:cc:82:ab:a4:c7:c9:bf:d3:
         b7:60:5d:90:12:41:80:46:b5:91:da:bd:7b:a8:a5:12:1a:b4:
         56:a3:69:de:d4:04:4a:82:ea:8c:3f:45:87:48:39:59:ba:91:
         cc:e7:69:a2:67:d3:fc:38:88:21:c2:8a:7b:6c:bf:f0:a6:15:
         6d:17:25:fb:61:63:28:d7:04:6a:da:71:fb:b7:26:a9:be:ac:
         ac:00:8d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:55:17 2026 by rpki-client