Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
File:                     ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft (raw, json)
Hash identifier:          BCOKTGtOlBGbtjo6/9qFoBCff4C/psgcAZbRQm8UpIo=
Subject key identifier:   2F:CF:74:33:5E:4E:94:1F:60:3B:C0:8F:66:32:5E:49:3C:3A:6E:6E
Authority key identifier: 00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
Certificate issuer:       /CN=0018a3328c44f08f65243c61e064fefed6413c04
Certificate serial:       01A0D314FBD7773580A496376613DF90CBAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
Manifest number:          1A6B
Signing time:             Thu 24 Sep 2026 11:02:42 +0000
Manifest this update:     Thu 24 Sep 2026 11:02:42 +0000
Manifest next update:     Fri 25 Sep 2026 11:02:42 +0000
Files and hashes:         1: ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl (hash: OeRh4BXtghOhpJxJA6lhBYXxSf9iRztR2bEvSJnM6m8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:14:fb:d7:77:35:80:a4:96:37:66:13:df:90:cb:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0018a3328c44f08f65243c61e064fefed6413c04
        Validity
            Not Before: Sep 24 11:02:42 2026 GMT
            Not After : Sep 25 11:02:42 2026 GMT
        Subject: CN=2fcf74335e4e941f603bc08f66325e493c3a6e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:18:a6:2a:f6:0e:af:47:90:21:33:66:a2:
                    46:d0:ec:8d:a9:d7:f8:3c:d8:f0:a1:c1:a2:d0:ca:
                    18:35:d5:cf:94:56:b4:0a:b6:e8:9b:5b:5a:63:f1:
                    1d:cc:eb:13:a5:dd:37:da:92:5a:a4:98:eb:ab:30:
                    73:5e:e5:27:df:f0:20:9f:06:65:e6:28:6c:5d:22:
                    aa:aa:d0:86:19:64:3b:b3:68:d7:74:d3:3b:31:ef:
                    67:55:d0:72:05:07:ad:c4:95:36:79:33:e3:10:5a:
                    cd:28:0a:c0:56:d5:2d:9d:5c:13:94:bb:dc:45:6b:
                    a0:97:69:e7:96:9a:85:96:30:36:c9:d1:3e:61:f8:
                    81:fa:8f:9a:6e:13:5f:23:70:87:47:ef:a3:da:eb:
                    3f:6b:63:79:ab:3c:69:01:4c:0b:21:58:f4:f6:4a:
                    06:b7:83:94:5b:97:92:40:6a:5c:ad:95:6f:81:08:
                    56:a7:9d:6a:3f:64:9d:fd:54:ff:1b:0d:6e:96:69:
                    02:13:b9:0f:2c:ee:66:b6:ca:7e:60:9b:11:87:c4:
                    df:f7:cd:09:e2:91:71:66:71:52:7b:58:39:7c:4b:
                    24:6c:92:7c:32:c9:e5:5e:60:77:62:67:8c:86:14:
                    7a:b7:69:23:88:f3:aa:b0:d3:0c:ad:6c:3d:16:ff:
                    3b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CF:74:33:5E:4E:94:1F:60:3B:C0:8F:66:32:5E:49:3C:3A:6E:6E
            X509v3 Authority Key Identifier:
                keyid:00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:04:a5:06:2c:16:a7:90:79:05:c7:7d:8b:69:84:71:93:4c:
         a1:ab:e7:7b:f6:23:a1:16:ad:b3:ae:5a:07:e8:e4:72:cb:c1:
         dc:83:d2:2b:3c:e3:70:bf:ce:95:a1:95:d1:2b:f9:21:82:2d:
         25:24:07:b7:a8:6e:f7:ae:cd:c1:ed:2a:6a:8d:fe:cc:5f:c4:
         e5:42:9e:ce:52:5b:81:ab:3d:3f:75:f9:a8:9a:eb:d0:e7:d5:
         b2:2d:5b:31:ff:e0:ff:d8:6e:8f:4f:b4:8c:b7:4e:22:ae:10:
         1d:a3:ff:48:10:b4:26:03:d1:69:bd:df:8b:94:c1:84:f8:c3:
         62:69:29:42:47:0e:b6:02:ca:52:50:ec:16:5f:9c:bb:7f:67:
         b5:a4:47:09:dd:fb:72:cb:a2:ee:54:57:14:46:99:24:b8:84:
         1a:cf:28:ba:b1:07:a1:fa:1a:7d:d3:c7:47:0a:dc:29:2d:36:
         ac:13:a8:96:5d:05:d2:95:96:ff:61:3c:82:00:01:74:3e:e3:
         f9:bd:02:cf:c7:4f:37:ab:b4:80:f0:33:1d:43:30:66:c6:af:
         0f:e3:35:80:ca:d8:4f:8d:88:33:bd:e8:0d:f1:89:6f:34:07:
         36:04:86:45:82:13:e6:4c:8c:80:53:04:d3:31:25:42:d1:2d:
         22:73:52:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:38:06 2026 by rpki-client