Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
File:                     ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft (raw, json)
Hash identifier:          RN7bjwd51Kmqnx/IMrUisG0E+uSDqNgMOjnE7PsYXtQ=
Subject key identifier:   CE:63:18:86:56:C9:22:59:B1:7B:88:94:3A:3A:88:CF:E7:A6:A7:48
Authority key identifier: 00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
Certificate issuer:       /CN=0018a3328c44f08f65243c61e064fefed6413c04
Certificate serial:       019D28845263DFD902D9107546449993260D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
Manifest number:          1885
Signing time:             Thu 26 Mar 2026 05:00:53 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:53 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:53 +0000
Files and hashes:         1: ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl (hash: DrS9dBL0hLxTOi6D6yisrsIkhhA6qq/iZFOXHJa7hew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:52:63:df:d9:02:d9:10:75:46:44:99:93:26:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0018a3328c44f08f65243c61e064fefed6413c04
        Validity
            Not Before: Mar 26 05:00:53 2026 GMT
            Not After : Mar 27 05:00:53 2026 GMT
        Subject: CN=ce63188656c92259b17b88943a3a88cfe7a6a748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:e5:9c:43:11:00:00:0e:17:e2:25:43:83:
                    42:2c:c1:c5:8a:85:d6:d7:41:cb:31:4c:a8:c1:34:
                    f5:ae:8d:2e:b1:19:7a:6f:88:c4:9b:1a:d8:ae:02:
                    5c:a3:29:4c:ff:b6:48:e3:83:c0:ab:26:c1:d8:f5:
                    cd:47:1a:1a:fa:a5:dc:e5:02:41:15:15:60:17:ba:
                    65:c5:8a:28:80:42:b1:3c:62:e9:59:0f:39:14:41:
                    3c:a6:bd:58:d7:2c:49:9d:8c:6d:1d:96:58:0d:71:
                    ad:ca:24:41:dd:d9:90:d7:0d:81:62:99:d6:00:da:
                    4e:de:45:3d:8a:11:a9:96:04:ff:05:6c:51:ca:c9:
                    cf:9a:eb:94:6c:87:27:3e:dd:03:fd:9c:6d:2a:f3:
                    84:d8:c6:ad:3e:34:32:f9:a7:03:09:f1:4d:3f:35:
                    59:5f:e2:d1:c2:7d:d1:8f:77:70:b5:d4:38:e8:6c:
                    38:71:ea:c9:bc:06:00:34:82:8a:1a:37:e9:e6:de:
                    1d:48:56:cd:64:4f:c3:c8:24:81:a2:5f:67:64:45:
                    99:b6:7f:e0:43:9e:87:fb:df:cc:36:7c:77:47:e9:
                    3f:9a:bb:d3:28:8e:23:75:03:9b:fe:8c:bd:22:2c:
                    62:3a:fc:54:9f:51:55:20:b2:6e:74:9c:10:ec:1a:
                    aa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:63:18:86:56:C9:22:59:B1:7B:88:94:3A:3A:88:CF:E7:A6:A7:48
            X509v3 Authority Key Identifier:
                keyid:00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b2:ab:ee:7e:37:79:59:f1:bb:62:26:90:e9:06:1b:0e:6f:
         ca:45:45:c4:fe:d5:20:4f:9c:0a:82:ec:c7:82:08:b4:6d:31:
         01:87:f8:d4:92:14:2f:4f:21:4f:6c:39:d6:ce:53:fd:8f:2c:
         4f:0a:34:a7:00:8c:5e:62:6f:6e:0d:dd:b8:77:16:c6:a6:27:
         dd:28:8a:4b:22:75:a4:52:61:ca:e5:cc:d3:4f:de:95:31:1f:
         ac:d5:58:e6:f9:8c:14:55:ae:64:cc:17:2f:4d:7c:a3:18:d9:
         3c:b9:40:97:51:23:59:9b:62:35:86:94:f0:a3:a4:ed:2c:05:
         34:c6:30:33:49:93:fd:6a:9b:ab:8e:e3:56:dd:09:54:d1:86:
         aa:bc:47:e1:74:b9:ea:21:e0:52:f6:d9:fc:f1:98:4e:9d:e1:
         c5:c0:8a:a3:e2:86:47:00:a9:d6:24:6d:2d:fe:2d:c1:fb:6b:
         e3:50:0b:22:94:99:a5:0f:81:6b:9d:8b:9d:e3:29:90:ef:fa:
         bc:bb:ef:a9:e4:9e:b1:11:14:b6:24:53:6d:e1:d5:3f:1a:b7:
         d4:95:98:9e:5f:aa:58:3a:dc:3f:f3:61:15:34:fa:c1:d4:d9:
         c7:32:97:f5:1a:bc:e8:c3:2e:70:fb:69:b7:b0:17:56:c9:d0:
         0b:79:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:45:00 2026 by rpki-client