Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
File:                     ABCrc5F2m18sVOM8i1p9-fN6M6g.mft (raw, json)
Hash identifier:          xwUZENhyfSb68GKFJf3UoFRcQHInGc6pOb9vFDf5Ufk=
Subject key identifier:   9D:6D:01:51:3E:C4:76:C6:7F:7B:B4:09:3B:A0:55:F3:04:FF:76:A6
Authority key identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
Certificate issuer:       /CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Certificate serial:       019D262897DE89ABEA2545A03154324D6ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 18:01:27 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:27 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:27 +0000
Files and hashes:         1: ABCrc5F2m18sVOM8i1p9-fN6M6g.crl (hash: FTjlRxlxWvffhJsS8Yl0kFyvK9Bp/g5LyJ2h4Y2ywqs=)
                          2: kgWGA2scOy7vL1BHpP0g-5WfRCQ.roa (hash: FazW3OzSsWSS9InjuTMHlSSn57uFOu+iI9WBoJvuTOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:97:de:89:ab:ea:25:45:a0:31:54:32:4d:6a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
        Validity
            Not Before: Mar 25 18:01:27 2026 GMT
            Not After : Mar 26 18:01:27 2026 GMT
        Subject: CN=9d6d01513ec476c67f7bb4093ba055f304ff76a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8f:9f:f1:d3:33:7b:f2:4f:52:5d:6f:48:ad:
                    b5:c8:3a:97:a2:59:d8:04:dc:65:06:db:52:6f:a5:
                    b7:73:7e:f8:83:8c:6a:04:20:2b:5e:4f:6c:bd:e3:
                    f5:0b:16:95:be:b5:2c:cb:61:4f:0b:89:4e:f8:70:
                    05:1d:ef:87:26:37:82:68:38:c9:e0:82:9b:14:bd:
                    93:0c:a1:11:90:29:fd:92:59:3d:70:10:2f:6f:1d:
                    65:61:b6:9d:60:8b:97:54:fc:61:85:03:15:cb:dd:
                    97:b6:26:c3:d7:80:1e:05:21:c2:54:dd:de:2e:13:
                    c9:a3:08:88:24:4f:e3:42:fb:d4:28:0f:1d:f2:46:
                    7c:29:7b:85:3a:67:a1:35:ac:85:cc:9a:08:8a:3a:
                    b8:08:89:b7:e6:51:7f:85:17:17:00:48:c6:6d:a0:
                    82:d2:16:ac:3b:48:08:d4:25:6d:7c:c6:9f:c8:5b:
                    03:41:b1:e6:fc:96:b2:d7:51:e6:ac:ee:81:22:bc:
                    74:50:52:1b:2d:55:9a:cc:54:09:2b:e7:1e:73:ec:
                    49:7e:7e:9d:28:f7:d5:b6:a9:16:ad:57:a4:a0:e5:
                    e1:9d:2a:a6:ca:e5:26:a4:f4:f5:17:94:bc:70:34:
                    27:1f:89:91:fe:ed:00:60:fc:81:e0:d1:81:5b:c4:
                    5d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6D:01:51:3E:C4:76:C6:7F:7B:B4:09:3B:A0:55:F3:04:FF:76:A6
            X509v3 Authority Key Identifier:
                keyid:00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:14:aa:7a:95:24:a0:44:0e:eb:b8:a8:1e:0d:2d:84:fd:15:
         a8:24:da:05:94:c1:b7:3e:89:bc:16:1f:4b:18:68:be:29:17:
         9c:89:b3:eb:83:0f:94:13:86:81:dc:34:4b:ff:48:5c:a4:96:
         ab:95:4e:d6:f5:1e:f8:3a:ca:f6:4a:ac:bf:ef:a9:c9:89:c3:
         e5:92:d4:6a:39:99:09:fa:53:91:10:da:26:00:ff:7f:7b:55:
         8c:9c:5b:94:8f:77:a0:0e:b7:ad:a6:cd:43:9e:f0:52:ac:b9:
         0e:e6:7f:1f:1d:f8:64:73:17:64:d7:3d:b7:20:73:60:75:a4:
         7f:39:fc:07:96:8b:f7:96:56:7f:d3:45:e2:f2:5d:bc:a6:fc:
         1b:64:79:cf:31:8c:f8:4c:10:2a:56:b5:03:da:02:df:73:71:
         01:a1:b7:ec:15:96:4d:44:ff:c6:08:6a:4f:10:73:b0:d6:0c:
         47:84:40:c7:67:f3:c2:e7:3f:76:98:22:d7:35:b5:9c:45:15:
         38:1a:b4:1d:a6:4a:48:de:3b:9d:f3:b8:63:fb:93:67:8e:f1:
         11:da:fc:b3:21:f5:83:f3:34:29:c3:97:bd:db:c3:ce:5f:da:
         4b:d5:04:6e:c8:97:96:39:9e:c3:96:ce:a0:f5:8c:28:f4:b8:
         61:83:54:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:44 2026 by rpki-client