Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
File:                     ABCrc5F2m18sVOM8i1p9-fN6M6g.mft (raw, json)
Hash identifier:          Rk6KddhNKb83uAzRaSngE1CqgA9u3zpst0H0XuYWeVk=
Subject key identifier:   B0:AD:D0:49:E8:1B:F7:81:4A:DF:14:26:BA:A6:67:93:DA:04:60:AB
Authority key identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
Certificate issuer:       /CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Certificate serial:       019E1F47CDF59B94A1D05F45BFC2D14B6FE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 03:00:59 +0000
Manifest this update:     Wed 13 May 2026 03:00:59 +0000
Manifest next update:     Thu 14 May 2026 03:00:59 +0000
Files and hashes:         1: ABCrc5F2m18sVOM8i1p9-fN6M6g.crl (hash: TDS0c+pmmXSMpSaWoqkX2u7EIe1MxxsbzwNoydXD7Yc=)
                          2: kgWGA2scOy7vL1BHpP0g-5WfRCQ.roa (hash: FazW3OzSsWSS9InjuTMHlSSn57uFOu+iI9WBoJvuTOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:cd:f5:9b:94:a1:d0:5f:45:bf:c2:d1:4b:6f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
        Validity
            Not Before: May 13 03:00:59 2026 GMT
            Not After : May 14 03:00:59 2026 GMT
        Subject: CN=b0add049e81bf7814adf1426baa66793da0460ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:da:6f:59:cf:5b:ba:f8:df:50:07:46:47:
                    15:66:ac:a6:76:2f:45:37:85:08:b3:46:41:9f:98:
                    06:ee:6c:08:04:aa:99:9c:27:39:11:dd:cd:63:98:
                    ec:bb:43:c0:ca:93:43:4f:b8:73:41:b1:2b:d1:2d:
                    91:f9:97:d8:66:6d:b4:d4:5e:aa:3d:8a:cd:f7:b7:
                    a4:92:56:b1:7e:8f:12:45:c9:6a:96:df:72:56:50:
                    16:19:f8:cd:42:39:4d:ae:bb:99:f3:0c:de:e2:3c:
                    d0:d2:1b:e8:db:91:6e:7d:a5:fd:52:de:81:b0:39:
                    08:62:52:6e:bb:5d:9e:ec:a0:2d:2a:23:fb:40:ee:
                    26:79:39:4e:ee:9e:55:9d:2d:53:a6:5f:ff:8c:a3:
                    ec:69:53:41:c1:96:91:74:7d:dc:84:7e:40:2e:e4:
                    f6:34:58:b8:3b:04:64:33:8f:1f:0a:01:86:79:82:
                    f6:09:fb:5e:57:c8:0a:60:f8:47:86:48:71:43:c5:
                    78:b2:e6:98:33:f5:cc:db:cd:bd:64:83:1c:75:c1:
                    9a:d0:95:94:30:5a:55:3b:9f:cb:73:3c:bb:40:fb:
                    9f:47:c2:29:68:4b:fa:e7:e0:3c:e0:79:d1:36:89:
                    db:2a:b9:ce:f0:74:e6:6e:bb:7e:40:b3:3b:34:ed:
                    7f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AD:D0:49:E8:1B:F7:81:4A:DF:14:26:BA:A6:67:93:DA:04:60:AB
            X509v3 Authority Key Identifier:
                keyid:00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e7:47:6d:95:77:41:f4:d5:95:ac:74:a4:91:9d:b3:b9:19:
         51:60:d7:22:16:20:cd:f3:3c:8b:9b:f0:92:86:5c:d9:fb:53:
         9e:80:82:ea:3b:0a:85:86:12:66:8a:b9:cc:bd:19:d0:1a:3b:
         c9:18:4d:07:10:dd:6b:62:56:91:ed:15:29:cf:16:6e:05:40:
         af:20:67:36:58:dc:a4:94:a9:5c:61:f0:fa:5c:f9:f1:1e:28:
         29:4f:22:99:af:8a:09:f5:4d:4a:11:19:43:78:91:4c:72:05:
         51:09:e3:d0:29:8e:57:d6:1f:93:5f:fe:57:84:ff:03:14:80:
         aa:18:9a:4d:88:c2:a6:57:8b:37:ac:95:15:fc:79:de:70:52:
         ea:3e:95:e5:90:11:c9:9f:8e:ba:04:ba:5d:5c:97:94:66:3c:
         5a:ed:5f:b0:12:01:eb:53:9b:f7:b7:76:43:1f:50:8c:09:55:
         0c:c9:88:73:84:f8:59:ec:56:eb:7a:92:0b:4d:e8:52:09:fc:
         96:61:8f:19:2e:92:6e:89:ff:ee:60:75:6f:d1:85:64:c0:4c:
         3c:92:94:c0:91:ed:d0:a4:44:da:5c:68:f8:92:02:36:58:b5:
         ed:7d:9c:d2:32:71:c2:9f:7f:8f:c4:cf:33:23:60:cc:72:15:
         de:7d:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:18 2026 by rpki-client