Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
File:                     Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft (raw, json)
Hash identifier:          sP6hUXCDvoRxeadVpSUIraKEyd8L9ODH1CQKM8TzwVw=
Subject key identifier:   AE:7F:66:15:8A:2B:44:93:5F:DA:98:89:43:88:F0:10:AE:3F:FC:27
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Certificate issuer:       /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial:       019E1FB568E91225DD53DF38352B4D11BD76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
Manifest number:          174A
Signing time:             Wed 13 May 2026 05:00:42 +0000
Manifest this update:     Wed 13 May 2026 05:00:42 +0000
Manifest next update:     Thu 14 May 2026 05:00:42 +0000
Files and hashes:         1: Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl (hash: 2Lbykd9hnWwrhZBzvi2cGPf9Kdubvp6JWQaT4/ruk2k=)
                          2: AqeEArFXVprPp5Ifa6hKfeHjgZo.roa (hash: SNZsKTAZfwwb0XNOZZFJ3zpSaVaqLY7YkuyejngEFEA=)
                          3: Uf7iuAvCb8JExC01Vm1kk--X2_c.roa (hash: 40r7y1upg5B1BksvHIdC+LJW8WKcY2ft8E1/DsGo58g=)
                          4: euMg0PBrEwdg34FUafeH1CwRG_Y.roa (hash: hIv94tAmUnb+bfy5u57zu0mwJIG8VdW8glZpcNFnYq0=)
                          5: stlziWxLYNCEQsNpe3-_IYmseYU.roa (hash: 5ts4qAFhhFZ3bDpqFGhmwqrpFkC7LGxGEgA0C9oCVoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:68:e9:12:25:dd:53:df:38:35:2b:4d:11:bd:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
        Validity
            Not Before: May 13 05:00:42 2026 GMT
            Not After : May 14 05:00:42 2026 GMT
        Subject: CN=ae7f66158a2b44935fda98894388f010ae3ffc27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:cf:0e:84:95:97:6b:42:ae:78:c4:5a:27:
                    39:d9:e9:8c:24:7f:3c:41:b6:99:6f:83:de:1a:5a:
                    f5:b5:87:ed:53:f1:21:61:d5:84:3a:43:b5:ad:55:
                    e8:7e:31:ba:52:50:d7:1a:26:14:a4:d8:c2:76:9f:
                    67:cf:3e:cf:ff:8d:51:0d:5e:6c:25:e0:e4:eb:7a:
                    b0:f4:e9:55:e9:a2:2f:fe:d1:b1:d9:3f:23:a2:bd:
                    8c:44:42:75:ef:f7:5a:0a:63:5f:25:ac:89:0f:5f:
                    32:74:a4:f3:65:e9:ea:35:b2:5e:b7:96:93:50:fb:
                    12:11:60:26:20:3d:89:74:3b:92:7b:98:cd:ee:7f:
                    74:2f:10:83:9c:22:9f:58:dd:e0:94:e2:21:05:16:
                    c2:c9:e3:a3:a0:eb:49:19:fe:e4:41:8a:39:dd:95:
                    7c:58:7e:1a:d6:f8:14:cf:0b:f4:2c:42:e5:7b:38:
                    d1:a3:ff:a8:e2:61:44:95:49:77:f7:da:f5:ff:30:
                    1a:21:88:46:e6:83:81:00:e5:69:aa:50:8e:a1:92:
                    14:02:b1:61:7a:b3:a4:b8:3b:24:cb:95:ea:25:50:
                    15:6c:94:df:30:c5:7a:eb:c2:db:da:0e:fb:33:34:
                    e3:82:05:8d:ad:43:28:cf:2c:49:13:f3:c3:d3:af:
                    9a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7F:66:15:8A:2B:44:93:5F:DA:98:89:43:88:F0:10:AE:3F:FC:27
            X509v3 Authority Key Identifier:
                keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:45:7f:90:a4:ad:82:6f:a3:e1:56:79:30:f6:9b:ab:54:35:
         d2:ad:5d:e6:10:d6:38:7a:fc:73:ca:02:ee:8c:72:df:f3:4d:
         7c:52:40:6a:ee:f5:1a:48:79:24:d3:e0:3a:81:4f:c6:cb:78:
         06:67:d2:e1:1f:41:3c:40:80:ac:02:1e:6c:35:4f:69:c9:89:
         56:a6:27:48:d2:b8:fc:30:f3:a2:d4:71:ce:a2:61:a7:8d:d2:
         5a:da:c4:93:c2:23:e7:49:d9:89:61:3c:13:0f:f4:cc:92:2f:
         bf:02:ae:5c:02:4a:53:12:36:92:45:82:98:e5:c7:aa:5a:c2:
         98:54:6e:9d:d1:49:0c:85:db:62:4e:3d:57:3a:78:c4:80:c6:
         e1:a5:2a:e3:f9:c6:77:b6:b4:27:bb:f1:fc:62:79:48:42:7e:
         85:79:a0:78:64:86:4b:25:5b:e3:b8:ea:67:a9:59:b2:0d:ca:
         6f:40:ab:21:c8:1d:68:25:36:f7:75:b4:21:06:9c:7b:63:07:
         21:2c:a4:18:66:c1:f7:35:9e:6a:7d:9f:22:54:ff:50:cd:92:
         0b:f9:3f:6a:81:21:be:74:22:20:d0:20:2e:16:fc:9d:ae:89:
         e3:81:21:25:89:30:11:e7:aa:41:ae:e2:66:7c:d8:77:f4:79:
         81:52:38:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:55:00 2026 by rpki-client