Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
File:                     Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft (raw, json)
Hash identifier:          KGheyy/87Yjy//g5jLgVJRPHGD0jd3peEjNI5aMsLc0=
Subject key identifier:   3F:2B:A6:1D:AB:AD:E4:20:B1:E6:1A:F3:41:75:D7:64:57:3F:3F:CD
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Certificate issuer:       /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial:       019D28841EC3CD7CD4E08A3F76DCF011DDB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
Manifest number:          16CA
Signing time:             Thu 26 Mar 2026 05:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:40 +0000
Files and hashes:         1: Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl (hash: UMh2gFiOtLXMc33j+2m9zQUM6DtAbboFf6EfR3G+VJY=)
                          2: AqeEArFXVprPp5Ifa6hKfeHjgZo.roa (hash: SNZsKTAZfwwb0XNOZZFJ3zpSaVaqLY7YkuyejngEFEA=)
                          3: Uf7iuAvCb8JExC01Vm1kk--X2_c.roa (hash: 40r7y1upg5B1BksvHIdC+LJW8WKcY2ft8E1/DsGo58g=)
                          4: euMg0PBrEwdg34FUafeH1CwRG_Y.roa (hash: hIv94tAmUnb+bfy5u57zu0mwJIG8VdW8glZpcNFnYq0=)
                          5: stlziWxLYNCEQsNpe3-_IYmseYU.roa (hash: 5ts4qAFhhFZ3bDpqFGhmwqrpFkC7LGxGEgA0C9oCVoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:1e:c3:cd:7c:d4:e0:8a:3f:76:dc:f0:11:dd:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
        Validity
            Not Before: Mar 26 05:00:40 2026 GMT
            Not After : Mar 27 05:00:40 2026 GMT
        Subject: CN=3f2ba61dabade420b1e61af34175d764573f3fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b2:3d:d7:b2:42:0c:4d:dd:c3:33:66:bd:7b:
                    7c:e1:49:ab:d7:cd:0d:78:e1:2f:a9:b2:a2:55:57:
                    0d:9c:8d:b0:c0:65:3b:f6:df:b5:74:ff:22:78:b6:
                    ba:69:6d:74:d1:62:2a:d8:3d:22:f3:e1:2f:7a:9e:
                    94:3b:81:7e:9a:45:44:56:ee:4d:4c:fd:d3:64:c3:
                    c7:bc:65:f3:07:32:39:1e:47:43:57:ea:9e:e2:cb:
                    6f:48:e6:e9:2d:ca:3d:02:04:7c:64:05:9d:d8:f3:
                    ef:88:a3:61:1d:29:55:7e:5b:46:ba:f0:02:f9:ec:
                    c0:eb:ce:fd:f8:b8:79:81:73:31:80:c3:3a:25:49:
                    2d:01:64:e5:60:0e:bb:76:30:71:89:0a:59:43:39:
                    2d:ea:21:58:d9:25:2f:fb:ff:4f:49:16:88:7c:05:
                    c7:36:5e:91:7a:ce:4e:9f:09:dd:d0:33:24:6b:3e:
                    63:a8:b1:6c:64:9c:3b:c9:1b:e4:1c:85:fd:5b:0e:
                    95:06:73:0a:86:38:86:75:4d:35:6c:7c:2f:db:e8:
                    cb:18:1f:72:18:82:28:cc:78:08:de:1d:68:c3:b2:
                    8b:32:80:66:94:af:df:88:c3:87:f6:00:78:60:65:
                    a8:3a:71:9e:da:15:d9:0f:9d:8e:e2:3a:95:0f:12:
                    4a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2B:A6:1D:AB:AD:E4:20:B1:E6:1A:F3:41:75:D7:64:57:3F:3F:CD
            X509v3 Authority Key Identifier:
                keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:7c:8d:83:49:ba:b3:22:92:40:01:94:6a:9d:43:c3:af:b7:
         78:6d:7b:e8:84:40:63:69:6c:b9:a1:98:3a:65:e0:6c:2f:a0:
         be:b2:06:3b:7c:a1:a3:36:8b:ce:9f:94:da:b5:86:fb:b9:d0:
         2d:6b:57:f4:fa:a8:70:09:48:43:d7:a3:ac:eb:c5:db:de:cd:
         08:75:14:ca:c7:48:d4:f8:80:3c:ec:f2:30:54:e2:89:ec:83:
         d2:80:07:a1:6e:d7:c3:9a:21:96:cd:92:f9:35:24:9e:78:6c:
         68:13:0c:d3:97:0d:f0:24:d1:fa:7a:09:44:83:2a:1d:3f:c1:
         68:d1:6d:db:04:61:98:76:ed:c2:4f:02:32:ce:84:bd:ea:71:
         73:2b:6f:f6:f0:70:8a:d8:f8:cd:35:45:69:72:fc:b1:d2:4e:
         10:00:ad:93:3f:47:8b:02:9d:5a:ce:54:d1:cc:7a:70:51:7b:
         e2:06:c0:54:c7:0b:1b:b9:f9:71:c5:3b:ac:3e:19:e8:a6:24:
         7f:bf:bb:dd:32:f2:d8:2a:ef:52:7c:bb:2a:9a:1b:b0:be:16:
         da:f8:67:91:0d:8d:1f:ca:3e:04:6a:a9:8a:7a:7c:3c:d8:5a:
         d7:4d:be:46:c7:47:98:d8:ad:21:f6:f5:f4:5f:0a:b4:8a:6d:
         08:0b:c9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:37 2026 by rpki-client