Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File:                     AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier:          P59tulhN6lGLrvbUZSsUuL9hXbqosMU19Pk2wgUQUBw=
Subject key identifier:   B4:6F:86:B9:70:BB:DC:D6:E7:BB:6B:A4:09:B5:FB:F1:DD:E8:38:2A
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer:       /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial:       019D2704A6435853AACF77DD9B7A0C4BA735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number:          0F56
Signing time:             Wed 25 Mar 2026 22:01:49 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:49 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:49 +0000
Files and hashes:         1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: UldOHnq1ZBfDVyK126t9Hvl6pslFet+d1tSc8CJDY0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:a6:43:58:53:aa:cf:77:dd:9b:7a:0c:4b:a7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
        Validity
            Not Before: Mar 25 22:01:49 2026 GMT
            Not After : Mar 26 22:01:49 2026 GMT
        Subject: CN=b46f86b970bbdcd6e7bb6ba409b5fbf1dde8382a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:32:b6:78:0f:fc:2c:b2:70:56:40:4f:55:5f:
                    9e:73:01:f6:50:0c:b3:61:6b:f6:0d:41:32:52:11:
                    55:b0:13:41:61:f0:63:bc:35:ae:25:55:4a:ae:2a:
                    a2:85:78:16:63:e2:bd:6e:b3:61:78:ad:a6:ca:31:
                    11:2f:ce:15:6e:a8:5b:de:71:1f:14:db:24:83:49:
                    3b:f0:d9:61:e3:db:ae:18:74:92:50:85:59:32:ac:
                    30:19:60:15:99:c6:ac:10:61:33:ce:7c:10:42:5b:
                    6b:98:b8:b9:f9:f2:0f:69:90:a8:bb:55:2c:92:99:
                    e8:1b:3f:29:b0:10:4c:3e:6f:8b:62:a9:c2:08:ad:
                    af:99:17:72:95:c9:61:b2:1e:d7:77:91:c0:ed:56:
                    73:c6:f0:8b:fd:f5:20:58:ce:23:6c:65:b1:46:a6:
                    98:53:e4:49:23:30:9b:c2:51:95:ec:b0:e1:71:49:
                    67:fd:34:8c:18:ed:ac:4c:e9:0c:6e:b1:0c:c6:c3:
                    91:80:38:e5:37:3c:f6:69:9d:25:18:39:e5:c4:48:
                    f1:ed:74:4b:2a:88:ee:39:da:7e:3d:87:e0:63:0e:
                    f8:c9:21:7e:63:be:24:db:b8:6f:a4:a1:08:a1:18:
                    57:af:ec:19:7b:1f:0e:a0:de:c8:9d:0c:aa:cf:39:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6F:86:B9:70:BB:DC:D6:E7:BB:6B:A4:09:B5:FB:F1:DD:E8:38:2A
            X509v3 Authority Key Identifier:
                keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:5f:69:d4:a2:78:26:c9:ed:d7:37:50:08:af:fc:93:64:
         c7:50:d2:4e:34:82:eb:63:b8:d5:36:f8:cf:ba:db:56:c8:27:
         43:10:19:4f:3b:a2:69:01:3f:de:ef:58:b0:6a:1e:d3:74:42:
         08:6f:f3:b9:c8:02:64:7f:16:8f:a7:ec:b9:59:9d:43:a7:46:
         0d:a9:9c:82:1b:84:1e:17:58:4c:0c:7d:a3:5c:f7:60:1f:31:
         e4:bc:8b:56:06:f5:27:05:f2:08:21:58:35:bd:44:d9:9c:af:
         81:10:cc:86:98:e7:c7:a9:32:01:b6:77:69:85:19:42:2c:80:
         e3:bd:be:6e:ab:d7:7e:df:08:f9:a2:e6:17:9a:e6:88:42:e1:
         17:d3:97:6d:5b:df:3c:b6:07:81:08:4b:64:08:e7:15:a3:28:
         81:26:8e:4f:89:92:8c:95:38:5c:c1:e7:f9:a4:47:a7:84:b7:
         f6:22:84:ac:3a:d9:b7:13:e8:8e:a8:ef:4b:5b:c8:f5:8a:fc:
         66:ae:5f:f5:35:c1:5e:2e:13:3e:a2:90:af:0e:1a:63:f4:6f:
         24:41:3c:82:78:ce:5a:95:a0:7e:84:05:e1:24:f4:67:32:27:
         2b:c4:7e:86:31:e7:ff:c6:bb:2a:c9:b3:9f:15:a2:09:33:1d:
         0c:54:aa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:45 2026 by rpki-client