Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
File:                     Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft (raw, json)
Hash identifier:          ddE7SAdsYzuysvbyPPoP+ieqrmxcrYRRj62w3A6yq2U=
Subject key identifier:   B1:8D:01:FC:79:5B:80:C7:33:AD:B5:09:6A:C8:49:58:EF:10:D0:41
Authority key identifier: 01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80
Certificate issuer:       /CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
Certificate serial:       019848C0CC9AA22F58D027FD64A821601296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
Manifest number:          15FF
Signing time:             Sat 26 Jul 2025 22:00:51 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:51 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:51 +0000
Files and hashes:         1: Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl (hash: KCjU5FRyLk45nDqOT82cA2dXr7jTSMVilgFzOMXVLCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:cc:9a:a2:2f:58:d0:27:fd:64:a8:21:60:12:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
        Validity
            Not Before: Jul 26 22:00:51 2025 GMT
            Not After : Jul 27 22:00:51 2025 GMT
        Subject: CN=b18d01fc795b80c733adb5096ac84958ef10d041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b3:e2:d4:23:d8:8c:34:e3:4c:f7:55:eb:68:
                    7a:d7:f8:43:e9:a2:a3:bd:89:e2:ac:89:de:1d:a1:
                    f9:b1:a3:b3:37:f1:f4:64:70:c3:e8:16:f4:1e:1e:
                    24:38:bd:bb:02:80:1d:55:02:ad:cc:4b:c4:ea:32:
                    19:96:40:76:95:e5:17:cf:7b:1c:81:cc:43:39:50:
                    47:34:79:71:cd:66:3a:de:00:37:a8:b1:02:61:9a:
                    3e:e5:59:24:5d:45:75:12:2b:db:76:b7:ff:84:04:
                    73:b9:b6:82:b5:39:17:6c:c5:1e:33:cd:81:26:9e:
                    91:63:c2:c7:21:e2:75:63:47:8c:d0:06:b6:b0:09:
                    9f:f9:4c:54:73:62:80:f1:aa:25:8d:9a:1e:d8:a1:
                    be:3d:d1:b6:91:c3:69:98:95:4e:b4:34:38:93:22:
                    5f:cc:be:72:85:29:b3:a8:27:4a:f3:d0:a7:71:f3:
                    fb:46:06:d2:99:95:b0:1a:2a:dd:0c:fb:c7:46:de:
                    2a:63:d2:43:98:ec:0b:c2:23:de:49:39:80:a8:0e:
                    2e:18:65:9d:51:95:0e:58:56:4f:7f:f4:c6:d7:60:
                    56:83:8b:4d:f8:7f:5a:00:3a:90:02:b2:ff:49:52:
                    b0:44:d7:78:57:d3:97:50:05:8d:a7:f9:50:9b:00:
                    83:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8D:01:FC:79:5B:80:C7:33:AD:B5:09:6A:C8:49:58:EF:10:D0:41
            X509v3 Authority Key Identifier:
                keyid:01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c6:96:b3:73:b6:83:14:29:11:d0:69:97:2c:ad:79:57:db:
         eb:2e:9f:f6:1d:55:a1:fc:94:fb:ff:6f:e5:f7:a1:c2:07:f9:
         dc:97:56:67:d4:ce:8b:4a:94:dc:26:ad:cb:94:9d:80:39:1f:
         db:00:af:7a:70:7d:2c:d5:73:8b:b0:f1:63:9e:52:ce:21:59:
         08:a9:1b:4e:06:5b:ce:45:ed:c5:85:7f:13:2b:07:6f:cf:c4:
         72:c8:45:cc:95:af:2a:a5:64:65:9b:f9:5c:aa:46:8c:e8:c5:
         6e:fa:54:25:21:ea:30:69:d0:54:4e:13:88:84:c1:a4:36:f5:
         1a:bf:7d:3d:30:56:78:bf:69:a6:37:c7:cc:6e:9c:36:39:e1:
         6e:89:77:de:b5:67:a9:3f:12:dc:ad:9d:dd:6f:13:73:31:d8:
         3f:3d:d7:b3:1d:8b:af:10:5f:48:84:b9:e1:d8:47:a7:a1:86:
         e4:eb:46:59:80:9a:49:04:09:27:50:a9:5d:42:f9:4e:a8:25:
         0d:ad:74:74:b5:81:5b:a6:a0:72:5a:4a:91:59:0d:52:05:2e:
         8a:cb:38:66:62:87:3e:d7:c1:cc:d9:86:ab:0c:43:ab:1b:73:
         ac:67:ef:c5:c3:58:ba:55:ce:16:51:64:47:20:0c:56:a9:98:
         7d:98:6a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:10:54 2025 by rpki-client