Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File:                     AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier:          F+aHgonZ4Xg5ZeBh/73yRLXXeV5fA9XePDo007s3jq4=
Subject key identifier:   1D:D7:C7:8A:74:F9:44:6B:6B:47:A3:54:C4:32:4D:91:7C:46:74:CA
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer:       /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial:       01A0024B1FD4823E65A9023939D158A80775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number:          1A04
Signing time:             Fri 14 Aug 2026 22:01:12 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:12 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:12 +0000
Files and hashes:         1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: QOOWseSxhL5r2mVuePv55E4Y0NP9ow5/rk1WwyNJMwI=)
                          2: lU3BCZBDNlCDk-8OFyyOit3pGFs.roa (hash: AWI11iVTlePwywxMYMGqGux5nESZadW+LVNcBQPGHWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:1f:d4:82:3e:65:a9:02:39:39:d1:58:a8:07:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
        Validity
            Not Before: Aug 14 22:01:12 2026 GMT
            Not After : Aug 15 22:01:12 2026 GMT
        Subject: CN=1dd7c78a74f9446b6b47a354c4324d917c4674ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:86:fe:37:bf:ad:6e:b9:7d:8c:eb:ac:6a:
                    5c:37:b0:06:b5:2e:a2:b8:ba:b7:80:d8:aa:52:48:
                    6f:07:e9:55:15:95:11:c0:99:6e:6d:3a:8b:60:7c:
                    20:4d:ad:4a:95:80:a2:45:5e:de:89:4d:32:d9:25:
                    75:96:9e:19:02:27:76:57:6a:b3:44:0f:25:7e:51:
                    44:ec:1f:1e:35:3b:99:af:cd:35:ba:41:1d:89:be:
                    81:2d:84:3c:9d:1e:1f:27:00:01:92:40:65:6c:c4:
                    3a:d4:0d:ad:54:b1:ec:b9:ae:a8:c0:61:2e:1c:2a:
                    d0:13:74:2b:35:37:3d:48:bd:6f:6e:a8:e1:ad:ea:
                    c8:bd:86:57:c8:b4:c0:42:2e:24:f8:77:e3:47:59:
                    82:e2:fb:94:7f:dd:2f:38:93:18:8a:a1:7e:0e:c8:
                    89:28:20:a9:8d:29:5e:76:54:b3:90:ff:67:d7:92:
                    67:b6:d7:ab:e0:84:18:89:49:26:1b:f9:2e:5e:5b:
                    2e:d0:44:3a:d3:e5:c0:43:e7:b4:4e:a2:4e:8f:98:
                    2f:b7:58:e4:69:72:ce:d0:9d:9e:4e:98:2b:6c:10:
                    93:a4:95:d5:e7:9d:c7:ee:66:35:03:24:8f:51:f0:
                    52:a6:6f:13:75:69:45:9b:42:36:60:1d:72:e8:60:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D7:C7:8A:74:F9:44:6B:6B:47:A3:54:C4:32:4D:91:7C:46:74:CA
            X509v3 Authority Key Identifier:
                keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4e:5b:1a:b8:26:e5:a8:4a:f7:a8:09:34:48:f9:7f:9e:38:
         67:d1:14:ae:94:53:b1:f9:5b:af:f5:4b:1b:b9:bd:21:5f:5a:
         05:74:d8:2e:3e:69:0a:a5:47:dc:3f:1b:c0:c9:06:14:08:1a:
         98:b6:b9:ba:73:37:f6:c1:af:6a:0a:6f:35:97:d9:d0:fc:94:
         f5:c2:d3:c2:e3:0f:00:8f:67:86:89:16:90:e2:67:4b:55:72:
         68:3a:6b:02:98:57:fb:ff:31:bb:b9:10:58:e6:f0:49:8d:1f:
         70:75:51:97:94:75:c6:be:57:5d:44:8b:ac:a0:22:1f:e5:dc:
         10:e3:46:2a:7a:63:66:2d:f3:6b:18:03:83:be:da:e3:00:3c:
         16:aa:c0:7d:71:c5:b5:e5:9f:18:f1:8e:bd:5f:f7:95:35:bb:
         01:ab:b1:14:54:bd:6e:b6:8d:1c:62:12:f3:e5:7b:08:31:16:
         09:c0:0e:aa:a0:9e:48:1f:5e:d7:eb:ce:fc:8d:61:fb:54:65:
         3d:09:23:36:76:ca:ef:6d:dc:16:16:d0:9c:d7:20:ee:bc:30:
         d1:6d:d7:93:60:c4:d5:06:d5:9a:c3:c1:fd:bb:12:36:1d:be:
         6c:ec:d3:ca:d4:6c:65:94:02:47:b9:78:66:69:e8:af:08:1b:
         8b:58:4a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:44 2026 by rpki-client