Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
File:                     ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft (raw, json)
Hash identifier:          6d2wdBj2/w1JqXChKmoPxypB/nqSI2p5huMceT1raU0=
Subject key identifier:   F1:A7:84:FB:98:22:C5:60:86:56:48:85:6B:C1:63:36:57:2D:66:0E
Authority key identifier: 00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E
Certificate issuer:       /CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e
Certificate serial:       0198E29C05640FA5C237BFAC3AD067D905BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
Manifest number:          0CC2
Signing time:             Mon 25 Aug 2025 19:02:12 +0000
Manifest this update:     Mon 25 Aug 2025 19:02:12 +0000
Manifest next update:     Tue 26 Aug 2025 19:02:12 +0000
Files and hashes:         1: ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl (hash: h9blqCJvHHDKQAnd008iOpv18Mr4vRHLqcxQ8X5fA9g=)
                          2: BvIKnOZDDnJ3fYjwKb9MPS2VREA.roa (hash: 6YHj3YUhTYKgioEXOjY6pW/I1gB2DwKxLtlbSUJymPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:e2:9c:05:64:0f:a5:c2:37:bf:ac:3a:d0:67:d9:05:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e
        Validity
            Not Before: Aug 25 19:02:12 2025 GMT
            Not After : Aug 26 19:02:12 2025 GMT
        Subject: CN=f1a784fb9822c560865648856bc16336572d660e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2d:99:fa:ad:1b:11:fd:cb:65:5f:a6:90:6a:
                    dd:c6:f6:96:71:82:5b:63:9f:a3:38:04:63:61:77:
                    6c:f2:0f:93:ce:89:c6:61:1d:5e:aa:18:df:d1:37:
                    b4:3c:55:b2:4b:e8:7c:cf:a3:f7:86:63:64:98:8c:
                    ab:c4:ce:26:52:ed:13:bd:91:88:31:1b:6d:a2:41:
                    a7:f3:30:0a:37:91:cc:6f:07:cc:10:06:6c:08:82:
                    4b:9d:d8:6a:2b:ed:33:0d:d7:7a:22:54:01:d4:68:
                    0a:eb:76:80:4f:a6:ec:94:b3:12:10:fc:e8:bf:29:
                    39:41:f1:5e:d4:58:f4:be:15:15:d5:bc:ff:0a:16:
                    87:7c:f1:95:65:c1:fe:f7:d5:b4:97:2a:2b:57:f7:
                    76:cf:04:1f:39:06:0a:0a:73:11:e0:0e:1a:1a:71:
                    c1:91:97:1c:37:15:1c:20:15:3f:9d:3c:52:cf:4e:
                    2c:b1:2c:9a:6f:69:0a:5c:7d:11:70:e9:ce:22:80:
                    70:38:e6:24:d0:5b:2e:43:41:a9:27:d6:bc:18:ec:
                    7e:d2:2c:84:cf:75:45:01:a5:3b:90:16:be:4a:4f:
                    da:ed:0b:61:ef:b1:07:1f:e2:e3:85:62:13:7b:90:
                    b2:6e:87:ab:76:0d:4f:8f:33:1e:93:66:80:2f:ca:
                    72:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A7:84:FB:98:22:C5:60:86:56:48:85:6B:C1:63:36:57:2D:66:0E
            X509v3 Authority Key Identifier:
                keyid:00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3a:dd:a8:09:a5:eb:ec:c8:bb:0e:25:fb:fe:f6:a0:01:df:
         a2:7a:d6:19:f4:10:f3:98:9c:6e:a2:09:7e:3c:2d:97:69:f3:
         9e:66:87:1f:a7:7c:00:53:44:0e:fa:f8:73:58:1a:03:27:d2:
         c6:3e:77:eb:52:93:19:4a:30:6c:c8:9d:d9:e6:d4:6b:b4:4f:
         bd:14:f5:2b:77:b8:f8:1f:a3:97:20:88:09:68:6b:ee:20:c0:
         34:b9:18:69:13:5e:86:73:01:77:37:f9:2d:17:8c:e3:68:14:
         ff:41:10:0e:e1:1d:ec:ea:25:6f:ee:75:50:d1:dd:17:20:83:
         69:87:f6:1a:f1:6a:76:0b:76:72:79:b4:71:c9:59:5d:e0:97:
         d7:35:7f:48:6f:95:62:32:ea:18:ce:4b:f2:4d:63:2b:4a:d3:
         90:f5:70:45:c7:3a:a2:64:72:57:79:00:d8:ff:ba:d9:ab:e5:
         ad:7a:3a:13:fc:63:5e:d7:1f:00:4f:05:7c:85:9b:11:8f:57:
         6c:18:e6:29:5c:50:fa:d2:a8:b7:0c:3b:65:15:5d:7b:32:5f:
         ac:19:32:59:b1:31:b3:bb:24:83:16:c6:44:a2:6d:dc:cb:e0:
         4f:f1:ec:b5:8a:49:7f:87:64:41:df:c4:a1:48:6f:06:e1:0f:
         df:60:cd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 00:13:14 2025 by rpki-client