Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
File:                     Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft (raw, json)
Hash identifier:          I4PRhqrRbcE8BO/MIVblpnUS0DKRs06ymaLQxgnPh7k=
Subject key identifier:   3D:9C:2A:FD:AF:3D:7C:E0:CC:8D:90:7B:8E:4D:0E:6C:E6:26:F6:0D
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Certificate issuer:       /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial:       019DCE99AB66E70441A4C8ABFA8B5DDA07E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
Manifest number:          1720
Signing time:             Mon 27 Apr 2026 11:01:10 +0000
Manifest this update:     Mon 27 Apr 2026 11:01:10 +0000
Manifest next update:     Tue 28 Apr 2026 11:01:10 +0000
Files and hashes:         1: Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl (hash: nmflUiU1Twp8gtt33hy/B7IrsbPs2RYZruW+D2fb3Rg=)
                          2: AqeEArFXVprPp5Ifa6hKfeHjgZo.roa (hash: SNZsKTAZfwwb0XNOZZFJ3zpSaVaqLY7YkuyejngEFEA=)
                          3: Uf7iuAvCb8JExC01Vm1kk--X2_c.roa (hash: 40r7y1upg5B1BksvHIdC+LJW8WKcY2ft8E1/DsGo58g=)
                          4: euMg0PBrEwdg34FUafeH1CwRG_Y.roa (hash: hIv94tAmUnb+bfy5u57zu0mwJIG8VdW8glZpcNFnYq0=)
                          5: stlziWxLYNCEQsNpe3-_IYmseYU.roa (hash: 5ts4qAFhhFZ3bDpqFGhmwqrpFkC7LGxGEgA0C9oCVoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:99:ab:66:e7:04:41:a4:c8:ab:fa:8b:5d:da:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
        Validity
            Not Before: Apr 27 11:01:10 2026 GMT
            Not After : Apr 28 11:01:10 2026 GMT
        Subject: CN=3d9c2afdaf3d7ce0cc8d907b8e4d0e6ce626f60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3e:6c:8b:2d:d4:9b:c7:01:39:5e:9e:c0:42:
                    ac:63:7e:52:af:0b:86:a1:13:49:a5:53:0e:29:ce:
                    1c:13:17:7d:f4:e6:15:6c:e5:35:61:f7:91:06:b7:
                    a4:b0:0c:55:ec:18:8d:bb:7f:45:de:4d:e6:48:c1:
                    71:e7:b1:b7:3e:0e:07:95:41:38:e2:61:5b:a5:a7:
                    8a:4b:1a:92:c8:37:98:3b:95:62:84:37:e4:c5:0e:
                    3f:93:4e:e7:2d:af:f4:e6:a8:1e:94:1e:bb:46:65:
                    2e:6e:68:8a:dc:9c:82:dc:e2:69:6b:f7:6c:18:2b:
                    e6:08:36:19:e2:66:7e:43:9b:51:cc:cd:5d:ea:a1:
                    85:68:f8:cb:cf:4d:fd:06:4e:7b:d7:cd:9c:ae:9f:
                    d5:17:5f:be:7f:99:2a:ab:0c:29:ee:84:3a:93:1b:
                    07:a6:a7:91:b2:ee:0a:bd:1a:2c:d8:7d:39:4a:0e:
                    67:cd:d0:bc:12:63:de:be:e8:c1:67:c0:4d:f7:7f:
                    bf:f6:fa:7f:2e:c7:8b:ca:da:eb:65:08:15:03:d3:
                    79:b3:12:95:15:d4:59:cc:08:ba:56:99:95:bb:b8:
                    6f:df:b6:dd:d0:b0:39:9f:9d:cf:73:44:db:14:8b:
                    62:8a:90:29:90:44:ce:6d:d0:8e:37:53:65:e9:e4:
                    a0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9C:2A:FD:AF:3D:7C:E0:CC:8D:90:7B:8E:4D:0E:6C:E6:26:F6:0D
            X509v3 Authority Key Identifier:
                keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:59:eb:02:2a:f5:9f:0f:56:49:57:af:3d:0d:b9:81:55:96:
         b7:af:12:f2:56:5e:8f:c1:3b:2e:21:35:dc:11:67:b9:4a:d7:
         b0:fc:58:15:06:28:cf:5d:17:71:db:c4:5b:44:00:ae:06:4b:
         c1:aa:19:4e:36:47:0a:48:0e:0c:bf:43:e5:1c:f7:30:17:bb:
         3e:7c:fc:14:c3:55:d0:cc:8b:e1:a7:69:15:4b:ee:31:78:97:
         3d:58:16:a6:b1:e2:05:b4:b2:6f:80:a1:be:62:25:da:86:0e:
         5a:74:f8:d7:3f:94:00:c2:69:0c:79:d6:07:73:ce:66:8f:8c:
         f3:af:0b:4c:02:28:dd:c0:c8:e9:24:c2:6f:f9:12:0f:39:60:
         da:0e:5a:01:85:6b:80:87:f3:d6:13:f4:90:f0:50:4c:ce:8f:
         ca:1d:35:c5:18:75:f0:55:b9:96:d5:34:03:13:90:f4:6e:51:
         f1:1f:50:78:ec:a9:0d:fe:00:e6:9c:21:4d:d4:d9:a6:5c:c2:
         27:b2:2b:48:aa:21:ab:b1:34:a7:a7:74:86:f1:e5:93:da:3d:
         ce:d9:53:96:d7:19:4b:02:51:1e:4c:d2:6d:3d:52:c4:b0:46:
         d8:4c:ac:09:21:33:a2:ad:6e:49:5e:a7:f0:8f:45:f9:23:ca:
         46:42:48:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:59 2026 by rpki-client