Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
File:                     Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft (raw, json)
Hash identifier:          ypTs6UmlvnO24z3XOZhBAoifDmifV4XAZVmk6cUDzDo=
Subject key identifier:   23:9F:D1:6F:F8:39:21:B4:EE:2E:D9:5E:1D:3B:44:05:B5:A8:D8:9B
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Certificate issuer:       /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial:       019CE4ECC37E7A765B1DD2E3ABCF45A89F18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
Manifest number:          16A7
Signing time:             Fri 13 Mar 2026 02:00:47 +0000
Manifest this update:     Fri 13 Mar 2026 02:00:47 +0000
Manifest next update:     Sat 14 Mar 2026 02:00:47 +0000
Files and hashes:         1: Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl (hash: sglrm0VJiPirjoPOLrOHTQVfZK6n4DRLfo47v34tKco=)
                          2: AqeEArFXVprPp5Ifa6hKfeHjgZo.roa (hash: SNZsKTAZfwwb0XNOZZFJ3zpSaVaqLY7YkuyejngEFEA=)
                          3: Uf7iuAvCb8JExC01Vm1kk--X2_c.roa (hash: 40r7y1upg5B1BksvHIdC+LJW8WKcY2ft8E1/DsGo58g=)
                          4: euMg0PBrEwdg34FUafeH1CwRG_Y.roa (hash: hIv94tAmUnb+bfy5u57zu0mwJIG8VdW8glZpcNFnYq0=)
                          5: stlziWxLYNCEQsNpe3-_IYmseYU.roa (hash: 5ts4qAFhhFZ3bDpqFGhmwqrpFkC7LGxGEgA0C9oCVoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:ec:c3:7e:7a:76:5b:1d:d2:e3:ab:cf:45:a8:9f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
        Validity
            Not Before: Mar 13 02:00:47 2026 GMT
            Not After : Mar 14 02:00:47 2026 GMT
        Subject: CN=239fd16ff83921b4ee2ed95e1d3b4405b5a8d89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0f:4a:80:78:f6:dc:ce:ea:58:26:9b:10:14:
                    f9:2a:23:9a:13:e8:77:46:06:fb:46:16:35:3a:57:
                    7d:d3:e8:81:f3:99:92:19:c4:0f:5a:34:21:aa:18:
                    df:a2:84:a4:72:4e:16:94:13:f1:56:86:c2:a9:08:
                    04:02:1b:cb:f9:10:0c:a8:bd:52:a2:ea:fe:5d:fa:
                    8c:5b:e0:a0:2d:ff:bd:dc:66:65:41:55:57:13:ab:
                    3e:bd:2f:06:31:94:a4:b9:70:11:34:b9:fc:98:e6:
                    3e:97:ff:12:2c:c5:08:c6:38:99:54:cd:16:f3:a3:
                    95:af:e6:17:c0:5d:60:14:6a:b6:2b:47:20:75:ad:
                    3b:62:27:c1:14:1b:fb:1f:4b:9a:ea:df:04:68:a3:
                    81:8f:bc:16:9d:57:a0:dc:30:c2:00:2a:b5:d7:a8:
                    2d:50:26:92:9b:33:a2:ce:76:c9:e5:46:28:c2:f8:
                    02:3b:99:91:ca:58:42:2c:7b:5b:54:f2:11:01:17:
                    e9:40:1b:70:2b:e6:8a:08:35:c7:40:82:2f:51:b1:
                    81:e6:d3:ac:d9:8e:42:10:ba:a2:a7:0d:1e:49:24:
                    b3:29:b7:4c:02:b8:30:d3:29:6c:8b:3f:ca:5c:38:
                    59:ce:93:01:80:b1:62:75:b7:38:74:03:46:c3:60:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9F:D1:6F:F8:39:21:B4:EE:2E:D9:5E:1D:3B:44:05:B5:A8:D8:9B
            X509v3 Authority Key Identifier:
                keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:40:84:88:e4:01:db:87:a0:dc:36:b5:28:79:3b:da:88:42:
         1f:0f:9d:c9:a9:3b:c4:8e:29:be:e5:33:e0:12:02:e3:54:e7:
         2e:50:3a:28:f1:3d:74:8a:2c:30:52:6d:90:5a:d7:77:fa:f4:
         a3:df:4f:5c:0e:38:3d:eb:e1:d0:7e:84:6e:e8:d8:ac:f5:56:
         ce:3e:ec:0d:1c:b9:ba:86:c7:9e:24:f8:c0:61:cc:58:0d:3a:
         68:b6:ea:23:ad:b8:b0:f9:ee:11:e2:4c:08:6a:5b:3b:71:43:
         c0:7e:b8:2b:5d:51:73:41:9a:69:a7:54:92:eb:24:e7:96:eb:
         7b:a2:86:da:5e:6b:23:41:d6:8f:ed:3f:ea:8d:df:59:2a:82:
         23:08:6a:2c:23:e6:3a:71:c1:bc:ea:0e:aa:ed:61:34:8a:40:
         b4:4c:27:a5:fc:5c:10:2d:50:52:9b:a3:97:16:0e:72:d6:3f:
         25:07:83:40:be:bb:ff:07:db:25:d7:23:40:ca:5c:e7:6c:1d:
         b6:8b:bb:18:95:b2:4a:66:01:7c:00:2d:69:63:95:ad:17:a5:
         4d:d8:fc:29:33:21:52:73:81:f8:fa:33:fa:19:50:4a:8f:2f:
         6e:b2:ae:3e:b2:a5:f8:fb:f4:19:bf:87:ec:54:99:39:b4:d7:
         86:39:28:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzk7MN+enZbHdLjq89FqJ8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYmZlODgyZDEzZTgwM2ZjMTk0MzczZWE0MGQ4YTVhOWU2
OWYzMDQwHhcNMjYwMzEzMDIwMDQ3WhcNMjYwMzE0MDIwMDQ3WjAzMTEwLwYDVQQD
EygyMzlmZDE2ZmY4MzkyMWI0ZWUyZWQ5NWUxZDNiNDQwNWI1YThkODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA9KgHj23M7qWCabEBT5KiOaE+h3
Rgb7RhY1Old90+iB85mSGcQPWjQhqhjfooSkck4WlBPxVobCqQgEAhvL+RAMqL1S
our+XfqMW+CgLf+93GZlQVVXE6s+vS8GMZSkuXARNLn8mOY+l/8SLMUIxjiZVM0W
86OVr+YXwF1gFGq2K0cgda07YifBFBv7H0ua6t8EaKOBj7wWnVeg3DDCACq116gt
UCaSmzOiznbJ5UYowvgCO5mRylhCLHtbVPIRARfpQBtwK+aKCDXHQIIvUbGB5tOs
2Y5CELqipw0eSSSzKbdMArgw0ylsiz/KXDhZzpMBgLFidbc4dANGw2CJzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOf0W/4OSG07i7ZXh07RAW1qNibMB8GA1UdIwQY
MBaAFAG/6ILRPoA/wZQ3PqQNilqeafMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82NmMwOGEtZWU1OS00NzcxLWE4ZjIt
MmE1NTM5OWE4MGIwLzEvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82NmMwOGEtZWU1OS00NzcxLWE4ZjItMmE1NTM5OWE4MGIw
LzEvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUECEiOQB
24eg3Da1KHk72ohCHw+dyak7xI4pvuUz4BIC41TnLlA6KPE9dIosMFJtkFrXd/r0
o99PXA44Pevh0H6EbujYrPVWzj7sDRy5uobHniT4wGHMWA06aLbqI624sPnuEeJM
CGpbO3FDwH64K11Rc0GaaadUkusk55bre6KG2l5rI0HWj+0/6o3fWSqCIwhqLCPm
OnHBvOoOqu1hNIpAtEwnpfxcEC1QUpujlxYOctY/JQeDQL67/wfbJdcjQMpc52wd
tou7GJWySmYBfAAtaWOVrRelTdj8KTMhUnOB+Poz+hlQSo8vbrKuPrKl+Pv0Gb+H
7FSZObTXhjkofw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:58:20 2026 by rpki-client