Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File:                     AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier:          74e4HNOYltkYsdKqft48ZRd1JIlnIXS1wepWo2TkMbc=
Subject key identifier:   07:FB:58:3A:96:93:46:28:F1:36:9B:58:B1:55:96:02:6C:EE:5A:58
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer:       /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial:       01A00102179CC053B5FD9071C30DE50A3AA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number:          10D0
Signing time:             Fri 14 Aug 2026 16:01:49 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:49 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:49 +0000
Files and hashes:         1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: TxNvJAnyFwJKwcKLAgNfkdfCT3oTj7HkuZzbS6h8Ff4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:02:17:9c:c0:53:b5:fd:90:71:c3:0d:e5:0a:3a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
        Validity
            Not Before: Aug 14 16:01:49 2026 GMT
            Not After : Aug 15 16:01:49 2026 GMT
        Subject: CN=07fb583a96934628f1369b58b15596026cee5a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:4d:d2:c1:86:1f:35:97:8e:62:11:a7:16:
                    8a:a2:80:35:29:c4:ed:27:85:19:58:65:b0:5f:49:
                    a9:46:a3:d3:ff:01:bc:dd:b6:61:05:ab:40:bb:3b:
                    fb:1c:83:e1:8d:e1:dd:df:89:a1:d9:c3:cf:16:3e:
                    18:55:d5:e9:48:e9:3c:10:cc:33:aa:2e:d1:e6:63:
                    8e:e4:61:12:b0:7a:c8:b3:42:14:ae:71:4a:5c:8b:
                    88:98:f2:3e:76:a0:7b:53:60:94:43:4d:30:45:25:
                    b1:df:25:6e:d5:4b:f2:4e:49:3d:68:73:0d:41:34:
                    e5:00:08:6d:78:b1:6e:31:c4:c6:9b:cb:ac:23:79:
                    df:61:90:d5:3a:a6:99:b4:68:46:e8:da:74:e2:28:
                    53:49:ec:55:f5:1a:74:2d:0e:fb:79:da:f5:0d:da:
                    95:ec:5b:e7:e6:b2:54:fd:50:b5:7c:bb:ad:07:59:
                    00:f9:26:b1:34:30:39:12:e0:b5:ea:ae:bd:3e:a0:
                    3c:0a:38:b4:e6:19:98:b6:27:6b:11:d9:36:8a:cb:
                    eb:01:48:d0:4c:98:16:1d:0c:7e:2e:10:79:21:98:
                    4b:15:9a:42:a6:83:4d:52:f6:30:8c:48:19:18:f9:
                    86:ff:e9:6b:bf:ac:79:9e:3f:1b:1e:8f:b5:a3:6e:
                    fe:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FB:58:3A:96:93:46:28:F1:36:9B:58:B1:55:96:02:6C:EE:5A:58
            X509v3 Authority Key Identifier:
                keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:8e:7f:e4:b4:03:f1:b9:bf:6c:80:38:6f:75:37:0d:46:49:
         7a:ba:0a:78:4f:78:96:06:70:30:fe:43:cf:e2:0c:d7:a5:cc:
         1b:8a:03:76:a2:4b:42:26:c4:bf:3c:48:48:c8:52:4d:c2:cc:
         3f:e7:41:73:7f:61:6c:fa:b7:df:82:ef:27:64:74:cc:5e:c3:
         c8:a6:c9:37:02:44:ed:73:41:aa:0a:96:76:40:08:6a:27:c0:
         07:d2:76:9f:01:62:2b:e2:fc:09:26:74:5c:c3:c2:ac:9f:1a:
         1c:aa:58:86:ea:bf:1a:8b:f4:3b:6b:52:8c:3a:3b:36:e1:18:
         95:79:4a:6a:08:1b:a9:b3:22:10:28:f3:75:22:4b:06:df:62:
         cf:76:45:ec:44:b3:02:c3:ff:df:29:51:48:6e:b5:e5:e7:e6:
         94:f1:a1:64:70:74:64:26:bf:5b:bc:fd:52:96:5a:63:cf:37:
         5f:1c:af:eb:3a:d1:1e:da:f8:08:ad:3d:80:ad:ce:6d:c1:55:
         ec:10:3f:46:a7:72:b6:27:c3:8f:bb:a0:d3:25:08:98:52:aa:
         90:e5:02:b9:bd:f9:1c:fe:3f:c4:8a:a0:8f:cb:57:a5:14:3c:
         79:1b:77:ab:1d:56:09:b9:02:f7:54:8f:3e:c0:52:7f:77:54:
         34:29:2c:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAhecwFO1/ZBxww3lCjqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYjk0NWJkOWY0YTBlNzM4ZjQ5MTU5Y2I2YjZkYWYyMjQ4
NmQ1YzAwHhcNMjYwODE0MTYwMTQ5WhcNMjYwODE1MTYwMTQ5WjAzMTEwLwYDVQQD
EygwN2ZiNTgzYTk2OTM0NjI4ZjEzNjliNThiMTU1OTYwMjZjZWU1YTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArERN0sGGHzWXjmIRpxaKooA1KcTt
J4UZWGWwX0mpRqPT/wG83bZhBatAuzv7HIPhjeHd34mh2cPPFj4YVdXpSOk8EMwz
qi7R5mOO5GESsHrIs0IUrnFKXIuImPI+dqB7U2CUQ00wRSWx3yVu1UvyTkk9aHMN
QTTlAAhteLFuMcTGm8usI3nfYZDVOqaZtGhG6Np04ihTSexV9Rp0LQ77edr1DdqV
7Fvn5rJU/VC1fLutB1kA+SaxNDA5EuC16q69PqA8Cji05hmYtidrEdk2isvrAUjQ
TJgWHQx+LhB5IZhLFZpCpoNNUvYwjEgZGPmG/+lrv6x5nj8bHo+1o27+pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAf7WDqWk0Yo8TabWLFVlgJs7lpYMB8GA1UdIwQY
MBaAFAG5Rb2fSg5zj0kVnLa22vIkhtXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2It
ZDNiZDdhYjNlZDM2LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2ItZDNiZDdhYjNlZDM2
LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADY5/5LQD
8bm/bIA4b3U3DUZJeroKeE94lgZwMP5Dz+IM16XMG4oDdqJLQibEvzxISMhSTcLM
P+dBc39hbPq334LvJ2R0zF7DyKbJNwJE7XNBqgqWdkAIaifAB9J2nwFiK+L8CSZ0
XMPCrJ8aHKpYhuq/Gov0O2tSjDo7NuEYlXlKaggbqbMiECjzdSJLBt9iz3ZF7ESz
AsP/3ylRSG615efmlPGhZHB0ZCa/W7z9UpZaY883Xxyv6zrRHtr4CK09gK3ObcFV
7BA/RqdytifDj7ug0yUImFKqkOUCub35HP4/xIqgj8tXpRQ8eRt3qx1WCbkC91SP
PsBSf3dUNCksyw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:24 2026 by rpki-client