Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File:                     g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier:          /KZO9JicsT0r4bT6yI96mbT9XH2BsNvfP0QCs65WHms=
Subject key identifier:   EA:F0:DF:82:84:3A:4C:2C:C9:DD:9E:D9:A3:1F:7C:23:FC:E1:7C:CE
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer:       /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial:       019E9E17D93528F7E448459A10DC27EB75F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number:          147C
Signing time:             Sat 06 Jun 2026 18:00:23 +0000
Manifest this update:     Sat 06 Jun 2026 18:00:23 +0000
Manifest next update:     Sun 07 Jun 2026 18:00:23 +0000
Files and hashes:         1: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: GSzyVjVmgzZg7oYvp8LgagLzVI8Hxz2NR/sP8Ay9Ji4=)
                          2: ja3xbYHhCypT2kKyeAbUDM6JjaI.roa (hash: 97d7xvyjN2GHwh42t3hRtYWBfO2mX62sHwBd8SOvXh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9e:17:d9:35:28:f7:e4:48:45:9a:10:dc:27:eb:75:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
        Validity
            Not Before: Jun  6 18:00:23 2026 GMT
            Not After : Jun  7 18:00:23 2026 GMT
        Subject: CN=eaf0df82843a4c2cc9dd9ed9a31f7c23fce17cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:1e:64:ec:2c:a4:d7:5a:86:76:bd:60:2c:
                    d7:9d:26:c4:16:2c:92:72:ce:eb:3c:f1:2a:8b:fd:
                    cc:98:48:81:47:b9:6d:67:61:9e:12:18:c8:44:90:
                    74:d7:bb:6a:74:a5:4d:54:17:d7:8c:4d:a3:77:26:
                    3e:11:1a:46:5f:b3:31:8a:85:48:c3:74:af:da:f5:
                    bb:8f:12:d2:36:cc:5e:59:18:b9:fa:1a:ac:88:51:
                    bf:e6:c7:69:bc:e5:ef:32:e2:9d:a8:57:e7:d8:17:
                    f9:53:b3:78:b7:86:74:e5:df:32:da:aa:93:19:56:
                    ee:38:ca:b6:3b:bc:3a:cd:f1:a9:c2:24:0d:05:8e:
                    72:5e:d0:c0:6f:57:dc:17:06:01:e1:6c:dc:ea:1c:
                    e4:b5:69:ba:24:39:1d:1c:ea:d5:ae:93:50:ce:4f:
                    04:76:22:c1:32:4a:57:2f:50:55:21:b3:9f:22:35:
                    2f:33:8a:c4:86:91:2c:41:36:ea:06:2a:c4:38:70:
                    c8:7b:4e:d0:41:5a:e6:42:46:d5:e0:92:4b:fa:93:
                    13:bf:90:af:89:f2:ba:f3:39:a9:49:95:74:9d:fc:
                    78:86:78:eb:f3:bb:32:cd:af:6d:5d:f2:f6:9c:da:
                    91:f4:1d:f0:78:01:1a:17:fc:f0:19:a9:ac:f6:8c:
                    5c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F0:DF:82:84:3A:4C:2C:C9:DD:9E:D9:A3:1F:7C:23:FC:E1:7C:CE
            X509v3 Authority Key Identifier:
                keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e6:4e:34:ac:e1:12:10:27:6b:94:0b:f7:e0:ec:1e:a4:75:
         ce:e0:47:85:1f:99:54:b2:98:a1:d6:09:61:74:26:42:fc:51:
         2a:af:f7:77:29:00:13:68:65:5e:80:44:d7:84:e7:97:c2:c5:
         ea:d1:4a:a0:ca:c0:5c:d1:80:da:09:48:c9:01:24:2a:47:4b:
         91:85:96:dc:4d:d4:41:fc:3e:8c:72:4d:fd:a3:8f:fc:b6:11:
         e1:8e:1f:45:b2:32:5b:8d:f2:68:04:64:9f:a7:76:ab:2c:83:
         a7:56:4b:60:d7:fd:8a:e9:0e:07:6d:a2:77:a9:33:b4:39:0f:
         98:2f:d5:db:74:86:6c:8c:11:ed:c7:df:13:aa:b4:38:7f:2e:
         85:43:20:73:6b:c7:94:dd:b2:70:41:87:9e:31:d7:9a:19:b9:
         b0:97:e0:dc:df:64:36:12:ba:8e:1f:87:b1:f1:12:3f:1c:d3:
         3d:88:90:7f:bb:62:ff:69:c8:c3:cf:1b:8e:b9:ce:bf:8f:1d:
         de:fd:3d:71:dd:89:bd:fe:52:22:1e:94:6d:c1:61:e2:8e:02:
         62:e4:2a:75:2f:5d:91:53:47:58:af:2d:17:52:10:06:2e:f4:
         8f:ce:f3:f9:40:ce:8f:1b:a2:2c:60:99:f7:54:02:62:49:80:
         bf:7b:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 20:35:59 2026 by rpki-client