Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
File:                     83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json)
Hash identifier:          qLTVnjYWRcNwF0Jl3FmGTrQE1bSCnSZrSMTrGUeNhtQ=
Subject key identifier:   F9:3B:81:A9:67:55:69:F8:25:71:7F:A4:89:EF:DC:D9:7E:54:AC:FC
Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
Certificate issuer:       /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Certificate serial:       019DEE24D4ADD5D09DE07CD80F9EB2A50972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
Manifest number:          0BBE
Signing time:             Sun 03 May 2026 14:01:24 +0000
Manifest this update:     Sun 03 May 2026 14:01:24 +0000
Manifest next update:     Mon 04 May 2026 14:01:24 +0000
Files and hashes:         1: 0zzNK_dip5D-vbdS46pdPM0bWmY.roa (hash: +Q7jclQp9h+mglscOOjepjoQV01QfX45LZ55s+yRBPA=)
                          2: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: 3HIwkEQ+9Meuohenvok6dGVFXcChULxqK7wqykW7yYs=)
                          3: TOdssmECwVP8bGD2vmk5VV7S5q8.roa (hash: i0+RAc65INiM3wP9huvJS9AUFFUa8IJxYIWJTeUW7tI=)
                          4: XF5YCv5InZ3eQDwQtIZCzm4p-p8.roa (hash: WZz5fH/inmisjDgfduYv271FfaeCoOytDiztCH+AR90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ee:24:d4:ad:d5:d0:9d:e0:7c:d8:0f:9e:b2:a5:09:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
        Validity
            Not Before: May  3 14:01:24 2026 GMT
            Not After : May  4 14:01:24 2026 GMT
        Subject: CN=f93b81a9675569f825717fa489efdcd97e54acfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:93:6c:37:8c:c7:0c:0c:77:f7:b5:40:14:e0:
                    e3:09:2c:79:83:fb:37:9a:d2:2e:73:b1:5a:26:a3:
                    0a:2f:db:88:02:44:4c:f9:3d:a3:66:bc:d8:38:c0:
                    64:df:b6:18:71:41:6f:52:84:a5:68:1d:90:22:c4:
                    af:cf:97:26:ea:3c:9f:80:84:db:37:25:40:ab:35:
                    c5:84:2a:41:39:4a:41:c9:d8:d6:94:09:c7:fa:a3:
                    57:70:0b:ba:ee:70:44:29:9b:f4:7a:9b:53:44:5c:
                    23:8b:18:05:33:9c:a6:80:d3:a9:d3:87:a0:d9:e4:
                    1c:07:fb:ba:d3:46:83:53:4e:20:a4:1c:c8:f8:12:
                    5f:5d:92:3a:fd:3a:cd:7e:89:b6:cf:5d:24:62:1e:
                    67:75:85:3e:b3:4a:de:25:ab:c7:18:87:77:66:77:
                    ec:fc:4d:43:20:18:92:73:c9:d2:7e:4d:58:a9:13:
                    89:48:65:c5:dc:e5:fc:af:4d:5c:58:06:94:d8:a5:
                    8c:13:7a:fd:6e:5a:4d:ac:21:ed:c6:42:22:bc:b7:
                    4a:3f:bc:5a:23:d2:e7:5d:2c:ba:79:01:f8:2e:be:
                    13:f7:3e:c4:ab:48:5d:0a:b0:41:91:0f:84:52:b4:
                    ab:f6:45:b9:ef:a3:57:b7:59:b8:a6:1a:f3:7a:21:
                    f6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3B:81:A9:67:55:69:F8:25:71:7F:A4:89:EF:DC:D9:7E:54:AC:FC
            X509v3 Authority Key Identifier:
                keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e9:2f:cf:20:b1:27:31:b9:0b:8d:29:e3:b5:44:f3:88:bf:
         53:1d:93:eb:b0:4d:a4:1c:93:52:a2:b8:4a:d4:bf:f4:83:73:
         ba:b4:75:96:d4:fc:53:36:e6:67:c3:b0:ed:47:62:22:f6:5e:
         a2:b8:b9:1a:46:d1:c3:2d:d3:00:61:8a:28:b5:fb:da:1e:8e:
         ed:92:c6:90:35:2d:1b:11:ca:31:37:cb:9c:57:12:69:ab:42:
         6e:71:52:9f:50:10:1a:4b:52:e8:76:ee:8e:ef:ba:4e:11:c6:
         54:38:cf:66:98:fd:3c:8c:91:29:c9:01:f1:9b:1a:1f:dc:2b:
         aa:fc:4b:ed:a8:44:59:6a:18:0b:c5:3f:f3:f6:94:cc:06:fa:
         da:f7:5d:54:1b:cc:74:fc:be:a7:47:ac:46:b8:eb:9f:e9:1f:
         c8:b1:85:f7:26:64:67:54:28:ca:c7:44:13:ad:fc:eb:ed:dd:
         0f:fb:8b:1b:f5:7e:34:30:9d:e6:3d:01:8c:90:23:b9:24:88:
         cb:0e:b6:9f:b9:67:78:6f:e2:89:22:5a:5c:a9:18:df:9e:17:
         e0:84:33:b1:ad:39:04:10:b5:8d:47:80:13:1f:90:de:96:d5:
         e6:ac:62:1b:a2:0a:38:70:05:c9:a2:0d:3a:77:42:41:1f:b1:
         23:e9:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:09:01 2026 by rpki-client