Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
File:                     83UsEPGw0HtfSOV539FONycT-0c.mft (raw, json)
Hash identifier:          Z36U5NqxFHDMUxB98mdT0s2nMu3nB9Z75UAofvwC670=
Subject key identifier:   62:20:E1:0F:01:FD:17:99:A7:B6:90:29:07:06:E0:BE:46:87:D6:CC
Authority key identifier: F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47
Certificate issuer:       /CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
Certificate serial:       01A140155431934EEAE842B7B27C2C13B193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
Manifest number:          0DE1
Signing time:             Thu 15 Oct 2026 15:01:41 +0000
Manifest this update:     Thu 15 Oct 2026 15:01:41 +0000
Manifest next update:     Fri 16 Oct 2026 15:01:41 +0000
Files and hashes:         1: 83UsEPGw0HtfSOV539FONycT-0c.crl (hash: gdrjhiJcW6GPqn7mbzUkio5tpl1hx6CmviAzWf6qWNs=)
                          2: SEVRhCs9csFySiANJYyFSILGX2U.roa (hash: /VnUVc/+1Tu0LCR67oUx4RL+inrOahGNcaF68LU9sGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:15:54:31:93:4e:ea:e8:42:b7:b2:7c:2c:13:b1:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
        Validity
            Not Before: Oct 15 15:01:41 2026 GMT
            Not After : Oct 16 15:01:41 2026 GMT
        Subject: CN=6220e10f01fd1799a7b690290706e0be4687d6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2e:7d:91:1d:e3:79:4e:ef:56:14:7c:a8:50:
                    d0:42:82:ad:e5:99:70:bb:65:37:f5:76:a3:53:a0:
                    a6:18:32:05:6e:bf:e3:a7:07:c0:de:e3:c2:be:99:
                    33:ca:5f:38:d5:ed:90:a0:02:41:4f:22:6f:ab:89:
                    e7:3d:54:c5:cc:81:a5:c9:9b:f1:fe:4a:f5:15:23:
                    cb:a8:09:5b:0b:43:22:44:fe:32:4a:69:9e:5a:34:
                    28:d9:34:00:62:d3:32:96:39:cf:da:c7:2e:77:ab:
                    48:3f:79:37:e3:c3:98:62:14:9b:c9:58:14:78:85:
                    bb:51:5b:8e:ca:0e:72:60:a5:60:86:1b:61:9f:dc:
                    d0:7e:fb:86:53:a0:8b:58:b8:de:4a:b7:a3:5b:16:
                    ad:ca:5b:dd:ea:46:cc:72:8b:b5:a6:c8:e3:5f:49:
                    83:c1:e8:82:a2:44:84:f4:0d:c9:bc:50:73:22:60:
                    ab:20:4b:9b:4e:c9:03:27:7a:1e:23:22:10:94:b7:
                    85:35:3c:9e:a4:3c:a8:e8:41:79:fb:d6:d2:71:57:
                    a2:cf:b3:2e:51:06:6b:ed:79:fc:5b:62:67:e0:1b:
                    b7:80:b0:4d:65:b9:c4:56:c2:13:8e:09:83:9e:11:
                    f6:c4:35:f2:2a:59:0b:6e:f9:91:7d:30:28:ee:07:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:20:E1:0F:01:FD:17:99:A7:B6:90:29:07:06:E0:BE:46:87:D6:CC
            X509v3 Authority Key Identifier:
                keyid:F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:bf:f5:f6:96:f5:ef:ee:26:60:a8:87:9b:2d:04:98:0c:74:
         26:f1:4f:5d:be:e6:2c:aa:84:68:8f:f2:49:61:42:cf:ef:9b:
         ba:55:92:52:19:64:0f:a6:b1:93:6d:88:ce:ec:60:16:af:69:
         60:ef:3d:21:c0:22:b4:bf:a7:d2:09:fe:d8:2b:3b:4f:98:46:
         41:75:dd:5b:2e:0b:7c:5b:55:aa:c9:a4:a6:01:39:21:91:15:
         f6:e8:60:50:06:3c:be:b9:62:46:98:58:cc:88:93:93:9d:5f:
         32:ce:50:0c:98:f5:e8:35:0b:bb:27:bb:bb:37:a4:4c:4b:e2:
         bb:74:cc:d6:23:43:c4:c5:63:10:af:36:c1:6d:64:14:cd:a5:
         97:97:de:bd:98:3e:ab:6c:f3:3e:39:82:04:a7:6d:a2:72:c1:
         a8:61:e8:91:63:07:39:d6:54:ee:c6:ba:11:e9:92:04:b2:1c:
         79:f0:ac:c1:7f:0d:b2:29:c6:6c:9a:f4:d4:36:e4:25:83:62:
         ec:ed:01:e9:3f:8c:b5:de:10:a1:10:59:43:31:a3:08:ec:d1:
         ca:9d:c5:76:e7:c3:ba:e7:50:dc:ff:fd:df:8d:d6:d2:d7:2b:
         81:73:c1:86:07:4f:9a:5d:98:95:c5:6a:b7:49:1a:71:69:29:
         1e:da:d7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:18 2026 by rpki-client