Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
File:                     83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft (raw, json)
Hash identifier:          3JV7Gu3T5vnqRdyuSArcmpBr9w3uAOldPH/5wyN1LJM=
Subject key identifier:   B2:80:AA:C8:CA:A7:69:79:B6:8F:47:F5:56:87:7E:6E:D8:9D:EF:CF
Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
Certificate issuer:       /CN=f37063a85445019ab845a5b7e54395cdd39927f6
Certificate serial:       019F189F072D5DD9F2F0FF64616B2A8DA016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
Manifest number:          14C2
Signing time:             Tue 30 Jun 2026 13:01:42 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:42 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:42 +0000
Files and hashes:         1: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl (hash: JbkU3OpeLy+/VIcaHGD3+/wd8VJbTgulAMN8aeGt4NE=)
                          2: ty6PndNE6v0aicb5nH7jK6LCpOM.roa (hash: XKTIyXg8m6KS1U1qTQli91yAnTA7Vje4/FVAAtdNNEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9f:07:2d:5d:d9:f2:f0:ff:64:61:6b:2a:8d:a0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6
        Validity
            Not Before: Jun 30 13:01:42 2026 GMT
            Not After : Jul  1 13:01:42 2026 GMT
        Subject: CN=b280aac8caa76979b68f47f556877e6ed89defcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:27:5f:d6:fd:13:f6:28:2d:c1:24:08:60:c8:
                    90:63:ae:ae:fc:d8:41:f8:5e:60:81:8c:1a:74:46:
                    d4:fa:60:4a:5e:1e:8c:a2:dc:31:86:12:9d:1f:a1:
                    64:df:28:ac:41:9b:38:3b:f6:03:76:0f:fb:ea:a2:
                    95:40:0d:ef:59:b4:25:55:cb:ec:e5:de:de:5c:79:
                    c2:76:a7:07:e5:c2:2c:20:8c:57:ed:a3:08:ce:5b:
                    4b:60:ed:c2:68:0a:d5:ad:fc:ae:08:fa:6d:da:2d:
                    d2:67:5c:03:1b:01:2e:99:37:21:22:76:a2:84:f4:
                    0a:d1:a0:72:39:0a:c8:d9:e6:e5:f7:bb:0e:7c:d4:
                    ea:95:a2:58:4d:ff:2a:c5:68:aa:f0:c3:24:93:03:
                    bf:bd:91:07:dc:af:3e:60:0b:fa:69:e3:d3:5c:53:
                    fe:0c:85:90:85:e8:0f:64:45:d2:e3:57:4c:3b:ec:
                    0f:18:32:bb:1d:c7:26:1f:f1:71:b6:18:16:e8:75:
                    53:03:96:6f:e6:5d:0b:c6:9d:a7:83:ff:a8:d4:7f:
                    3d:7a:15:4f:c7:9c:1d:50:11:ca:b9:29:3a:d2:b8:
                    79:82:b6:df:7a:77:1a:16:53:b5:67:5b:1c:7b:c5:
                    83:dd:0b:d3:60:97:a2:eb:b5:79:c7:cf:3c:28:57:
                    0d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:80:AA:C8:CA:A7:69:79:B6:8F:47:F5:56:87:7E:6E:D8:9D:EF:CF
            X509v3 Authority Key Identifier:
                keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:8e:bc:e2:c7:cb:84:08:28:3c:1c:11:54:12:18:bc:6a:2f:
         55:55:b2:c2:14:2d:b5:e3:38:96:46:2a:92:2b:b0:0f:ec:e6:
         98:a6:d4:49:bf:8d:ad:d2:6c:0d:ed:00:37:dd:63:ec:7c:48:
         64:88:69:e3:f5:df:e9:87:c4:ca:8e:eb:ce:68:5a:51:92:4e:
         a5:0f:bb:75:8f:09:fd:57:15:84:f0:9f:69:e6:f0:a7:6e:aa:
         e6:03:41:d4:f9:82:41:2f:02:29:02:55:7a:b3:0e:a9:af:c6:
         66:5f:98:4c:e5:b8:45:ee:d8:2f:6c:59:f0:30:2a:e7:0f:a2:
         ad:2b:b4:22:91:21:0c:78:7a:66:68:79:ec:c6:94:00:6a:46:
         e5:63:71:2b:4e:27:6e:96:85:b9:89:6d:cc:97:e6:f4:24:5a:
         8d:f0:32:61:f7:70:61:82:c2:87:0e:9f:48:62:af:0b:0e:8a:
         00:52:6d:c7:4d:89:e1:15:f0:b0:7f:8f:41:b1:cf:8c:eb:9e:
         12:db:68:e9:90:07:ba:3a:c6:07:fb:59:55:55:c1:39:b4:39:
         c7:13:37:e7:2e:5e:32:6e:70:b7:6e:85:40:4f:58:c6:8b:cf:
         d2:10:ba:7e:17:15:ed:c6:68:a4:7b:db:4e:2d:67:07:95:c7:
         19:10:13:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:28 2026 by rpki-client