Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
File:                     83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft (raw, json)
Hash identifier:          O2sZeUdPx9tydvmpxMTKJO0CusD959HwWT3Hpfg0Y00=
Subject key identifier:   9F:45:64:C3:A1:D6:1A:3E:AF:47:C2:44:D2:8C:F8:70:27:02:F7:83
Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
Certificate issuer:       /CN=f37063a85445019ab845a5b7e54395cdd39927f6
Certificate serial:       019E30DFE5F6FE2020C19854E47325F2336C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
Manifest number:          144A
Signing time:             Sat 16 May 2026 13:00:39 +0000
Manifest this update:     Sat 16 May 2026 13:00:39 +0000
Manifest next update:     Sun 17 May 2026 13:00:39 +0000
Files and hashes:         1: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl (hash: USTL5VgDte+hvF4se98HkFPoiOhhO+sSFBXe7uQ28uA=)
                          2: ty6PndNE6v0aicb5nH7jK6LCpOM.roa (hash: XKTIyXg8m6KS1U1qTQli91yAnTA7Vje4/FVAAtdNNEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:df:e5:f6:fe:20:20:c1:98:54:e4:73:25:f2:33:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6
        Validity
            Not Before: May 16 13:00:39 2026 GMT
            Not After : May 17 13:00:39 2026 GMT
        Subject: CN=9f4564c3a1d61a3eaf47c244d28cf8702702f783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:e9:f6:fb:7d:43:0d:cb:3e:28:82:9d:a6:
                    01:d5:49:a4:ec:34:7a:3e:3c:e1:d2:2d:4d:fe:18:
                    2c:8b:3b:f9:96:e4:12:02:34:22:cf:42:5f:c4:6d:
                    d2:5e:00:e0:4b:53:5f:11:b8:b0:8c:a4:2c:75:84:
                    af:89:19:64:d3:b7:c7:98:fb:cf:fb:84:60:da:80:
                    03:62:32:d7:04:be:8f:f3:ce:5b:3f:a6:ad:05:3e:
                    21:74:bf:52:99:cb:15:a9:c0:52:96:b4:ee:d7:03:
                    5b:c0:d9:b5:9a:de:d2:b1:24:cd:84:81:36:ec:52:
                    ab:47:21:e9:78:0c:59:39:9c:69:3f:6e:7c:70:c0:
                    5b:e3:33:ec:74:16:04:79:01:eb:4d:e0:46:98:0f:
                    0d:35:52:4b:c7:9f:48:9e:76:39:da:57:68:5b:76:
                    25:34:46:f3:b2:e3:65:1c:d1:b0:ef:69:6b:5c:dd:
                    b3:b3:4f:d7:ae:9b:10:46:3c:f5:5b:1e:2a:20:ba:
                    6d:7f:26:72:14:96:ed:dc:3e:1d:f9:43:be:d7:e3:
                    51:70:da:06:73:5a:4b:17:be:89:9a:cb:55:6f:f0:
                    0a:c6:b4:88:ac:9f:6b:ac:cd:31:14:9b:fb:7a:b7:
                    d9:1c:81:a1:66:72:6b:79:71:d3:55:34:c2:5b:e9:
                    f9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:45:64:C3:A1:D6:1A:3E:AF:47:C2:44:D2:8C:F8:70:27:02:F7:83
            X509v3 Authority Key Identifier:
                keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e7:d4:96:6b:fd:71:4a:d7:b7:62:9d:ed:8d:07:07:5e:81:
         b9:5f:ae:e1:a3:44:04:75:36:9a:58:4b:17:fc:28:ca:c5:35:
         e8:13:0f:64:91:13:a0:ed:8c:02:ee:03:97:17:e1:44:0d:3d:
         85:a5:7b:9f:68:c3:99:11:fd:76:af:2a:88:cd:c3:aa:c6:21:
         b3:ab:7d:42:ff:93:cd:3c:d2:68:ea:fb:a5:0b:22:f3:28:af:
         d7:1d:ee:76:72:9b:f1:08:6e:a6:19:98:73:78:a5:6b:cb:b2:
         1a:1a:dd:f8:27:e6:e9:a8:d8:5c:f8:0c:ed:af:10:3f:a1:b5:
         4a:bb:ed:4f:77:25:e9:5d:cd:50:0a:1e:ce:b3:f7:50:ff:39:
         05:c3:b6:66:a6:f5:06:55:92:5a:48:6d:5c:8c:30:af:1f:3d:
         66:c6:65:ee:59:de:04:16:5a:c8:25:73:9c:0c:68:15:04:f8:
         77:20:3f:34:80:f3:65:5e:db:49:15:c8:50:59:c2:37:de:ae:
         dc:6a:56:c1:d9:5c:5c:ab:48:09:59:3d:9c:08:5f:f5:74:8c:
         a0:db:84:97:5f:0c:41:4c:ff:45:36:f8:de:6c:68:8a:ae:00:
         21:02:42:d8:86:9c:ad:d7:27:0a:66:2c:62:5a:a1:5d:31:35:
         0e:a7:01:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:43 2026 by rpki-client