Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
File:                     83MAhqFPMbJWQMFC7f0XvJMyDFo.mft (raw, json)
Hash identifier:          eEJygayYbMlnt26j89aTiWScoHJ7tfxNZ+tcYKcfwRM=
Subject key identifier:   95:1E:AF:54:23:18:B3:7D:B4:6C:BB:71:84:42:34:07:9C:1F:81:6A
Authority key identifier: F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
Certificate issuer:       /CN=f3730086a14f31b25640c142edfd17bc93320c5a
Certificate serial:       01A13E94D3F2904B7F99880F63008A05E0B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
Manifest number:          134B
Signing time:             Thu 15 Oct 2026 08:01:43 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:43 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:43 +0000
Files and hashes:         1: 83MAhqFPMbJWQMFC7f0XvJMyDFo.crl (hash: wwwsjZCRxtYB42T5thCPscdlkvDd7Rrv3fcJCp1L8HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:d3:f2:90:4b:7f:99:88:0f:63:00:8a:05:e0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3730086a14f31b25640c142edfd17bc93320c5a
        Validity
            Not Before: Oct 15 08:01:43 2026 GMT
            Not After : Oct 16 08:01:43 2026 GMT
        Subject: CN=951eaf542318b37db46cbb71844234079c1f816a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:a4:ff:a9:73:39:4e:6b:6d:ca:f4:2d:66:
                    e8:13:52:92:d3:fb:b4:3e:6f:ae:a5:f0:b5:b1:15:
                    89:fa:2e:3a:70:24:1e:db:2f:07:03:6f:ce:ef:ea:
                    27:77:5d:48:cb:b9:37:4a:88:f2:94:f6:4c:17:7f:
                    fe:62:71:88:e7:fb:d1:b0:51:2b:4e:7e:4a:e2:7f:
                    ef:88:67:41:04:40:3e:7a:5b:4a:24:f3:41:35:12:
                    06:c3:d8:d6:a9:b3:98:9a:8d:38:86:83:69:3f:27:
                    2c:2a:45:62:12:a6:cc:55:29:4b:1f:b6:70:54:bb:
                    ad:c7:95:8e:89:7f:13:97:63:e9:58:88:9b:cf:09:
                    a1:ed:3e:34:f8:8f:af:92:31:bc:7f:b4:9f:e2:e4:
                    bf:38:bb:58:8f:ce:0e:fa:ab:03:f7:54:bc:cb:63:
                    be:61:12:6c:07:b0:d8:d1:01:98:c8:8f:55:88:9a:
                    3d:cc:40:ad:1d:30:95:ef:36:d0:1a:98:2b:77:df:
                    b9:6f:05:db:cc:fc:23:1b:67:06:f9:c6:43:65:3b:
                    c1:4c:5d:7a:9a:c8:7f:ea:13:86:26:f7:20:b7:3d:
                    e6:50:cc:0d:22:4f:22:d0:0f:22:12:92:6a:9d:e3:
                    8e:74:43:98:d5:e3:c5:0d:e0:ea:cb:cf:70:11:94:
                    2e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1E:AF:54:23:18:B3:7D:B4:6C:BB:71:84:42:34:07:9C:1F:81:6A
            X509v3 Authority Key Identifier:
                keyid:F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:96:4d:41:32:2f:eb:b2:e6:79:c6:17:ee:ec:80:3a:e3:7d:
         b4:07:60:16:8f:6d:15:56:77:ec:47:71:18:6d:82:fb:98:77:
         04:ce:5c:4a:90:ba:b9:b2:b5:21:57:db:60:70:71:76:b4:ee:
         2f:ff:e5:76:55:aa:fe:f1:9d:20:ef:82:ae:28:40:6c:90:8a:
         8b:73:00:54:e2:f4:66:07:cf:31:d8:39:26:35:90:b3:02:41:
         7e:d7:33:90:ec:cd:54:67:47:47:20:24:c0:21:f6:83:37:3b:
         d2:a6:e5:1a:fc:c3:e0:93:17:c5:10:33:8f:10:2e:d2:c1:81:
         02:e4:0e:d8:eb:34:d0:40:1f:83:36:78:26:38:b6:c5:2b:24:
         b9:72:97:3c:61:a5:fd:fa:ff:75:e3:a2:ec:ea:a8:e1:5f:57:
         88:f9:18:94:dd:7b:fa:92:74:ef:3f:e2:f7:ea:cb:43:3d:af:
         7f:e5:b8:b7:57:ea:4c:86:d6:a7:d9:77:ff:a9:25:5d:57:77:
         15:87:2b:9f:de:70:0d:f0:17:e7:11:52:25:73:c6:ff:f6:17:
         be:8f:97:67:27:08:49:e9:15:ca:2b:be:2b:8f:dd:c9:94:99:
         55:fb:9a:8c:0c:46:88:e9:8d:ab:fa:2b:70:2f:3d:b5:33:a4:
         6c:9b:61:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:34 2026 by rpki-client