Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
File:                     83MAhqFPMbJWQMFC7f0XvJMyDFo.mft (raw, json)
Hash identifier:          GMvMQJRiKgACwWDfRA85oaACoBEHHRYBzxqlLBz8jMY=
Subject key identifier:   28:CE:C7:69:04:B1:D3:C0:59:3C:7E:D3:EB:25:DD:8A:E9:C4:74:F4
Authority key identifier: F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
Certificate issuer:       /CN=f3730086a14f31b25640c142edfd17bc93320c5a
Certificate serial:       019F1830F8E2FE6FDC479B877AE88CF50D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
Manifest number:          122E
Signing time:             Tue 30 Jun 2026 11:01:30 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:30 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:30 +0000
Files and hashes:         1: 83MAhqFPMbJWQMFC7f0XvJMyDFo.crl (hash: fY1ORLE3a5h+dTeEE+OMv+Hj588YuaSFzzeZQ3q7pOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:f8:e2:fe:6f:dc:47:9b:87:7a:e8:8c:f5:0d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3730086a14f31b25640c142edfd17bc93320c5a
        Validity
            Not Before: Jun 30 11:01:30 2026 GMT
            Not After : Jul  1 11:01:30 2026 GMT
        Subject: CN=28cec76904b1d3c0593c7ed3eb25dd8ae9c474f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6c:23:3e:f8:b7:77:9a:57:86:51:79:08:66:
                    47:81:5f:79:77:97:2b:18:e9:68:f7:d1:27:22:f6:
                    58:e9:8d:ca:78:b4:25:5e:29:4c:d9:dc:f8:1d:6d:
                    d2:ef:c0:63:6c:92:39:19:58:b1:5f:ee:95:9d:36:
                    df:ef:8f:a0:99:77:3a:a1:21:30:32:f8:30:1c:a3:
                    91:31:de:c4:ca:09:05:52:a7:01:5e:66:bb:e4:b9:
                    a7:8a:a6:ad:00:05:e7:d6:88:03:20:ee:fc:ec:19:
                    b9:55:cb:9f:a5:20:e5:6a:ea:92:97:3c:74:0c:63:
                    a6:e7:9f:25:32:dc:d3:7a:8a:bb:5b:74:66:e0:81:
                    d3:dd:a7:ab:66:23:b2:79:13:56:98:1a:b7:5b:27:
                    77:4b:72:57:80:8c:e7:27:56:c0:93:ba:f9:ae:b1:
                    13:06:9f:7b:89:9f:3f:83:d0:fa:04:78:bb:53:a3:
                    3a:58:d2:e1:d3:1e:a2:95:0f:3c:de:70:ca:71:f8:
                    ee:fc:fa:67:74:26:69:cd:fe:a2:d9:67:7b:00:1c:
                    1f:7e:f8:2c:c9:96:d7:e7:67:5a:17:e8:f4:9f:e8:
                    28:6c:1d:32:d1:6e:2c:d0:c4:03:3c:c6:e0:01:5f:
                    40:9c:04:64:ec:d8:ed:69:6c:0f:91:ee:d7:71:58:
                    25:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CE:C7:69:04:B1:D3:C0:59:3C:7E:D3:EB:25:DD:8A:E9:C4:74:F4
            X509v3 Authority Key Identifier:
                keyid:F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:84:ea:5e:34:af:3e:23:af:cf:03:c1:e7:b0:58:f0:9e:53:
         07:e1:e5:ae:2d:45:49:05:09:d4:9c:a1:aa:81:8e:25:48:85:
         e8:4f:51:46:f2:e7:f1:1d:00:84:a1:e7:09:74:63:5f:48:75:
         5e:dc:46:ac:3b:03:c2:95:68:b3:10:f6:74:14:92:3b:66:9a:
         17:69:de:a0:45:a3:ed:8f:76:f5:80:bc:33:6e:fc:89:55:18:
         9e:60:36:f2:15:f9:5c:3c:d7:9f:01:32:63:c1:e9:f4:57:00:
         39:99:b5:af:4e:a7:61:d0:96:c4:69:96:88:3b:1e:e8:15:8f:
         a4:14:aa:0e:77:b0:ac:62:0b:c7:53:31:0f:98:9a:00:07:64:
         bc:bc:22:d8:5c:52:24:d3:9c:8f:e0:4c:56:2f:21:78:f6:0b:
         ce:0e:f5:bf:84:45:f4:2b:91:5f:be:de:65:10:5a:a7:16:e5:
         a5:0a:b6:16:93:50:4e:ec:f2:5e:5d:a8:93:fa:ad:d1:5c:67:
         c6:24:96:fa:c8:13:d8:bc:f3:e8:e9:e6:b6:fb:b2:7a:3d:8c:
         2f:26:c8:cd:2f:5c:63:8a:5f:14:3e:cf:51:c9:b0:04:e0:73:
         39:0f:ca:aa:2b:2f:35:df:87:13:62:31:69:f5:8c:61:6a:cc:
         57:ba:61:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:08 2026 by rpki-client