Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
File:                     1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json)
Hash identifier:          l9T+2kP/iPdEswUtl3UyWJdeIWi/Gz7gn6NZEKu+HNs=
Subject key identifier:   21:B7:C0:37:00:BA:97:2F:CE:63:FF:41:F9:49:9D:11:01:49:F4:E9
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Certificate issuer:       /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial:       019E1E3549C1C239505111CF6045A3A1B4F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
Manifest number:          1723
Signing time:             Tue 12 May 2026 22:01:09 +0000
Manifest this update:     Tue 12 May 2026 22:01:09 +0000
Manifest next update:     Wed 13 May 2026 22:01:09 +0000
Files and hashes:         1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: qzlUtd99vLVR7x28Nss6ChE1GKnO7AjldG8341/jmE8=)
                          2: 9e__qGyQtHSbfB8cCFuaShvSnmA.roa (hash: 3iuCXQllyeZX2xf5zOtDaRap97ynVvtPGZuAfarFsMQ=)
                          3: P8xyOq2U5UBbvhb9Fv2EvSSXyPY.roa (hash: ZN6nAyptvvcTJMcBIb6vuyb/okd9tuYrvpfl57aJd5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:49:c1:c2:39:50:51:11:cf:60:45:a3:a1:b4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
        Validity
            Not Before: May 12 22:01:09 2026 GMT
            Not After : May 13 22:01:09 2026 GMT
        Subject: CN=21b7c03700ba972fce63ff41f9499d110149f4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ca:20:fb:81:51:8d:e8:5c:4e:d6:86:c6:9b:
                    1d:89:55:30:ff:24:79:96:85:fa:a5:ac:b1:bb:c0:
                    27:a3:2c:fa:1b:d8:76:26:01:07:e7:7f:ef:b6:0b:
                    c1:c7:bc:a1:d2:8d:f0:5a:6d:d4:2f:3a:d1:28:f1:
                    a3:2b:f3:e6:9e:53:30:a0:2c:42:e3:0f:4e:93:95:
                    cc:a8:14:55:04:c7:fb:e3:85:78:aa:1d:31:da:35:
                    5b:4f:6d:34:1b:32:31:8c:d8:bc:ad:2e:00:33:44:
                    c9:4b:84:8a:2d:8b:2f:8a:a3:f8:8c:de:38:99:8a:
                    a6:2a:6b:03:5c:f8:e7:68:2c:05:f8:f9:6c:88:a4:
                    78:32:f1:53:a6:8a:8e:04:fe:39:3b:22:05:bf:b3:
                    1a:26:bd:4a:b6:57:5f:29:cd:41:16:a7:fe:38:59:
                    a6:c5:79:b4:d3:6f:3c:12:79:9e:bc:19:7a:e9:66:
                    65:0e:5c:cd:fe:74:9f:0d:e8:e4:42:69:1b:20:07:
                    a9:24:31:95:fb:45:12:a0:2a:4b:d1:12:e1:a3:8e:
                    e0:8f:72:c0:98:f2:85:fd:4c:b6:a6:a0:e7:13:d8:
                    39:9e:bd:02:a3:ac:36:e7:f8:3b:5e:aa:5c:2f:6b:
                    2c:33:e4:c2:8f:29:1d:5a:17:30:60:cf:dd:3e:af:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B7:C0:37:00:BA:97:2F:CE:63:FF:41:F9:49:9D:11:01:49:F4:E9
            X509v3 Authority Key Identifier:
                keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:8e:f1:09:bf:9c:1f:7d:b8:ea:57:eb:35:8d:6f:3d:30:e9:
         f0:32:06:64:28:9d:80:44:76:cd:9a:32:03:af:25:e6:b0:44:
         ca:9b:50:cb:d1:84:e1:48:94:e5:09:40:d8:4c:67:60:68:d2:
         dd:3d:93:93:ae:e2:14:5d:58:cc:ce:27:d3:c6:bb:2f:b6:69:
         14:16:60:76:92:d4:3a:0d:85:ee:e9:ec:99:b4:11:cf:22:90:
         f4:02:46:3d:68:d9:5b:bc:fc:e1:9c:49:8c:95:3c:a0:26:93:
         f9:1f:e9:c6:85:01:48:51:98:28:79:9b:33:35:90:e4:4b:42:
         4e:37:d5:86:9c:08:7c:11:22:df:5b:1c:b5:df:57:1a:c4:09:
         8a:26:8a:d1:98:ad:2f:fb:c6:1a:e8:3c:b5:aa:46:f7:2c:30:
         5a:4b:46:7b:c2:9e:25:37:34:99:e2:4b:ba:18:25:46:85:9e:
         95:7d:1e:4e:77:d4:15:59:0c:79:74:62:10:d8:56:57:02:ef:
         e7:39:e4:e0:a9:90:b9:e1:9b:cc:2e:5a:44:6f:ec:02:3c:16:
         91:1b:41:95:17:c3:1d:b4:c1:00:e7:50:d2:80:74:53:56:7a:
         0c:bd:8e:d3:b5:89:8a:eb:04:5b:65:ea:30:8d:dd:af:c8:2c:
         d6:e2:2f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:41:05 2026 by rpki-client