Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
File:                     83MAhqFPMbJWQMFC7f0XvJMyDFo.mft (raw, json)
Hash identifier:          6hUXpGjYzyFGhD2ED/L6H9ptZ3NroNP1WSadnL9jOQI=
Subject key identifier:   62:E2:B1:68:AE:1D:69:D9:63:72:8C:FE:9D:02:8D:96:BA:29:62:29
Authority key identifier: F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
Certificate issuer:       /CN=f3730086a14f31b25640c142edfd17bc93320c5a
Certificate serial:       019F91DB2A4C5FE1F3F2BEC774040DCD0F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
Manifest number:          126D
Signing time:             Fri 24 Jul 2026 02:01:27 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:27 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:27 +0000
Files and hashes:         1: 83MAhqFPMbJWQMFC7f0XvJMyDFo.crl (hash: sLRbpeX72CUQcMgbeMpyDCLENcrqQBCyxT9EEniW0aM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:db:2a:4c:5f:e1:f3:f2:be:c7:74:04:0d:cd:0f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3730086a14f31b25640c142edfd17bc93320c5a
        Validity
            Not Before: Jul 24 02:01:27 2026 GMT
            Not After : Jul 25 02:01:27 2026 GMT
        Subject: CN=62e2b168ae1d69d963728cfe9d028d96ba296229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:3c:a8:30:02:d1:b0:d7:d3:ad:41:17:28:
                    82:52:91:73:88:e4:c8:b3:1d:be:5c:f6:67:9f:4e:
                    af:0b:ea:ca:52:1d:5a:cc:59:84:99:f2:aa:29:31:
                    e4:ed:41:a9:a2:62:f9:f9:1c:14:29:20:79:58:d7:
                    d8:92:6c:42:ed:1d:5b:9b:2c:1e:e8:2d:e0:fd:ae:
                    4d:b9:89:1d:95:0e:7f:10:57:96:24:bb:da:0d:e5:
                    6d:ce:86:8b:c7:c0:02:53:b8:f1:30:a2:39:37:aa:
                    2c:44:a9:22:84:ea:06:cf:64:52:55:26:64:b6:5e:
                    91:09:be:fa:a9:49:a1:82:cd:15:1c:de:c7:a8:92:
                    9d:3b:62:25:66:48:03:6e:a3:84:c0:30:0a:ca:ba:
                    43:6a:0b:2d:92:bc:5a:f7:c5:5d:b7:2d:ec:97:f4:
                    0e:81:b5:41:4d:7f:91:39:5c:bd:8a:48:63:21:dc:
                    48:37:23:a7:af:4f:a5:30:9b:8f:a4:68:8f:37:b3:
                    cb:4f:c7:22:b0:3a:03:8d:f2:8c:c8:67:cd:b3:d4:
                    82:ae:b6:ef:1f:5a:ee:b4:7c:85:3a:49:82:65:c8:
                    27:ff:d0:96:96:3c:04:56:c3:fc:99:89:2a:3e:7e:
                    ed:19:f4:28:9a:d3:5e:24:68:ee:06:d7:79:3a:1c:
                    f4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E2:B1:68:AE:1D:69:D9:63:72:8C:FE:9D:02:8D:96:BA:29:62:29
            X509v3 Authority Key Identifier:
                keyid:F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0d:13:a0:2b:a7:9c:84:91:92:16:4a:91:80:c0:2f:24:0a:
         7f:ff:a1:8f:f4:2c:49:09:0f:39:0a:8d:d4:09:c5:1d:12:e2:
         ff:62:69:47:71:ea:ff:77:ee:bb:3f:e5:71:e0:97:11:08:d1:
         70:b6:5f:7c:9a:54:97:39:c3:0a:99:8d:01:47:ff:77:3a:ce:
         84:74:c8:9d:9a:a5:14:dc:3b:59:3a:c8:7b:ca:85:91:52:a8:
         43:74:67:b7:c9:56:dc:96:e3:59:98:d1:66:2b:ca:ae:ff:fe:
         34:66:55:45:e5:18:bd:e0:0c:fd:56:b2:8b:33:bd:fb:f7:aa:
         f6:00:ab:6b:f0:96:72:0f:34:36:61:fa:a4:6a:e8:7c:ee:38:
         6a:6d:64:f7:ca:03:24:e6:9b:65:94:c0:45:1e:13:8c:0d:ea:
         cb:3f:4b:5e:40:5b:ac:4b:e2:74:0e:dd:cf:6d:f0:55:d4:97:
         ad:6d:f5:fb:14:3b:70:b8:fa:44:64:a6:a9:55:14:99:28:f4:
         fc:e2:e8:48:c0:ad:cd:03:5e:ed:02:53:33:f3:f7:e8:db:2e:
         2c:8b:5d:2d:2a:e7:dc:e0:25:74:cb:27:64:e7:d0:1f:9e:04:
         08:b0:a3:a6:31:79:e1:f0:90:f7:51:69:85:a7:c7:b1:ad:3c:
         5d:4f:6e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:27:12 2026 by rpki-client