Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
File:                     82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json)
Hash identifier:          xD81WrtS95SbduMtF8BrywzC6ydl/R3aA3fywVdF9h0=
Subject key identifier:   20:BE:FD:6D:B0:3F:7A:4D:0B:9C:21:D1:23:75:22:C5:9F:2D:70:99
Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
Certificate issuer:       /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Certificate serial:       019D97E22D03D42AC8D600BCC0DDBB55A53B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
Manifest number:          0831
Signing time:             Thu 16 Apr 2026 20:01:15 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:15 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:15 +0000
Files and hashes:         1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: t1XYjG0UU5Am/tzg3VpKyXSn2KrXL0Xv76xLuEdVOnQ=)
                          2: yhxgRAr99RGmci9ROhuXvzy0jYE.roa (hash: 3wgbJG/cVAe3llBkizxknl37XeT2Rpuyh/OqTuIeXAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:2d:03:d4:2a:c8:d6:00:bc:c0:dd:bb:55:a5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
        Validity
            Not Before: Apr 16 20:01:15 2026 GMT
            Not After : Apr 17 20:01:15 2026 GMT
        Subject: CN=20befd6db03f7a4d0b9c21d1237522c59f2d7099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e7:48:06:88:e8:c4:4f:93:78:c1:d4:4e:bb:
                    89:90:b2:60:ca:e0:c9:fc:79:44:4d:c6:1c:c8:05:
                    6e:a9:56:d5:17:90:f2:20:e8:75:fd:1d:e1:c9:90:
                    a9:ba:eb:bc:d2:0d:31:db:69:28:cd:20:62:bf:a2:
                    eb:d2:6d:1e:b5:7f:4e:fc:85:40:2b:c8:3d:43:44:
                    07:44:71:f8:68:0b:d5:e9:f1:fd:fe:09:da:c1:19:
                    88:49:67:f4:71:bf:35:aa:94:08:f1:a7:c4:c2:44:
                    4b:00:d9:66:b1:26:5a:24:6f:82:3c:9a:db:6d:c7:
                    b0:b1:17:4b:4a:7a:19:c2:d9:24:fb:dd:e7:f7:a3:
                    54:0d:2b:8c:0e:71:44:47:9c:ee:1b:5f:65:c3:29:
                    c3:1b:5c:07:f2:4b:2a:74:10:5e:b3:34:97:dc:cf:
                    0f:ef:47:7c:d5:b5:da:d7:df:d0:4f:4b:01:88:6a:
                    e4:03:b5:d1:89:d8:c3:6e:42:a8:a0:5a:ff:dc:e2:
                    a4:ae:9c:7d:03:c5:86:9b:bc:05:16:4d:9d:dd:cc:
                    45:c7:aa:ca:fc:87:66:bd:11:4d:6b:be:c9:a3:8d:
                    d1:73:4c:12:63:f2:d8:df:b2:f9:34:6d:3b:69:79:
                    9b:12:e4:33:d9:fe:23:75:c4:ae:3d:b4:5b:81:b8:
                    b6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BE:FD:6D:B0:3F:7A:4D:0B:9C:21:D1:23:75:22:C5:9F:2D:70:99
            X509v3 Authority Key Identifier:
                keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:24:f9:c1:0a:f4:78:4e:e0:16:df:c0:60:c9:ce:c8:c1:ec:
         4d:89:24:10:f8:04:ea:40:62:f5:de:c0:74:25:c5:02:3f:3f:
         92:73:11:9a:23:c4:d3:76:35:bf:16:78:6c:c7:7c:02:ca:07:
         cb:a6:a2:ab:e3:94:75:95:2e:bf:4f:b7:7b:c2:74:0e:86:f4:
         53:7b:a8:86:f6:ea:d7:5a:74:d8:3c:b2:e6:c7:e9:a7:63:2e:
         c4:67:c1:7c:4d:2f:17:5a:e4:60:7d:11:dc:e9:8c:99:43:b7:
         61:bf:03:88:18:89:35:48:86:98:76:ba:37:33:a5:9c:61:8d:
         63:ba:e2:d8:cf:3e:d5:c6:72:8f:90:a9:e8:fe:3a:aa:e2:30:
         d3:86:f8:05:e1:11:69:8c:73:70:01:6c:17:b8:e7:cd:17:af:
         e3:fb:8a:43:b4:ed:5c:b1:81:b1:90:d0:5c:aa:3a:6c:69:da:
         d4:3f:39:56:66:93:53:18:e4:94:e5:8f:63:10:27:97:a4:b4:
         53:a7:94:0d:8c:d1:3f:aa:48:3c:1d:e2:bc:a3:fa:f6:b5:fa:
         0c:5b:65:a0:31:40:7a:2a:e0:55:15:dc:23:1f:68:f6:8c:3c:
         81:46:6c:2e:e6:29:6b:97:34:fa:39:29:1e:a0:8e:0d:a2:30:
         a9:9e:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:21:37 2026 by rpki-client