Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
File:                     83Uc-MOi02yXRMllGYmZRaxgeCA.mft (raw, json)
Hash identifier:          Sl6FgNd5cymn9f7Gf+sQUn+mYfrUbczmVl67WHsRmUs=
Subject key identifier:   E3:EE:10:82:C9:56:15:57:40:AD:F4:64:36:BC:44:D7:C9:6A:9F:3F
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Certificate issuer:       /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial:       019D9A3EBFD9409795ABA90040D60B531A19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 07:01:36 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:36 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:36 +0000
Files and hashes:         1: 83Uc-MOi02yXRMllGYmZRaxgeCA.crl (hash: HOw+w8Ce9wTZletfW1reGBOq9DrujicImPs8gunSkOI=)
                          2: TYLwa08WFOj6opT9KtoPFJ2dgvs.roa (hash: juyToRfL7FYCUARkpqsy2gY6lCDPJ0kPx5U0XqCELDc=)
                          3: dsyLnQm81PC6vWSd_4Ic-84kUNk.roa (hash: W1YMJZLZnowBDVYOn+T6XSNeRTFyrwQp8nHsLpeos/I=)
                          4: e5kfS2HALhoBZYDPDX37mBstooE.roa (hash: BxKqv2YY9BaGAll5HnqYYRHyaoqypH29BZ4QZq/w3cs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:bf:d9:40:97:95:ab:a9:00:40:d6:0b:53:1a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
        Validity
            Not Before: Apr 17 07:01:36 2026 GMT
            Not After : Apr 18 07:01:36 2026 GMT
        Subject: CN=e3ee1082c956155740adf46436bc44d7c96a9f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:06:1f:1c:71:d1:10:34:fe:71:bc:85:dc:
                    93:39:cf:d0:a8:4d:c2:39:93:29:56:52:07:a5:d8:
                    42:c5:8f:a3:6b:53:3e:ed:ff:ce:d6:53:98:3b:c2:
                    9d:89:71:b0:ff:db:bc:cc:e2:b9:a1:fb:62:b5:ef:
                    c0:ce:4b:68:4f:62:32:4c:fb:27:be:29:15:c1:d9:
                    bd:a5:61:ba:51:3f:0c:60:cd:32:a7:1f:b9:f2:5c:
                    f8:0c:c2:d9:45:49:19:42:d2:b7:d8:03:19:22:18:
                    ac:25:5a:66:c9:c5:52:d2:bf:db:56:b5:eb:25:e3:
                    01:8b:83:b4:30:cf:48:57:54:73:f2:0a:62:5b:ce:
                    cc:e8:3c:19:8f:d1:3b:f6:9c:d5:1b:f3:19:82:d4:
                    d6:52:e9:a3:3d:ef:ab:8f:03:31:24:ef:42:55:79:
                    6f:7e:46:e7:c6:05:56:f4:fb:90:d2:30:1d:dc:8d:
                    cf:e6:6b:ca:b5:37:2a:79:94:40:3a:58:1a:50:16:
                    d4:bc:d4:ba:76:62:54:35:5a:b3:49:2d:93:f5:f7:
                    41:4c:9b:af:27:6c:04:d1:2e:2a:9a:38:7a:62:62:
                    12:71:e7:36:f0:d7:7a:eb:62:ae:70:29:41:6a:b3:
                    ef:54:2e:c4:50:ca:69:0d:45:21:96:ea:f3:6a:d5:
                    e9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EE:10:82:C9:56:15:57:40:AD:F4:64:36:BC:44:D7:C9:6A:9F:3F
            X509v3 Authority Key Identifier:
                keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:83:9b:a2:68:ff:aa:cb:f0:8e:18:38:e0:7e:fd:68:90:43:
         5a:bc:3d:ed:34:cc:1c:3b:af:fa:fd:61:fe:29:21:56:bc:ed:
         c4:31:fe:2e:cf:3d:5f:b0:ac:b5:de:c1:55:c7:a1:c7:ed:a0:
         40:7e:5a:ca:47:26:48:f2:26:08:27:be:6a:91:e7:5b:77:6b:
         de:18:11:e1:b9:22:09:25:93:3d:56:d0:a5:11:5a:9b:11:99:
         22:0f:7d:39:ee:92:ca:f8:c9:be:e5:5f:e9:91:63:18:21:11:
         c6:ee:e8:ba:ec:4f:5c:23:2b:29:a6:90:10:10:c0:81:f6:5c:
         07:18:65:3e:e9:19:bc:52:99:5e:3c:91:1d:f9:95:3c:25:1f:
         be:97:07:9e:39:ad:64:72:5f:89:d1:6e:fb:d1:a3:0b:5e:2b:
         28:74:04:65:15:cb:f4:85:40:99:dd:37:c1:ef:78:70:2b:e0:
         19:e3:44:c2:70:5e:ad:36:35:4d:92:ee:52:ed:35:5d:60:cd:
         6e:64:88:2d:dd:fb:84:60:39:e9:d8:7b:fd:56:e3:98:97:cd:
         36:4f:2f:df:09:f3:aa:6b:3d:44:44:3e:9a:be:c7:12:cf:28:
         e5:71:b6:d7:bd:0a:3c:26:56:45:53:da:c4:d4:4a:da:8f:4a:
         d3:de:22:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPr/ZQJeVq6kAQNYLUxoZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNzUxY2Y4YzNhMmQzNmM5NzQ0Yzk2NTE5ODk5OTQ1YWM2
MDc4MjAwHhcNMjYwNDE3MDcwMTM2WhcNMjYwNDE4MDcwMTM2WjAzMTEwLwYDVQQD
EyhlM2VlMTA4MmM5NTYxNTU3NDBhZGY0NjQzNmJjNDRkN2M5NmE5ZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QYGHxxx0RA0/nG8hdyTOc/QqE3C
OZMpVlIHpdhCxY+ja1M+7f/O1lOYO8KdiXGw/9u8zOK5oftite/AzktoT2IyTPsn
vikVwdm9pWG6UT8MYM0ypx+58lz4DMLZRUkZQtK32AMZIhisJVpmycVS0r/bVrXr
JeMBi4O0MM9IV1Rz8gpiW87M6DwZj9E79pzVG/MZgtTWUumjPe+rjwMxJO9CVXlv
fkbnxgVW9PuQ0jAd3I3P5mvKtTcqeZRAOlgaUBbUvNS6dmJUNVqzSS2T9fdBTJuv
J2wE0S4qmjh6YmIScec28Nd662KucClBarPvVC7EUMppDUUhlurzatXpiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPuEILJVhVXQK30ZDa8RNfJap8/MB8GA1UdIwQY
MBaAFPN1HPjDotNsl0TJZRmJmUWsYHggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wOGY5YjQtMTE1Yy00NDg4LWI1Njct
NWNmN2MwNjIxMDY1LzEvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wOGY5YjQtMTE1Yy00NDg4LWI1NjctNWNmN2MwNjIxMDY1
LzEvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYObomj/
qsvwjhg44H79aJBDWrw97TTMHDuv+v1h/ikhVrztxDH+Ls89X7Cstd7BVcehx+2g
QH5aykcmSPImCCe+apHnW3dr3hgR4bkiCSWTPVbQpRFamxGZIg99Oe6SyvjJvuVf
6ZFjGCERxu7ouuxPXCMrKaaQEBDAgfZcBxhlPukZvFKZXjyRHfmVPCUfvpcHnjmt
ZHJfidFu+9GjC14rKHQEZRXL9IVAmd03we94cCvgGeNEwnBerTY1TZLuUu01XWDN
bmSILd37hGA56dh7/VbjmJfNNk8v3wnzqms9REQ+mr7HEs8o5XG2170KPCZWRVPa
xNRK2o9K094iCw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:02:12 2026 by rpki-client