Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
File:                     83Uc-MOi02yXRMllGYmZRaxgeCA.mft (raw, json)
Hash identifier:          iGiitVnjDud7FrsCCRyjn0Ow4JC5phrh6FAndWmWfm0=
Subject key identifier:   94:6C:C4:16:1B:B2:7F:E4:88:F4:0A:0A:FC:38:B4:F3:E5:71:75:76
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Certificate issuer:       /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial:       019CAEA3D5B15D3F7557712D513378A4DEB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 13:01:38 +0000
Manifest this update:     Mon 02 Mar 2026 13:01:38 +0000
Manifest next update:     Tue 03 Mar 2026 13:01:38 +0000
Files and hashes:         1: 83Uc-MOi02yXRMllGYmZRaxgeCA.crl (hash: bMBhPj15pO/Py4nXCwqWD3GnqELwryStksF4B0U0sw0=)
                          2: TYLwa08WFOj6opT9KtoPFJ2dgvs.roa (hash: juyToRfL7FYCUARkpqsy2gY6lCDPJ0kPx5U0XqCELDc=)
                          3: dsyLnQm81PC6vWSd_4Ic-84kUNk.roa (hash: W1YMJZLZnowBDVYOn+T6XSNeRTFyrwQp8nHsLpeos/I=)
                          4: e5kfS2HALhoBZYDPDX37mBstooE.roa (hash: BxKqv2YY9BaGAll5HnqYYRHyaoqypH29BZ4QZq/w3cs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:d5:b1:5d:3f:75:57:71:2d:51:33:78:a4:de:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
        Validity
            Not Before: Mar  2 13:01:38 2026 GMT
            Not After : Mar  3 13:01:38 2026 GMT
        Subject: CN=946cc4161bb27fe488f40a0afc38b4f3e5717576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:28:25:90:4a:d3:3e:dd:d5:f5:9d:b8:c0:6a:
                    29:86:2a:51:49:85:93:c3:bf:f1:69:85:ad:40:27:
                    f3:ed:ba:4b:eb:d8:de:ab:58:04:7a:ad:aa:3f:85:
                    91:a0:6f:2b:6f:9b:ab:95:ba:86:4d:70:5d:1a:1d:
                    b4:48:00:12:f1:9b:9e:6f:3d:77:be:8d:bb:ef:4f:
                    fd:b0:a5:af:44:12:55:96:c8:18:4f:a9:e1:6e:32:
                    88:28:3f:96:c6:2d:cd:a6:de:9c:72:25:40:8f:78:
                    97:02:3f:f2:96:62:30:e2:d1:25:56:3b:0f:e3:7c:
                    32:c3:d7:b2:91:5f:d6:71:f4:f0:e6:68:20:38:de:
                    c6:9d:d8:85:d7:7a:ac:41:34:3a:54:92:c7:2b:9f:
                    dd:76:86:84:35:61:a7:4e:b0:52:bd:e0:26:1a:65:
                    1a:96:ce:20:b8:6c:a6:9e:e1:3d:98:4f:3a:4d:06:
                    de:57:62:4d:ef:99:a2:03:4f:06:a0:8e:5c:a0:be:
                    d3:ae:ad:54:e7:b4:41:ef:74:4f:0b:6a:0b:04:0d:
                    43:61:77:83:97:c4:0f:0a:57:c0:65:ac:29:81:f5:
                    ee:09:c1:86:1c:b7:d6:01:ad:02:da:a5:8e:f7:85:
                    d6:77:0e:0d:5d:88:5a:6e:59:25:60:71:87:6d:e5:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6C:C4:16:1B:B2:7F:E4:88:F4:0A:0A:FC:38:B4:F3:E5:71:75:76
            X509v3 Authority Key Identifier:
                keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ee:45:3c:83:aa:7b:6b:3c:fe:40:52:dc:2e:8c:b5:25:d1:
         89:98:8d:f1:20:d9:1f:f4:ca:a0:a9:d8:1c:00:df:ec:83:c6:
         cf:c7:68:3a:a5:b4:9b:71:33:fc:8d:43:0d:16:73:8a:e2:cc:
         f2:3b:a3:ea:bf:2f:a7:fb:99:bf:7d:d4:16:a3:b3:36:08:50:
         b0:93:13:d4:03:ef:52:96:23:9a:b1:b7:86:40:a2:ff:8d:cd:
         96:07:b2:ee:c9:22:62:30:3d:9f:64:5d:8c:da:bb:b7:b0:1a:
         43:7c:38:03:74:6a:3b:84:3e:2a:61:a2:8e:3e:4f:66:6d:69:
         9c:c0:c7:80:ce:ce:3c:29:80:8c:2d:99:24:32:8d:02:09:d3:
         7f:0e:c1:51:6d:4c:8f:6b:83:86:a4:20:b8:ab:b3:f7:79:c3:
         fa:e5:1f:d9:3f:44:e6:c1:c6:a7:fd:c9:2d:5f:76:80:e3:25:
         08:fc:e5:2b:49:94:d3:c5:94:69:4f:e0:7e:e0:9d:9e:45:d8:
         fe:cd:96:c9:6c:30:f8:e4:53:26:59:28:72:22:c3:65:7d:01:
         5e:d6:dd:c5:57:4d:8e:fd:b3:18:33:33:2e:de:f0:64:1f:48:
         d0:68:70:1e:06:f5:23:40:95:69:16:b6:de:31:99:cb:7e:0c:
         6d:80:0d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:47 2026 by rpki-client