Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
File:                     uTp0QF6_eyUcz7unwrIOwV-djkg.mft (raw, json)
Hash identifier:          eyld+M0P+bNFjm6Kgpu0xkSm28XdojtthiK7oYutK7M=
Subject key identifier:   B7:EB:FD:58:CF:CC:16:08:3B:BF:B1:EE:22:88:90:66:CC:BD:08:B4
Authority key identifier: B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48
Certificate issuer:       /CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
Certificate serial:       019D9AE311F55A097A7CB49E0E7C78E612DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 10:01:05 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:05 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:05 +0000
Files and hashes:         1: 5IDTAUNYBa9GaRCcF0vtCC18VIA.roa (hash: QzvywvqILM8YjAB+vkAqO5QMbphjJfyMQHKh8+KGuQA=)
                          2: uTp0QF6_eyUcz7unwrIOwV-djkg.crl (hash: 1t5hDmSRufpRLq9BmNB454hdCfQn4YuR9r/jXc/ob8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:11:f5:5a:09:7a:7c:b4:9e:0e:7c:78:e6:12:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
        Validity
            Not Before: Apr 17 10:01:05 2026 GMT
            Not After : Apr 18 10:01:05 2026 GMT
        Subject: CN=b7ebfd58cfcc16083bbfb1ee22889066ccbd08b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:52:99:6a:63:50:d9:52:0e:58:82:da:ab:
                    16:f5:e0:b5:33:43:c6:86:ba:89:87:46:8b:de:a0:
                    9e:0f:54:95:7f:6f:6d:84:66:30:17:94:d5:3d:7a:
                    a4:50:5e:6e:13:83:60:8f:b9:4e:80:e5:b5:01:7c:
                    0c:d9:29:ea:86:09:e4:82:4e:c8:b9:44:45:48:4a:
                    b8:17:dc:aa:01:7a:55:f8:50:e5:d6:32:84:96:73:
                    49:ac:e9:19:89:75:31:88:e5:bd:07:9f:99:3a:23:
                    04:37:59:0b:84:01:f5:ce:ff:df:16:b5:de:78:72:
                    ee:a4:c5:f5:5e:4a:87:4a:3f:db:be:77:3b:ec:21:
                    02:78:c3:62:07:ee:5f:5a:54:a5:d1:77:db:eb:81:
                    cd:c6:8f:fd:e6:e6:10:29:f0:b4:27:c1:86:4f:a1:
                    a2:f4:71:1e:16:46:2c:7c:85:fa:a4:30:59:b0:8b:
                    1b:fd:77:55:8e:0d:c8:12:24:04:26:1c:b9:53:26:
                    89:28:bf:f7:24:83:af:a5:3b:b2:f7:d4:ec:9e:e2:
                    e5:02:b2:95:8b:3b:8e:20:44:6d:52:3e:21:6b:97:
                    16:ac:25:6f:93:1f:63:1e:d4:81:18:b8:81:8d:45:
                    29:62:0b:de:f0:0c:e6:14:a3:ba:d1:63:65:c2:39:
                    db:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EB:FD:58:CF:CC:16:08:3B:BF:B1:EE:22:88:90:66:CC:BD:08:B4
            X509v3 Authority Key Identifier:
                keyid:B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:bd:7e:ff:4d:3a:0e:80:6d:a9:b4:5c:7f:9a:7b:9f:83:49:
         97:ad:b9:49:4b:99:f2:4a:25:66:00:13:88:46:f7:17:1b:c7:
         7d:13:a1:3f:64:3a:fa:88:29:77:18:8b:49:8a:5c:c2:21:b5:
         fe:4f:2c:6d:d8:93:28:f4:a4:ba:e0:7e:48:81:ad:60:a0:95:
         dd:9a:02:fa:17:d4:a6:31:53:a1:39:d9:20:b1:1f:62:f4:1c:
         1c:ea:1c:58:35:f6:8b:ba:93:5c:60:35:37:82:43:72:76:a7:
         a7:26:30:80:9c:12:3d:60:f8:f4:2e:85:36:34:64:bc:f0:41:
         77:56:57:d3:70:e4:cd:86:da:0a:86:b7:5b:83:8a:e9:22:49:
         a0:1e:ff:25:27:5c:40:4d:07:50:0b:97:74:84:e1:31:c3:de:
         a5:77:a6:64:a8:29:d4:be:1f:0d:7f:5e:1a:73:ca:3f:10:b6:
         5b:f8:de:8a:c5:da:cb:87:50:02:ff:d8:07:51:d2:af:bd:ac:
         2d:29:6b:15:2f:c2:8a:b6:d4:4f:52:fb:a6:0c:4c:d5:b6:79:
         10:51:a9:34:97:0a:fc:90:8c:d3:db:eb:58:b2:d5:df:31:55:
         94:a6:1e:f2:ae:a9:c8:29:f6:44:ce:f2:c3:7f:13:57:e2:5d:
         a2:a9:1f:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4xH1Wgl6fLSeDnx45hLdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2E3NDQwNWViZjdiMjUxY2NmYmJhN2MyYjIwZWMxNWY5
ZDhlNDgwHhcNMjYwNDE3MTAwMTA1WhcNMjYwNDE4MTAwMTA1WjAzMTEwLwYDVQQD
EyhiN2ViZmQ1OGNmY2MxNjA4M2JiZmIxZWUyMjg4OTA2NmNjYmQwOGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeRSmWpjUNlSDliC2qsW9eC1M0PG
hrqJh0aL3qCeD1SVf29thGYwF5TVPXqkUF5uE4Ngj7lOgOW1AXwM2Snqhgnkgk7I
uURFSEq4F9yqAXpV+FDl1jKElnNJrOkZiXUxiOW9B5+ZOiMEN1kLhAH1zv/fFrXe
eHLupMX1XkqHSj/bvnc77CECeMNiB+5fWlSl0Xfb64HNxo/95uYQKfC0J8GGT6Gi
9HEeFkYsfIX6pDBZsIsb/XdVjg3IEiQEJhy5UyaJKL/3JIOvpTuy99TsnuLlArKV
izuOIERtUj4ha5cWrCVvkx9jHtSBGLiBjUUpYgve8AzmFKO60WNlwjnbgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfr/VjPzBYIO7+x7iKIkGbMvQi0MB8GA1UdIwQY
MBaAFLk6dEBev3slHM+7p8KyDsFfnY5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82ODJkYTAtZDNlZi00OWYwLWJlYTQt
MGExMzRiNjUzNWM0LzEvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82ODJkYTAtZDNlZi00OWYwLWJlYTQtMGExMzRiNjUzNWM0
LzEvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAer1+/006
DoBtqbRcf5p7n4NJl625SUuZ8kolZgATiEb3FxvHfROhP2Q6+ogpdxiLSYpcwiG1
/k8sbdiTKPSkuuB+SIGtYKCV3ZoC+hfUpjFToTnZILEfYvQcHOocWDX2i7qTXGA1
N4JDcnanpyYwgJwSPWD49C6FNjRkvPBBd1ZX03DkzYbaCoa3W4OK6SJJoB7/JSdc
QE0HUAuXdIThMcPepXemZKgp1L4fDX9eGnPKPxC2W/jeisXay4dQAv/YB1HSr72s
LSlrFS/CirbUT1L7pgxM1bZ5EFGpNJcK/JCM09vrWLLV3zFVlKYe8q6pyCn2RM7y
w38TV+Jdoqkfbg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:17 2026 by rpki-client