Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
File:                     w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json)
Hash identifier:          x3pqHKyaosx2OIFmZrqOUVJWmHoJeg850BzAH8h3qZA=
Subject key identifier:   B0:25:E1:B8:B6:64:41:20:D6:F8:04:A8:3B:06:3A:42:5A:73:47:B9
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Certificate issuer:       /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial:       019D99995F7BAB9F891BCF6B1CD409F0F6D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
Manifest number:          0FA3
Signing time:             Fri 17 Apr 2026 04:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:58 +0000
Files and hashes:         1: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: LZf5GzSG47Aaghw17gc3rFWmEcQZQdzn8UUb+djYAOI=)
                          2: wUc3S_D16XdipknJCTPDOkYeAwY.roa (hash: 0ohTvuZNcLXWt6aaBFxx4qj0TlX4E91Ut4sGjwIPaz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:5f:7b:ab:9f:89:1b:cf:6b:1c:d4:09:f0:f6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
        Validity
            Not Before: Apr 17 04:00:58 2026 GMT
            Not After : Apr 18 04:00:58 2026 GMT
        Subject: CN=b025e1b8b6644120d6f804a83b063a425a7347b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:9c:8f:41:40:90:24:b0:af:9d:61:5e:04:
                    63:2e:fd:58:c9:7a:77:45:42:98:e9:3c:e9:ba:6e:
                    8f:43:90:5b:30:71:4e:b8:00:78:78:21:2d:d4:8e:
                    73:38:fe:34:48:2c:48:2e:67:96:fb:d9:ce:f8:e3:
                    31:31:dc:9f:f1:2f:bd:9c:78:a7:b2:2d:c3:44:ea:
                    44:3f:04:9f:8c:6a:a7:34:0d:17:a6:37:38:f6:34:
                    08:cd:dd:b1:b2:18:18:f4:e8:ad:56:db:20:ad:aa:
                    4c:83:7d:2a:07:70:58:9d:71:87:22:ff:4b:b7:9b:
                    01:af:aa:a0:47:5f:35:10:fa:9c:53:1f:37:5d:01:
                    4a:79:4a:05:bd:cf:4b:d8:0a:19:d3:aa:4f:62:b0:
                    69:9b:51:ba:92:bb:c3:fa:10:e2:3f:2f:f5:a7:d3:
                    5f:bf:96:56:b2:8c:f5:e3:9d:1a:5c:da:5e:54:f2:
                    b2:ab:8e:bd:d3:b6:79:11:11:0a:35:8f:98:7a:3f:
                    8f:d9:24:8a:32:25:a4:23:36:00:76:47:b8:b1:ec:
                    bf:82:ac:ae:55:a2:5a:bc:18:bf:50:c7:5d:42:87:
                    e1:6a:2d:a1:7c:43:e3:03:0a:f4:bf:ef:3d:37:08:
                    bf:01:e4:63:9f:53:3c:7f:93:fd:39:9e:bf:2a:ec:
                    1f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:25:E1:B8:B6:64:41:20:D6:F8:04:A8:3B:06:3A:42:5A:73:47:B9
            X509v3 Authority Key Identifier:
                keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:0c:a4:f1:87:c8:70:54:7b:fc:6c:98:f8:68:4c:19:15:40:
         de:cc:65:3c:58:6b:ed:ad:0f:c9:ba:6f:ec:a0:9d:99:25:ec:
         e7:59:92:31:d6:94:7f:88:3f:cb:61:d7:0f:3f:af:b7:af:3e:
         0b:2c:60:dc:c0:23:03:06:18:79:1f:86:08:37:5c:c8:0a:7d:
         1e:8b:47:38:6d:eb:cc:51:28:99:2f:63:60:19:09:a7:7d:ee:
         1a:88:c8:ff:7b:0b:da:f6:34:7a:ca:36:72:cf:76:9d:bc:bc:
         a9:2b:af:93:8b:fd:c0:7a:cb:b8:49:cd:cc:b2:07:75:8f:34:
         a5:cc:a0:21:7d:a9:c3:0b:8e:c2:9f:bf:62:e2:df:e1:82:e5:
         a1:02:c0:5c:9c:35:3d:53:06:ab:ba:11:c1:71:c4:cc:8d:3a:
         c7:b1:a2:ae:71:d7:18:c2:ae:49:21:7d:55:03:5f:43:bd:11:
         5f:78:3a:75:58:6e:f0:5d:ca:d2:c4:c0:47:f5:b5:a3:07:23:
         e1:d2:32:a1:7d:f6:c8:fe:9d:d2:6d:44:a1:24:ae:b3:bf:c5:
         43:af:2e:5f:f6:93:e5:a1:31:a9:66:33:9c:ed:6b:06:c1:af:
         24:0b:3c:be:89:80:d3:7a:cd:45:74:a6:f8:93:9b:97:3d:91:
         4f:47:07:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmV97q5+JG89rHNQJ8PbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzQzYzg5ZGYzNGVjNzcwYTY1OTczZjEwMDUxNDZiZmIz
MmIwZjIwHhcNMjYwNDE3MDQwMDU4WhcNMjYwNDE4MDQwMDU4WjAzMTEwLwYDVQQD
EyhiMDI1ZTFiOGI2NjQ0MTIwZDZmODA0YTgzYjA2M2E0MjVhNzM0N2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx56cj0FAkCSwr51hXgRjLv1YyXp3
RUKY6Tzpum6PQ5BbMHFOuAB4eCEt1I5zOP40SCxILmeW+9nO+OMxMdyf8S+9nHin
si3DROpEPwSfjGqnNA0Xpjc49jQIzd2xshgY9OitVtsgrapMg30qB3BYnXGHIv9L
t5sBr6qgR181EPqcUx83XQFKeUoFvc9L2AoZ06pPYrBpm1G6krvD+hDiPy/1p9Nf
v5ZWsoz1450aXNpeVPKyq46907Z5EREKNY+Yej+P2SSKMiWkIzYAdke4sey/gqyu
VaJavBi/UMddQofhai2hfEPjAwr0v+89Nwi/AeRjn1M8f5P9OZ6/Kuwf2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAl4bi2ZEEg1vgEqDsGOkJac0e5MB8GA1UdIwQY
MBaAFMN0PInfNOx3CmWXPxAFFGv7MrDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mOTlkYjQtOTg3ZS00M2IxLWEwY2Et
MjBmMjdlODcwZDAxLzEvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mOTlkYjQtOTg3ZS00M2IxLWEwY2EtMjBmMjdlODcwZDAx
LzEvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAyk8YfI
cFR7/GyY+GhMGRVA3sxlPFhr7a0Pybpv7KCdmSXs51mSMdaUf4g/y2HXDz+vt68+
Cyxg3MAjAwYYeR+GCDdcyAp9HotHOG3rzFEomS9jYBkJp33uGojI/3sL2vY0eso2
cs92nby8qSuvk4v9wHrLuEnNzLIHdY80pcygIX2pwwuOwp+/YuLf4YLloQLAXJw1
PVMGq7oRwXHEzI06x7GirnHXGMKuSSF9VQNfQ70RX3g6dVhu8F3K0sTAR/W1owcj
4dIyoX32yP6d0m1EoSSus7/FQ68uX/aT5aExqWYznO1rBsGvJAs8vomA03rNRXSm
+JOblz2RT0cHOA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:27:17 2026 by rpki-client