Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
File:                     3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft (raw, json)
Hash identifier:          CD4fAa+/2IDm1fxw7iz87a5N7FBRFMgiAwOYi59f8nc=
Subject key identifier:   64:F6:96:C7:32:2C:76:0A:91:35:25:82:DC:06:0D:2D:3D:50:C4:8F
Authority key identifier: DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5
Certificate issuer:       /CN=dee02e267c89f50df1a176f0e75f5c28235b23a5
Certificate serial:       019D9AABBC3AF735B361FFD6560DA3DFCEA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 09:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:39 +0000
Files and hashes:         1: 3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl (hash: VXkLGLS69EUB+xvfKf2ELncK2dO5fbID7Gen7WeKmeY=)
                          2: _yiSgUOzwENT6HWFGMrWkl5JgGo.roa (hash: 0WyaaoMTpom+arYMmqs6/I0vff3v73Sx2KKt3/t+tGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:bc:3a:f7:35:b3:61:ff:d6:56:0d:a3:df:ce:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee02e267c89f50df1a176f0e75f5c28235b23a5
        Validity
            Not Before: Apr 17 09:00:39 2026 GMT
            Not After : Apr 18 09:00:39 2026 GMT
        Subject: CN=64f696c7322c760a91352582dc060d2d3d50c48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:46:cd:ec:8a:38:d2:eb:ec:c6:c2:c7:3b:
                    01:66:5b:bd:cf:bd:ea:60:59:d5:92:f9:e8:83:d9:
                    ec:34:a3:46:3b:0b:67:cd:04:82:3a:a2:27:3a:a1:
                    e5:7f:6a:5c:2f:ec:88:a1:27:f5:cf:f7:1f:52:17:
                    b4:d1:de:c1:90:1a:ee:7a:c0:18:9f:0f:d7:9a:d8:
                    74:9e:d8:ce:02:a2:6b:4e:b7:41:08:31:2a:ab:25:
                    26:a6:41:90:20:f1:39:f5:78:1b:d7:64:db:f0:cc:
                    b9:5e:0e:c6:3c:46:b5:6c:16:4f:9d:6d:2c:fa:b9:
                    5d:65:a7:c0:98:38:95:fe:fe:8e:c2:93:05:47:e2:
                    14:ff:3f:b7:78:72:72:39:aa:2b:61:0b:de:ed:71:
                    da:06:73:3a:de:5a:7f:a4:8f:d6:b9:59:b0:3e:41:
                    4b:5a:ec:eb:d8:56:d7:5a:d3:c4:29:52:66:e7:e6:
                    01:65:87:14:f7:01:1b:bd:35:6c:49:23:5c:71:28:
                    b1:57:1a:49:10:ae:07:ac:c3:ef:b6:2c:f7:bc:ae:
                    ff:58:68:2f:ed:5a:c2:c8:fb:70:78:2d:b9:de:11:
                    7d:6a:ef:2f:3e:9e:05:73:91:2a:62:05:11:df:14:
                    b3:d8:7a:cf:99:2f:3b:74:c4:b9:79:c8:8d:81:b2:
                    96:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F6:96:C7:32:2C:76:0A:91:35:25:82:DC:06:0D:2D:3D:50:C4:8F
            X509v3 Authority Key Identifier:
                keyid:DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:91:8c:ef:a4:90:ac:6d:b6:3d:48:2c:64:93:8e:ec:10:2c:
         4d:00:14:d5:7c:53:62:e3:c7:f8:56:53:51:98:18:ea:06:38:
         b1:33:b6:5a:13:fe:c9:b9:f8:38:91:83:62:c3:2a:d1:09:40:
         39:d1:1a:9d:76:51:4d:a9:4d:e3:6f:fc:22:87:7a:fc:43:dd:
         0b:dc:07:af:85:ee:22:b0:7c:41:2e:76:95:c6:d3:99:6b:31:
         19:a6:e2:56:09:d9:be:70:f2:ee:ff:3b:88:c4:b5:66:9e:28:
         29:d3:70:7b:93:0d:74:cb:16:b0:c8:e2:4d:f8:c2:50:d0:10:
         7d:f3:88:6b:b7:3f:dd:7a:dc:86:6c:66:6a:f7:36:88:31:db:
         19:38:f9:42:82:d8:d3:fb:6b:fa:bf:bc:02:33:e2:ec:1b:43:
         79:5f:3b:7a:94:d8:6d:38:30:72:c5:32:69:10:3f:d2:69:e2:
         d7:68:67:0d:e3:f7:d1:c4:ad:56:72:23:e7:d1:2b:ba:fb:14:
         20:c8:e3:7f:c9:5a:38:19:f8:2c:7d:fd:45:f9:d4:42:ff:64:
         39:62:d6:ec:6b:cf:01:b7:56:cd:9a:85:17:1e:89:4b:66:14:
         05:59:d0:da:b8:06:96:bf:85:6b:95:be:de:2b:d9:44:78:1a:
         d4:6d:49:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq7w69zWzYf/WVg2j386hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZTAyZTI2N2M4OWY1MGRmMWExNzZmMGU3NWY1YzI4MjM1
YjIzYTUwHhcNMjYwNDE3MDkwMDM5WhcNMjYwNDE4MDkwMDM5WjAzMTEwLwYDVQQD
Eyg2NGY2OTZjNzMyMmM3NjBhOTEzNTI1ODJkYzA2MGQyZDNkNTBjNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn5GzeyKONLr7MbCxzsBZlu9z73q
YFnVkvnog9nsNKNGOwtnzQSCOqInOqHlf2pcL+yIoSf1z/cfUhe00d7BkBruesAY
nw/Xmth0ntjOAqJrTrdBCDEqqyUmpkGQIPE59Xgb12Tb8My5Xg7GPEa1bBZPnW0s
+rldZafAmDiV/v6OwpMFR+IU/z+3eHJyOaorYQve7XHaBnM63lp/pI/WuVmwPkFL
Wuzr2FbXWtPEKVJm5+YBZYcU9wEbvTVsSSNccSixVxpJEK4HrMPvtiz3vK7/WGgv
7VrCyPtweC253hF9au8vPp4Fc5EqYgUR3xSz2HrPmS87dMS5eciNgbKWFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGT2lscyLHYKkTUlgtwGDS09UMSPMB8GA1UdIwQY
MBaAFN7gLiZ8ifUN8aF28OdfXCgjWyOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lOWJhNDctMDZhZS00OTg4LTgxNjUt
MzcwMThiMWZlOWZhLzEvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lOWJhNDctMDZhZS00OTg4LTgxNjUtMzcwMThiMWZlOWZh
LzEvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5GM76SQ
rG22PUgsZJOO7BAsTQAU1XxTYuPH+FZTUZgY6gY4sTO2WhP+ybn4OJGDYsMq0QlA
OdEanXZRTalN42/8Iod6/EPdC9wHr4XuIrB8QS52lcbTmWsxGabiVgnZvnDy7v87
iMS1Zp4oKdNwe5MNdMsWsMjiTfjCUNAQffOIa7c/3Xrchmxmavc2iDHbGTj5QoLY
0/tr+r+8AjPi7BtDeV87epTYbTgwcsUyaRA/0mni12hnDeP30cStVnIj59EruvsU
IMjjf8laOBn4LH39RfnUQv9kOWLW7GvPAbdWzZqFFx6JS2YUBVnQ2rgGlr+Fa5W+
3ivZRHga1G1JPg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:30 2026 by rpki-client