Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
File:                     18thbM_g6Ga0J8CkXvQYGwmB5jE.mft (raw, json)
Hash identifier:          Ek0gkQMnWBo8S0YKCMAmGYZtMQvlLCLCHTtvltshv6U=
Subject key identifier:   D7:5B:6C:55:79:2F:6D:1A:9D:72:08:EF:E6:A6:2C:45:2F:30:AD:DA
Authority key identifier: D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31
Certificate issuer:       /CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
Certificate serial:       019CAAC6163DE17278626FF2D25C95B31C74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
Manifest number:          12E5
Signing time:             Sun 01 Mar 2026 19:00:34 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:34 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:34 +0000
Files and hashes:         1: 18thbM_g6Ga0J8CkXvQYGwmB5jE.crl (hash: SgZMxUQbLwbWQls4hMcdEKfPMgJPcQvXahtI4LnoAlI=)
                          2: 3hk9XqmHqY58TN36FPRIol4THYs.roa (hash: UsqCD7ME+ILVSkGV9DubbwCdNyqKHd5/MbEJEt8ZDw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:16:3d:e1:72:78:62:6f:f2:d2:5c:95:b3:1c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
        Validity
            Not Before: Mar  1 19:00:34 2026 GMT
            Not After : Mar  2 19:00:34 2026 GMT
        Subject: CN=d75b6c55792f6d1a9d7208efe6a62c452f30adda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:13:79:25:be:08:48:79:57:36:b5:66:00:
                    b5:d8:3f:49:a2:2d:0f:7a:ea:65:ee:3a:9b:71:14:
                    c9:1a:93:91:4c:c1:b4:92:3e:c0:fc:d3:c0:81:c3:
                    38:a0:dd:40:25:4b:6f:87:e1:65:7d:e1:1b:52:cb:
                    b0:35:4a:97:15:63:cd:d9:54:9f:47:df:04:a7:1f:
                    f7:45:8a:3c:de:9c:9e:81:d2:61:24:a6:97:17:6a:
                    14:c0:94:e2:f0:dc:27:d9:80:fb:19:1b:b8:18:3b:
                    95:54:ef:e7:df:db:2c:a1:8e:ce:76:a2:d4:d6:7b:
                    22:86:58:e4:33:54:76:d9:d5:8e:c8:ec:f9:f7:51:
                    7a:c3:4c:af:bd:fc:be:19:74:be:34:38:ee:4e:25:
                    36:4a:24:9d:3d:e9:2f:ab:c6:f6:9d:fa:0a:b6:ba:
                    f2:91:32:f2:bd:ed:7c:ea:1d:b4:06:77:85:c2:d5:
                    e5:1d:72:1e:44:1d:c1:c7:71:f7:47:cc:53:bd:50:
                    d9:e5:eb:1a:bd:a3:ee:fc:b6:fb:a1:4e:21:d2:95:
                    8b:fb:8f:70:c6:ba:74:3f:5d:2f:c9:b6:df:8a:3a:
                    ba:67:48:12:34:d8:73:f8:36:fa:b7:7c:d2:df:d1:
                    39:33:7a:c7:16:03:60:cc:04:aa:70:23:8c:a9:47:
                    3d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5B:6C:55:79:2F:6D:1A:9D:72:08:EF:E6:A6:2C:45:2F:30:AD:DA
            X509v3 Authority Key Identifier:
                keyid:D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:af:02:69:05:6c:a2:20:fd:0d:1c:9a:21:1d:13:64:01:6a:
         bd:08:1e:cf:bf:3a:62:6e:ee:03:5e:0c:c5:e0:fb:d3:31:16:
         20:1d:53:a5:ff:2c:2d:2e:3b:63:b2:fc:1f:11:c1:d6:a2:8b:
         85:fc:f0:26:44:4a:d3:b3:5d:f0:35:78:a5:6a:de:6c:00:98:
         2f:15:60:da:34:c6:36:db:6d:e7:de:8a:a5:da:9c:16:a8:81:
         03:68:bd:b5:0e:1a:4e:04:d2:85:5d:7f:54:4b:77:46:3c:73:
         2c:a4:52:1f:68:da:63:c1:a0:7f:89:ff:83:16:7f:13:20:44:
         96:4f:fb:d2:18:34:bd:aa:fb:47:d6:3a:99:94:00:31:93:79:
         ac:c0:3f:1c:14:94:52:e1:34:28:7e:93:47:8c:f1:49:ba:10:
         83:b5:da:a3:fa:33:61:a9:70:14:05:ae:99:46:e2:97:67:f5:
         10:30:46:5b:3f:0f:7b:10:9f:e0:9b:b9:75:51:b8:be:94:4b:
         80:f9:a9:53:7e:04:ea:41:17:93:81:45:ea:1a:17:cf:4d:cd:
         63:f9:3c:4f:7e:00:eb:9d:6c:35:c2:13:ee:e9:3f:ab:c5:5e:
         15:52:1e:df:5c:47:38:4a:0e:1d:fd:6a:c2:50:81:33:b6:f6:
         bc:da:73:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxhY94XJ4Ym/y0lyVsxx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2I2MTZjY2ZlMGU4NjZiNDI3YzBhNDVlZjQxODFiMDk4
MWU2MzEwHhcNMjYwMzAxMTkwMDM0WhcNMjYwMzAyMTkwMDM0WjAzMTEwLwYDVQQD
EyhkNzViNmM1NTc5MmY2ZDFhOWQ3MjA4ZWZlNmE2MmM0NTJmMzBhZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmMTeSW+CEh5Vza1ZgC12D9Joi0P
eupl7jqbcRTJGpORTMG0kj7A/NPAgcM4oN1AJUtvh+FlfeEbUsuwNUqXFWPN2VSf
R98Epx/3RYo83pyegdJhJKaXF2oUwJTi8Nwn2YD7GRu4GDuVVO/n39ssoY7OdqLU
1nsihljkM1R22dWOyOz591F6w0yvvfy+GXS+NDjuTiU2SiSdPekvq8b2nfoKtrry
kTLyve186h20BneFwtXlHXIeRB3Bx3H3R8xTvVDZ5esavaPu/Lb7oU4h0pWL+49w
xrp0P10vybbfijq6Z0gSNNhz+Db6t3zS39E5M3rHFgNgzASqcCOMqUc95wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdbbFV5L20anXII7+amLEUvMK3aMB8GA1UdIwQY
MBaAFNfLYWzP4OhmtCfApF70GBsJgeYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83Y2UzZGMtNjhkYi00NWJiLThlNTct
M2U2MTk4YTUxMmUwLzEvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC83Y2UzZGMtNjhkYi00NWJiLThlNTctM2U2MTk4YTUxMmUw
LzEvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJq8CaQVs
oiD9DRyaIR0TZAFqvQgez786Ym7uA14MxeD70zEWIB1Tpf8sLS47Y7L8HxHB1qKL
hfzwJkRK07Nd8DV4pWrebACYLxVg2jTGNttt596KpdqcFqiBA2i9tQ4aTgTShV1/
VEt3RjxzLKRSH2jaY8Ggf4n/gxZ/EyBElk/70hg0var7R9Y6mZQAMZN5rMA/HBSU
UuE0KH6TR4zxSboQg7Xao/ozYalwFAWumUbil2f1EDBGWz8PexCf4Ju5dVG4vpRL
gPmpU34E6kEXk4FF6hoXz03NY/k8T34A651sNcIT7uk/q8VeFVIe31xHOEoOHf1q
wlCBM7b2vNpzng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:15 2026 by rpki-client