Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
File:                     18thbM_g6Ga0J8CkXvQYGwmB5jE.mft (raw, json)
Hash identifier:          VaVvvl1uw6fOzG05W+IrK7QTpnndMK6ouacwBEegLJM=
Subject key identifier:   89:83:E9:DD:B9:D5:7A:5F:C2:17:23:9D:93:49:C2:BC:C0:BF:61:F8
Authority key identifier: D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31
Certificate issuer:       /CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
Certificate serial:       019FA974BD32841B9D1B1914650A52FA656B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
Manifest number:          1472
Signing time:             Tue 28 Jul 2026 16:00:27 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:27 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:27 +0000
Files and hashes:         1: 18thbM_g6Ga0J8CkXvQYGwmB5jE.crl (hash: AL1U+GmMdTa1Rg18AxkgsMwfEGQyCvZxy9GLXfLw3QA=)
                          2: 3hk9XqmHqY58TN36FPRIol4THYs.roa (hash: UsqCD7ME+ILVSkGV9DubbwCdNyqKHd5/MbEJEt8ZDw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:74:bd:32:84:1b:9d:1b:19:14:65:0a:52:fa:65:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
        Validity
            Not Before: Jul 28 16:00:27 2026 GMT
            Not After : Jul 29 16:00:27 2026 GMT
        Subject: CN=8983e9ddb9d57a5fc217239d9349c2bcc0bf61f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:3c:43:5d:df:99:03:19:14:d7:f1:61:1f:
                    a0:91:f9:81:1b:66:b0:6d:bb:d3:07:f9:c0:2f:3b:
                    25:45:71:5f:f0:01:f4:45:89:26:3f:3a:30:15:98:
                    f0:57:1d:e1:87:67:09:6e:f7:08:dc:02:b5:00:ae:
                    97:61:b9:7a:65:96:fe:a6:e9:83:15:46:3d:42:67:
                    c2:37:84:3b:6e:51:d5:36:50:55:5c:ee:f6:78:71:
                    76:c6:dd:10:ad:0a:cf:0a:88:5b:ee:d6:c3:b6:85:
                    5d:ee:8f:f3:24:58:cb:33:b2:ab:f1:03:86:2d:c4:
                    2f:bb:09:d4:67:0a:ff:d5:b8:a9:b6:2f:bf:a2:bb:
                    21:e2:5a:db:63:95:30:28:a1:c4:3c:1c:50:20:51:
                    40:36:84:27:76:e8:17:f0:f3:6e:d3:32:da:51:e1:
                    47:3c:67:4c:7f:c9:07:5f:9d:7f:f1:fa:ad:dc:72:
                    2c:06:7e:c9:0c:f1:ed:36:ee:5b:d8:04:45:c6:b4:
                    3d:46:cd:52:55:fa:e6:f1:e2:bc:e9:9d:25:2f:ca:
                    06:19:71:1a:57:53:ad:11:b1:3f:bf:3f:6f:bc:8b:
                    21:6e:89:30:95:8a:66:93:b9:79:6c:ec:71:2f:5a:
                    15:d5:0a:8f:fc:dc:81:1e:34:60:6d:64:4c:38:58:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:83:E9:DD:B9:D5:7A:5F:C2:17:23:9D:93:49:C2:BC:C0:BF:61:F8
            X509v3 Authority Key Identifier:
                keyid:D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ed:f5:5b:9d:39:2d:52:8a:c7:5c:cb:2f:83:9f:9a:3f:72:
         ad:37:e2:f4:4b:a9:57:13:b0:26:3c:47:3d:97:07:a8:21:76:
         da:ba:b9:eb:28:d3:49:4e:ea:b6:0b:82:a8:be:d9:73:a4:63:
         77:d9:51:36:4a:fc:48:eb:5d:5e:90:20:12:92:de:80:28:65:
         f4:b4:f0:99:17:e5:ec:86:e3:b1:68:53:d8:26:db:dd:04:3a:
         51:4c:30:e1:82:4f:84:1e:91:d4:02:62:bd:bb:a2:6a:07:b5:
         58:6d:b1:a1:ba:50:8f:b8:ff:09:bb:56:4c:f5:61:02:a2:9f:
         6d:da:6b:bb:b6:0e:f3:38:85:28:a5:7c:ae:4c:f2:0a:41:0d:
         97:6b:07:45:62:e4:c5:0b:0a:97:a2:a1:50:86:7b:40:b8:cc:
         72:ed:2d:af:d5:ec:74:28:19:05:9f:86:c4:f1:98:11:40:17:
         1c:f3:0f:2b:3d:e7:19:72:31:e0:2b:04:35:a4:cb:77:8f:f2:
         90:c0:64:ca:fd:85:a2:92:7a:c0:7a:10:7f:08:19:74:80:3f:
         9a:34:07:e8:0f:5d:61:f4:0a:af:5a:64:ca:53:9c:ea:e7:b6:
         52:81:29:47:2b:59:85:6e:99:7f:88:09:da:ae:9e:15:c1:ed:
         a4:05:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:51 2026 by rpki-client