Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File:                     18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier:          6woh/iaESvNY4ClISs/wHMFAZR46ab8Zn5gZXTLIU84=
Subject key identifier:   37:1F:88:E3:3E:3D:BD:1F:6D:84:1E:60:9C:B5:19:D1:38:ED:AD:55
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer:       /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial:       019D992B1200CECBD063EA34F8D9F71EB2F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number:          144A
Signing time:             Fri 17 Apr 2026 02:00:29 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:29 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:29 +0000
Files and hashes:         1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: frgNiQD1echgFEYB+4hZb+XUuenwNYIhdc2xB5fQNOs=)
                          2: 2CFiWjPHpaVJlZUTDr9i3ngvO-8.roa (hash: o6E4nUSkugq5sP9EdIqz6vNORtXVkV1RTL2nfUIeUVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:12:00:ce:cb:d0:63:ea:34:f8:d9:f7:1e:b2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
        Validity
            Not Before: Apr 17 02:00:29 2026 GMT
            Not After : Apr 18 02:00:29 2026 GMT
        Subject: CN=371f88e33e3dbd1f6d841e609cb519d138edad55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:17:ea:71:0e:22:0c:c4:32:98:b1:60:e7:
                    72:cb:e4:1a:c4:06:43:aa:1a:4f:c3:66:ec:95:a2:
                    62:b9:1f:c3:cd:d3:97:71:65:6d:45:81:6a:6e:71:
                    46:de:37:a7:06:9a:03:1e:79:38:9b:9b:6f:62:67:
                    b0:b2:48:e9:5b:1b:b1:34:89:4c:5a:a4:91:4a:6c:
                    89:ad:1f:b1:2b:83:69:79:8b:32:81:12:02:5a:08:
                    5c:f3:72:9a:64:59:aa:5b:38:ea:c3:4a:48:15:89:
                    fa:11:90:55:ef:c2:a2:5e:2a:0d:e9:15:52:5d:dd:
                    1d:9b:b1:7c:9f:65:f0:3e:e9:18:53:8c:e2:7c:42:
                    c8:b7:3f:91:ef:53:21:87:e8:d7:f6:04:c2:f4:f5:
                    ca:37:0d:4b:93:1a:8a:69:b9:64:a3:a9:78:d2:20:
                    05:9c:66:a4:ea:0b:bb:29:22:4f:8f:80:dd:dc:0a:
                    5d:33:89:d8:f9:b2:2f:85:e6:6f:d8:70:14:e6:ac:
                    27:06:88:84:d5:aa:91:8d:e9:9e:a2:2d:93:15:73:
                    3b:49:69:1d:14:13:a0:0e:fd:9d:77:bd:1a:d8:c3:
                    9f:7d:20:8d:e8:ca:7c:e2:18:f0:d4:1d:a4:f2:87:
                    27:bb:ca:3d:a3:be:fc:5b:ac:58:a3:ac:55:9b:ea:
                    5e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1F:88:E3:3E:3D:BD:1F:6D:84:1E:60:9C:B5:19:D1:38:ED:AD:55
            X509v3 Authority Key Identifier:
                keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:2d:31:63:5c:bf:37:fa:04:e6:8b:4a:3a:d7:7c:fa:ee:1e:
         0f:d1:3f:a8:93:44:03:f9:50:20:17:ea:07:8a:58:1f:73:56:
         b5:ed:7f:e7:fb:ed:76:43:6e:49:16:17:96:49:3a:de:f9:56:
         1c:a8:be:8d:6b:59:42:46:e3:0e:d8:86:c8:c9:64:bb:92:d6:
         c9:a5:6e:0c:c5:b3:3c:df:34:89:6e:24:44:dc:b5:0e:6f:03:
         a8:d6:cf:8a:3a:21:e5:ae:6a:06:77:a4:6a:ec:f4:87:16:1d:
         9e:d0:b7:a2:5b:9a:7f:05:8a:e6:67:94:29:b0:65:ac:6c:ad:
         b1:8b:56:0d:35:3f:0f:d1:34:ff:9a:93:49:ee:0b:23:4a:8d:
         b2:9c:98:a6:b8:45:a3:44:85:7b:79:e2:94:91:8f:72:72:dd:
         bf:df:28:65:67:13:cf:b1:14:51:35:a5:3a:6b:55:6c:d2:ed:
         90:78:10:d5:43:3d:15:69:b8:41:2b:30:02:55:1d:f4:77:33:
         4a:9b:a2:e8:d4:ec:22:f7:91:7d:46:8f:9b:35:7c:5b:cd:b8:
         6b:88:46:cb:59:c8:78:35:01:4a:01:d4:40:7d:63:87:ea:e4:
         0c:88:43:bc:e1:96:99:f9:f3:99:e9:1b:98:82:0c:6a:5d:ec:
         55:e4:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:29 2026 by rpki-client