Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File:                     18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier:          SQlHtCv7uptCjPfflScvVbWqbCevTcaBKvQOXC6PVqk=
Subject key identifier:   48:A4:8E:6F:00:7D:E1:71:B1:7B:4D:D2:19:CD:D0:BD:71:E6:C6:18
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer:       /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial:       019FAA509F6B97E50E6A341E93E1CB7B7020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number:          155C
Signing time:             Tue 28 Jul 2026 20:00:38 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:38 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:38 +0000
Files and hashes:         1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: 32GGiqD0wCzs5gw27M8XMltaxDJ6VAdd75UJxLUIZ3g=)
                          2: 2CFiWjPHpaVJlZUTDr9i3ngvO-8.roa (hash: o6E4nUSkugq5sP9EdIqz6vNORtXVkV1RTL2nfUIeUVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:9f:6b:97:e5:0e:6a:34:1e:93:e1:cb:7b:70:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
        Validity
            Not Before: Jul 28 20:00:38 2026 GMT
            Not After : Jul 29 20:00:38 2026 GMT
        Subject: CN=48a48e6f007de171b17b4dd219cdd0bd71e6c618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:57:6f:f2:a6:2a:88:14:5e:4a:0d:f9:09:ca:
                    b7:4c:04:48:da:77:44:21:8b:39:6d:d9:f4:bc:ef:
                    52:d4:b2:32:51:c5:6c:56:60:f4:bc:02:ad:19:3b:
                    7f:94:2b:b9:d4:eb:8e:d4:a3:f0:9d:75:a9:a1:bc:
                    dc:3e:c7:30:74:79:e6:82:e2:7b:24:fe:c3:2a:99:
                    dd:93:c6:69:6c:e5:ce:59:20:f7:73:ca:c2:30:e0:
                    3b:2d:e9:e7:60:51:f4:4b:de:7e:34:06:9a:13:e4:
                    38:8b:b4:e4:c8:44:a5:fd:9e:f9:13:11:af:8c:1c:
                    e0:34:5b:0f:a6:bd:5a:12:e6:fa:c9:83:6b:05:13:
                    b3:12:3d:19:fc:a4:5c:39:4a:8c:23:d8:69:3c:6e:
                    74:64:44:37:db:04:1a:17:73:10:c7:af:be:0b:00:
                    0d:d1:f2:7d:58:f1:1e:37:1a:23:4c:3f:9a:c2:97:
                    83:01:1a:cd:6e:99:41:b9:df:22:86:59:73:2e:f5:
                    a0:2a:e5:d2:15:d7:7c:6d:47:f7:1e:aa:b9:b7:bf:
                    39:1c:1b:63:ee:8c:2c:00:82:13:0e:69:1c:15:29:
                    96:6b:d9:cc:64:ee:35:6c:6b:10:3a:2f:09:bb:72:
                    94:ad:ae:83:33:37:a8:05:1b:06:26:8f:38:f8:6b:
                    97:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A4:8E:6F:00:7D:E1:71:B1:7B:4D:D2:19:CD:D0:BD:71:E6:C6:18
            X509v3 Authority Key Identifier:
                keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:1b:55:c6:3c:04:23:6d:7b:a4:dc:4e:1d:33:5c:3f:17:1c:
         06:20:bc:8c:3d:ad:2e:30:da:a1:7c:60:ef:6c:70:e8:6c:29:
         f7:78:56:4f:46:f3:66:7e:11:73:4a:27:58:7d:14:53:9f:e1:
         6f:04:89:24:86:af:1e:c0:8c:4a:ea:63:d1:c7:ad:51:41:f8:
         0a:4d:35:70:81:82:e3:8b:6a:79:8a:30:04:11:d2:d5:84:8b:
         bd:6d:cd:bc:00:b4:9c:86:cb:cf:7b:ae:8f:76:5a:a6:bb:b5:
         a9:c3:a8:fb:40:fa:e0:c1:1a:d0:6f:b1:fc:18:20:c9:99:6c:
         d3:fc:a7:f5:af:95:11:a8:2b:05:4c:53:51:88:fd:e5:3e:c5:
         45:0d:ef:63:28:11:5b:60:2a:fe:40:1b:64:fd:44:c0:65:19:
         4e:08:b6:64:da:36:f0:17:f3:39:32:19:bf:a4:bc:5c:bc:b3:
         f0:11:75:85:35:89:08:27:40:86:9e:bc:11:69:79:78:b8:ac:
         f0:d3:eb:7b:7f:10:24:7c:9b:8f:76:19:9b:5c:e6:07:57:3b:
         44:45:e2:48:5f:82:b7:ed:ba:70:d5:91:bc:7c:bb:7e:f3:52:
         57:41:b3:89:ca:45:92:4d:dd:ea:d7:bc:4e:01:5d:d5:90:43:
         63:8b:7b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:08:41 2026 by rpki-client