Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File:                     18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier:          Yi4iwMEyW8/X8X7O8fW/4PAQ79DxjKt+hAmhAikw2hM=
Subject key identifier:   1A:AE:9E:28:43:80:D9:B0:C7:1F:0A:C8:0E:9B:AB:FF:4A:01:69:F7
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer:       /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial:       019FA9AB7E729026B6F8C7EAD473A3A9EABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number:          10F8
Signing time:             Tue 28 Jul 2026 17:00:16 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:16 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:16 +0000
Files and hashes:         1: 1-xQpxgbsAccfNR_RPwpELLBga3Q.roa (hash: O9JFLbnCzJwjSJV7ChA49hvf5EARsdHIdJti0Ql7a20=)
                          2: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: J93bWDFaB40rUQcHrwXHCZTj7iOomjzuM6NqI6XmDkM=)
                          3: 7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa (hash: zGb9a33Qnpr4WzIXt8XY3dXadxDHjRQNTlqjB3b8R/g=)
                          4: InpXhnM9MS1muu9R3XQVBIkVVN8.roa (hash: yU7SB2RYwoKjc2l3Eev4frxkOGpJzWi5EJ1oAWnsaXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:7e:72:90:26:b6:f8:c7:ea:d4:73:a3:a9:ea:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
        Validity
            Not Before: Jul 28 17:00:16 2026 GMT
            Not After : Jul 29 17:00:16 2026 GMT
        Subject: CN=1aae9e284380d9b0c71f0ac80e9babff4a0169f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:9d:33:62:f3:1e:1a:22:8a:c5:e0:8b:df:
                    ac:01:fc:ac:b2:4e:3a:d2:b5:f0:f8:30:95:47:c7:
                    4f:e6:0c:c8:40:88:f6:f1:85:1b:52:5d:b5:d5:ba:
                    57:a7:1a:71:78:fe:42:b1:37:b6:76:25:9b:5a:dc:
                    b0:d8:dd:6e:fe:85:80:1a:26:42:0b:62:d6:93:83:
                    63:fd:8e:2b:c3:0e:ee:f2:29:d3:b2:4a:23:a2:f3:
                    58:c8:7e:73:ed:5b:7b:47:d1:1f:a2:81:1b:3b:10:
                    e7:d9:73:fb:e4:a0:bd:10:f3:27:23:f8:49:4b:3c:
                    0f:63:30:2b:2e:ee:0c:0e:f7:5a:6f:21:33:51:0b:
                    a1:6f:6e:c1:7b:65:9c:3f:a2:86:4f:29:f4:45:0d:
                    f2:71:0a:7f:ef:8f:4a:e1:89:d1:d1:de:f1:e5:e7:
                    6e:b0:bc:cc:c8:37:b5:79:f7:f3:27:9c:09:89:1e:
                    b1:c1:a5:21:35:bf:3c:08:5f:29:3d:75:7e:a5:89:
                    05:3f:ee:dc:94:32:fc:e3:9c:4d:a5:a6:41:09:dd:
                    2a:ff:63:21:66:74:c1:2d:20:1d:a5:f9:e3:d9:a3:
                    4b:60:e5:eb:70:9a:8f:23:c8:a4:64:76:81:3f:9a:
                    b0:21:12:7d:10:81:f8:ba:c6:a7:ef:2f:ab:29:2d:
                    b7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AE:9E:28:43:80:D9:B0:C7:1F:0A:C8:0E:9B:AB:FF:4A:01:69:F7
            X509v3 Authority Key Identifier:
                keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:25:8e:c5:97:6d:75:8c:ce:2e:7b:a9:a6:df:3f:d8:bc:d6:
         a2:89:7e:e4:fa:a4:e8:06:c1:6e:7d:9f:40:05:9c:e7:7d:11:
         a6:69:a3:90:e0:a5:e8:1f:24:54:d8:a1:5d:4a:5f:d9:bc:8c:
         b0:73:44:b7:dd:67:73:bb:ec:3a:33:a9:df:22:73:b5:5e:a5:
         b2:e2:2e:9a:e0:fb:b9:d5:59:f7:ff:79:6c:59:39:be:14:ed:
         d3:d0:76:11:b6:f8:ab:52:c0:e1:fb:f0:43:39:c0:93:00:df:
         68:35:56:07:d7:88:ef:2d:05:94:6f:46:a1:41:cf:cb:3b:39:
         64:1e:2d:02:50:d8:9d:bd:f5:86:d0:e9:0a:1b:e1:07:32:fc:
         7f:d7:2e:87:15:8e:d8:53:5b:b8:f1:22:19:a2:58:17:c9:cf:
         da:a4:da:85:35:d0:40:37:60:51:74:10:64:64:17:6e:d0:41:
         51:6e:d7:23:c9:82:28:1b:d8:62:95:95:71:21:04:b2:3d:4a:
         51:c3:58:8d:b7:ed:d5:c9:83:c2:06:3a:ef:55:17:1b:76:d3:
         4a:3e:f3:65:91:11:db:40:1c:e3:20:08:05:00:50:d5:e6:42:
         a0:83:d4:0b:3b:c9:86:b2:a0:84:b1:60:6f:32:73:06:5d:52:
         d3:06:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:09:49 2026 by rpki-client