Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
File:                     18thbM_g6Ga0J8CkXvQYGwmB5jE.mft (raw, json)
Hash identifier:          DmiksBa/vybFwu9yoiXvIJ3U914L5/1Yxc7oP/+kYYk=
Subject key identifier:   E9:CF:45:48:21:44:10:BA:EE:9E:B5:0C:01:85:22:B7:0E:97:CC:82
Authority key identifier: D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31
Certificate issuer:       /CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
Certificate serial:       01A0D6BA045130F666BBC09F313A8AA7149A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
Manifest number:          150E
Signing time:             Fri 25 Sep 2026 04:01:49 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:49 +0000
Manifest next update:     Sat 26 Sep 2026 04:01:49 +0000
Files and hashes:         1: 18thbM_g6Ga0J8CkXvQYGwmB5jE.crl (hash: Ugw6WYd4aEuQTCwwDIDq4YB7MSkxMzTPr7DBFIzHaAY=)
                          2: 3hk9XqmHqY58TN36FPRIol4THYs.roa (hash: UsqCD7ME+ILVSkGV9DubbwCdNyqKHd5/MbEJEt8ZDw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:ba:04:51:30:f6:66:bb:c0:9f:31:3a:8a:a7:14:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
        Validity
            Not Before: Sep 25 04:01:49 2026 GMT
            Not After : Sep 26 04:01:49 2026 GMT
        Subject: CN=e9cf4548214410baee9eb50c018522b70e97cc82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:f2:ef:8a:8a:75:4d:59:87:00:bd:d1:71:
                    bb:d0:bb:f4:a7:df:0e:36:25:d1:2a:47:46:69:b4:
                    5c:42:ab:7d:d5:44:51:0a:23:d4:ea:df:d9:ef:bd:
                    65:be:35:4b:51:c8:88:8c:0c:5e:0c:05:fe:5a:04:
                    cb:f1:8e:b7:e7:bc:3a:77:e7:3a:d9:bd:cf:ed:9d:
                    0d:8e:54:3a:d6:ac:7f:9e:52:bb:ba:74:25:44:1b:
                    6e:59:58:1c:99:af:aa:19:53:28:8c:ac:e0:65:9f:
                    2e:98:c3:e7:3e:75:62:ad:ee:13:35:3d:a1:3c:e2:
                    21:a4:4f:98:98:4c:2a:d7:ff:39:f3:35:51:79:55:
                    e0:6d:44:0c:3d:0b:38:0f:0d:f7:64:fd:7a:f2:35:
                    6c:a1:aa:11:df:13:a8:08:88:7c:9a:05:4c:27:d3:
                    b0:da:dc:17:ce:66:d4:32:81:70:72:a9:73:d7:f7:
                    7f:c1:9c:76:c4:d3:c1:8e:1f:f1:70:80:05:97:8e:
                    be:5b:94:da:bb:81:d1:2f:47:60:47:ec:bd:b9:d3:
                    bb:82:44:07:df:5c:d1:7f:01:1d:83:ca:65:16:4e:
                    df:51:5d:34:a7:10:00:6b:3d:12:ec:41:ad:dc:1a:
                    b3:03:36:7d:71:2d:80:32:40:3f:73:19:ad:af:de:
                    bf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CF:45:48:21:44:10:BA:EE:9E:B5:0C:01:85:22:B7:0E:97:CC:82
            X509v3 Authority Key Identifier:
                keyid:D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0b:e6:29:7c:ee:fe:4a:73:d1:c9:ed:ab:40:9e:80:4b:31:
         54:13:83:1d:5c:71:85:7e:cc:52:2d:3b:a5:9a:9f:bc:dd:d1:
         6a:d1:16:9d:2b:98:75:ba:a0:5e:bb:51:37:8d:60:3f:15:97:
         c8:55:88:5a:06:e7:17:d3:f7:c2:12:3e:99:3e:7a:e5:ad:09:
         5b:3b:a3:37:d1:0b:9d:63:56:21:83:6e:c0:5f:e0:97:36:c1:
         3e:fa:bb:5f:55:ae:9b:c4:84:bf:53:f1:cc:f1:da:b8:39:48:
         b8:d5:25:69:56:58:11:92:b7:f0:3f:d7:a5:a1:89:2b:88:fb:
         50:d3:68:c0:ab:a3:fa:8d:f6:de:f8:1c:7d:2f:a7:c8:0c:a6:
         99:36:95:59:2d:d0:30:bb:bf:ad:4d:6d:4b:6b:ca:50:30:21:
         5c:78:bb:35:e6:2b:2f:0d:1e:ae:60:0c:94:a1:37:ec:52:ab:
         fa:1b:5f:d7:6f:ce:0f:13:71:6b:ac:93:51:7c:7c:b9:0f:58:
         80:6f:f3:46:1a:30:15:b9:9e:7e:11:d7:39:d7:8f:87:74:ca:
         09:63:cf:63:64:75:a5:bd:b7:b8:11:47:f9:0f:cb:f1:b4:ba:
         20:0c:d9:26:ce:42:66:19:ed:5e:11:ad:ea:67:16:ad:ac:0b:
         1a:22:85:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:28:02 2026 by rpki-client