Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File:                     18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier:          Kb/bSZfqvp/G+DHqCt0URBspqTwUPzT5S1JXfD0WvO4=
Subject key identifier:   B8:06:A5:CD:62:B8:EF:C1:72:7F:57:1E:45:13:BB:09:B8:2B:59:F2
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer:       /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial:       019E1D90FD78D3EB97175ADA708E9AA8DBB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number:          1904
Signing time:             Tue 12 May 2026 19:01:41 +0000
Manifest this update:     Tue 12 May 2026 19:01:41 +0000
Manifest next update:     Wed 13 May 2026 19:01:41 +0000
Files and hashes:         1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: /we9ZBV4jrfQCvdKq6r11h7jJIjLB+f+8dGQhW00lqM=)
                          2: 5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa (hash: esrOMmA+0Y4Owzn/Tp8QtyowPBDFA761U7pC1R7xerw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:fd:78:d3:eb:97:17:5a:da:70:8e:9a:a8:db:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
        Validity
            Not Before: May 12 19:01:41 2026 GMT
            Not After : May 13 19:01:41 2026 GMT
        Subject: CN=b806a5cd62b8efc1727f571e4513bb09b82b59f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:98:95:0c:7d:cc:4c:eb:36:db:80:4d:a2:
                    2d:0f:ab:08:e8:b2:9e:2f:7a:28:2d:f2:7f:67:d5:
                    52:ec:de:ed:78:bd:d1:9f:d8:e0:60:10:ed:c6:2e:
                    ad:9a:b1:5e:5c:12:e9:5d:8d:58:60:b9:83:f1:1b:
                    36:42:33:e9:f3:3a:b6:be:41:24:f8:c8:50:f7:73:
                    a7:7a:12:79:8f:15:44:99:f9:a0:52:f9:56:37:1a:
                    47:11:60:91:9c:36:1c:f6:44:b2:6b:d3:b6:fd:d6:
                    38:cb:bb:06:ea:5e:5b:99:c5:b4:00:49:08:af:be:
                    27:62:17:56:9a:b2:d3:31:13:f2:77:82:47:19:55:
                    23:ec:d7:c7:0e:a6:ce:0d:84:fc:47:67:3e:16:05:
                    4e:9d:f2:fd:34:14:37:79:56:33:a4:96:77:27:7a:
                    88:6a:7d:08:4d:54:87:e5:15:bd:4e:6c:57:e2:72:
                    dc:39:9b:b2:27:8d:8c:49:dc:37:9d:dc:b9:3d:52:
                    1b:03:b9:e1:86:c9:64:df:b0:00:63:c3:5a:0f:8f:
                    95:15:56:f2:3f:bb:09:a0:27:e7:c3:ac:90:c8:be:
                    11:27:10:f2:a6:f2:37:65:69:19:64:a8:c7:85:57:
                    4d:99:20:6e:71:28:d1:53:9c:68:6d:aa:58:73:43:
                    f0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:06:A5:CD:62:B8:EF:C1:72:7F:57:1E:45:13:BB:09:B8:2B:59:F2
            X509v3 Authority Key Identifier:
                keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:0b:2e:5f:86:7c:c9:46:26:7c:b5:5e:6f:b3:73:04:96:77:
         52:a8:8a:32:15:f5:41:c8:95:c9:07:3b:ac:40:cf:9a:66:40:
         56:d7:99:7b:58:da:81:6c:af:74:c5:46:ee:71:c1:8e:1c:f2:
         63:2d:bd:c4:84:da:3b:15:f8:1e:17:3d:c0:fd:77:07:bd:2d:
         e4:1e:a0:e5:c6:27:e9:95:43:60:48:62:39:70:12:f6:a8:ab:
         71:fe:86:9c:9e:ef:95:56:b3:8f:1f:87:bb:79:9c:65:ed:5a:
         ce:70:df:61:3f:0b:e5:67:62:51:a3:f6:54:00:e6:67:1e:7d:
         aa:d1:48:be:c1:32:9c:f1:1e:e7:b2:e7:40:76:d9:7a:66:3c:
         e5:16:25:0e:02:c6:a0:c3:68:c1:ac:6e:88:8d:81:90:40:3b:
         24:5f:be:da:56:a4:d8:70:b5:ad:c6:e5:ef:2f:56:a9:68:42:
         31:8b:c3:ac:2f:70:0e:af:a4:80:41:a2:23:49:fc:6f:08:73:
         e6:a5:f1:2a:d2:6d:db:a8:8a:c8:16:3e:7c:65:44:8c:b3:67:
         97:27:94:af:00:38:20:ee:0f:67:79:da:a2:b7:c6:6b:bc:e6:
         f9:17:9b:2f:07:b5:84:e9:33:b2:0e:16:fb:bd:50:94:8f:a2:
         d6:72:93:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:08:07 2026 by rpki-client