Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File:                     18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier:          e+qP+4yLju7OGWQ4dkQ6WUB7VR2IyyZOrmT358oNNEA=
Subject key identifier:   86:56:09:00:DB:0D:E4:90:16:89:42:64:73:38:F0:1E:E7:09:30:05
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer:       /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial:       019F8F470E513392EBC60C2F6C6B528B0AF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number:          154E
Signing time:             Thu 23 Jul 2026 14:00:26 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:26 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:26 +0000
Files and hashes:         1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: ceiPzijkEgSV4x+rIHZ2r9kjnq5NU71YGLPFbZqNE2o=)
                          2: 2CFiWjPHpaVJlZUTDr9i3ngvO-8.roa (hash: o6E4nUSkugq5sP9EdIqz6vNORtXVkV1RTL2nfUIeUVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:0e:51:33:92:eb:c6:0c:2f:6c:6b:52:8b:0a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
        Validity
            Not Before: Jul 23 14:00:26 2026 GMT
            Not After : Jul 24 14:00:26 2026 GMT
        Subject: CN=86560900db0de490168942647338f01ee7093005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:91:60:b1:0a:50:9d:5e:16:09:f7:9f:a5:76:
                    37:34:01:8a:f2:7f:a6:e9:47:df:d5:e9:f7:b5:6b:
                    95:9e:48:4b:1c:74:89:f2:57:75:58:b7:df:5a:ed:
                    cd:55:31:52:0f:b4:20:ed:9b:9c:4b:bc:8f:b0:b3:
                    69:52:17:33:9c:27:ff:97:f2:32:d6:2b:12:11:48:
                    32:96:f6:5f:e5:9b:d7:3e:76:b6:2a:a3:31:5d:17:
                    53:e5:44:af:cf:2a:2b:8c:0b:23:a8:5e:1e:84:04:
                    86:07:1e:48:7e:4a:83:03:93:d5:13:49:23:32:6f:
                    03:fe:94:3e:49:2a:a8:f8:d0:2d:d4:d4:f3:77:24:
                    3d:a4:b5:d3:de:1f:19:80:e3:4d:d4:a0:69:0d:0a:
                    bc:ab:af:9f:1c:60:53:c6:7a:0f:56:92:66:49:cc:
                    02:01:d6:7a:72:12:51:1a:98:9d:80:40:48:af:73:
                    c4:b3:bc:dd:40:3f:74:a6:27:a6:96:98:ec:71:d5:
                    27:6f:bb:70:eb:f9:dc:35:68:d2:d7:09:aa:1b:04:
                    5a:ba:f4:21:68:0d:32:29:86:95:7f:4d:5c:be:3b:
                    a9:a5:47:b7:7e:9e:28:1b:76:12:84:5d:76:01:cc:
                    d1:b6:91:16:d5:75:fa:21:65:11:c1:9e:36:c3:fc:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:56:09:00:DB:0D:E4:90:16:89:42:64:73:38:F0:1E:E7:09:30:05
            X509v3 Authority Key Identifier:
                keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ac:aa:85:11:e2:0b:bc:03:fc:05:d4:ae:85:6e:c9:fb:a7:
         e5:71:4b:8a:fb:80:cd:ae:ab:df:36:09:88:0e:e2:a8:8a:29:
         38:c3:fd:cb:87:1c:14:19:46:0f:77:fc:97:93:82:d2:1a:a6:
         3d:9e:a8:0c:1d:71:74:1d:06:f5:2e:da:0c:05:b5:24:f6:e0:
         07:eb:cc:4d:65:82:61:27:25:d1:bd:de:79:dd:7e:ad:ca:c6:
         f1:8a:da:5b:85:bd:be:94:51:1d:cc:67:be:f8:c7:56:cd:c3:
         04:f9:a1:44:48:2b:86:47:5a:a3:55:93:93:ef:09:93:e6:e4:
         d1:5f:ff:68:ec:f2:81:70:6c:c7:2a:62:47:39:64:90:1f:49:
         9a:08:b3:40:b7:80:76:43:78:86:b9:77:26:4a:af:c3:74:48:
         c2:24:e7:33:3d:ac:75:f8:d3:20:ed:fd:e0:d9:35:00:fc:bf:
         d0:0a:2e:2c:37:89:49:55:40:49:18:2e:64:2a:f3:0b:cf:55:
         6a:b1:7e:d2:2d:a9:07:96:6c:28:97:ec:5a:66:92:b3:be:c0:
         5c:28:c3:64:d8:77:0d:c9:77:ec:b4:6d:8d:e4:2b:d2:df:de:
         54:be:1a:fe:ea:ba:ce:f3:ef:86:2e:e7:5f:ef:ba:6d:56:f9:
         e7:12:42:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:49 2026 by rpki-client