Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File:                     18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier:          yLbouVWn2HlYDnmC0WsGFoIezNriSuE2KmuiXVKETEs=
Subject key identifier:   6A:C9:6C:E5:EF:91:63:63:B2:C6:63:0F:7A:4B:06:AC:9C:5B:B9:50
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer:       /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial:       019D273B1EC9BA9A9C758DE83CE3B1ACC802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number:          140F
Signing time:             Wed 25 Mar 2026 23:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:18 +0000
Files and hashes:         1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: zbtAx+fERyNw8xl866qtFo+3uidJ/i9aDYBRYwxmvog=)
                          2: 2CFiWjPHpaVJlZUTDr9i3ngvO-8.roa (hash: o6E4nUSkugq5sP9EdIqz6vNORtXVkV1RTL2nfUIeUVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:1e:c9:ba:9a:9c:75:8d:e8:3c:e3:b1:ac:c8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
        Validity
            Not Before: Mar 25 23:01:18 2026 GMT
            Not After : Mar 26 23:01:18 2026 GMT
        Subject: CN=6ac96ce5ef916363b2c6630f7a4b06ac9c5bb950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:68:e4:0c:4d:4e:8f:e9:b3:31:0e:90:5a:44:
                    94:1d:81:83:60:e7:33:2f:db:b0:46:20:42:87:9c:
                    f5:63:69:72:b4:f5:bb:d0:f8:78:10:db:02:f2:14:
                    ae:0a:90:c7:e1:43:c2:86:0f:b0:ba:e0:01:df:78:
                    fd:ec:f2:b2:68:e6:04:5f:66:fb:09:2d:f4:ed:00:
                    a8:17:3d:f5:71:50:d3:74:8b:73:25:a2:00:ae:26:
                    3f:5f:4a:bf:d8:ea:a6:6c:a6:b8:16:74:74:ce:df:
                    34:dc:2a:9d:2f:40:8b:4d:d9:e0:19:68:a5:25:5b:
                    9e:b8:f8:4b:3a:a9:22:18:ec:ed:88:e4:0c:41:76:
                    e2:c6:02:b5:c8:79:f8:a3:8e:1f:16:cf:fd:f7:62:
                    3f:2f:79:c4:00:01:72:08:dc:7b:d8:eb:8e:83:77:
                    f6:10:1f:46:f9:1d:62:26:e4:eb:f4:80:b9:bd:f9:
                    62:86:e6:e0:a3:a4:9d:c7:3f:13:0e:c3:e7:a3:d1:
                    c8:17:ec:03:ca:15:5f:a9:a1:7c:00:22:01:5f:84:
                    21:1c:54:b2:1d:5f:57:a3:36:7b:47:13:7a:cc:e1:
                    c4:df:9e:d4:c7:36:e6:a5:98:1c:76:15:00:7c:f5:
                    76:39:52:29:c1:f9:69:cc:6c:55:c1:ea:34:b8:7a:
                    66:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C9:6C:E5:EF:91:63:63:B2:C6:63:0F:7A:4B:06:AC:9C:5B:B9:50
            X509v3 Authority Key Identifier:
                keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8a:cc:80:89:67:a2:ad:f6:b6:c7:cb:e3:a0:7c:b1:b9:dd:
         cb:eb:bd:c2:29:2e:58:34:43:86:69:55:15:0c:ef:8f:af:65:
         11:39:f1:f4:02:f2:c5:a6:58:38:11:b7:fe:8e:d1:e7:cf:01:
         c1:71:b5:f3:9c:8a:d8:70:46:ea:d7:ea:0d:88:5a:af:50:80:
         65:7f:78:90:14:0e:43:eb:bc:95:33:87:bf:6d:76:26:57:6f:
         89:1d:72:80:6c:54:66:c7:2b:6a:e9:3b:a5:6b:b3:d6:50:c9:
         65:ac:e1:a0:ff:00:7c:82:27:8a:85:19:e1:6d:2e:a3:e4:53:
         39:c5:65:c5:0b:51:e2:ec:c9:e1:cb:36:44:f6:97:d0:56:e6:
         c9:87:ea:27:b7:10:6c:d7:f4:9a:6d:e0:f7:cc:2a:93:10:66:
         b8:27:fb:18:23:c9:74:bd:ae:d5:bd:78:bb:f1:64:85:9c:9a:
         2d:e8:aa:2c:ba:a4:8b:cd:4e:89:c5:b5:c7:ab:39:91:9f:52:
         8c:f6:aa:57:e2:5b:9a:6c:a6:37:99:15:d5:b5:58:ce:77:de:
         ca:af:e3:66:51:7c:83:66:e3:11:3b:49:65:5e:0d:5a:c2:70:
         fd:b5:21:da:fd:e7:39:60:35:bf:1e:d7:28:54:0c:79:44:85:
         e5:db:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:39 2026 by rpki-client