Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File:                     18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier:          +zdKmgKuUgtMJs8kEbKAUxjjmKoezo7SFmb1h5A8VOI=
Subject key identifier:   4B:26:21:E2:99:B2:AE:EA:06:BF:75:AC:9D:84:6C:4B:6F:AC:D5:3D
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer:       /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial:       019E1C7DDC2FC724A8AD6228378BA81D27DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number:          148E
Signing time:             Tue 12 May 2026 14:01:10 +0000
Manifest this update:     Tue 12 May 2026 14:01:10 +0000
Manifest next update:     Wed 13 May 2026 14:01:10 +0000
Files and hashes:         1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: 2GJDixYGJmt+7Sd6bRI1CYMH8dS1Y/f5w5QpYkSU3tQ=)
                          2: 2CFiWjPHpaVJlZUTDr9i3ngvO-8.roa (hash: o6E4nUSkugq5sP9EdIqz6vNORtXVkV1RTL2nfUIeUVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:dc:2f:c7:24:a8:ad:62:28:37:8b:a8:1d:27:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
        Validity
            Not Before: May 12 14:01:10 2026 GMT
            Not After : May 13 14:01:10 2026 GMT
        Subject: CN=4b2621e299b2aeea06bf75ac9d846c4b6facd53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:85:b4:ac:96:45:48:d4:48:24:77:8c:74:
                    6d:01:31:50:1c:ab:4b:a1:9b:f5:83:f4:ad:82:96:
                    73:dd:20:2e:3a:52:75:b9:c3:04:ac:1c:70:5f:fd:
                    cf:7e:73:3e:c9:48:6e:72:51:8b:50:34:a6:0b:97:
                    ae:e6:98:c1:65:fe:b6:10:8e:17:3b:d7:8e:58:2f:
                    d3:44:d1:67:b8:1e:08:88:b6:23:ca:f1:07:cf:8d:
                    2c:a9:ed:48:e0:06:50:5f:90:49:7a:0b:75:da:75:
                    fe:6d:f8:1c:b8:56:51:a8:7c:54:88:ab:dc:2d:b3:
                    38:a9:c8:39:cd:d6:d0:da:2b:d1:ee:cf:ed:81:2d:
                    e6:9c:2c:f5:44:7a:b6:aa:dd:d5:2a:3a:ed:a8:76:
                    13:4a:a4:ac:78:63:e4:f2:57:b6:98:db:d1:22:64:
                    92:5d:07:5b:7a:e8:cf:b3:b5:cc:87:65:68:df:d1:
                    6b:50:0f:4c:fc:3d:b6:d1:0b:14:1f:d7:e9:d9:04:
                    69:cc:7b:90:fd:03:50:fe:03:12:ee:e9:4e:23:7c:
                    e8:e0:75:e4:2f:8c:82:91:dc:30:cb:d2:a1:c2:48:
                    f2:c8:d2:8c:fb:46:3f:54:2d:9e:5a:75:b0:a2:8a:
                    5c:52:15:a9:3a:d5:34:d1:f5:10:48:4d:27:99:c9:
                    56:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:26:21:E2:99:B2:AE:EA:06:BF:75:AC:9D:84:6C:4B:6F:AC:D5:3D
            X509v3 Authority Key Identifier:
                keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:cf:ee:01:2e:0f:28:52:01:86:4c:8e:60:f0:c8:a7:25:85:
         aa:3c:20:b0:f3:49:c7:aa:73:c8:fb:58:29:fe:a3:45:11:d9:
         2e:04:1a:63:ea:90:a0:ad:b0:9f:20:0a:f0:3e:12:d4:0f:7b:
         7d:91:ea:91:3a:c3:c7:ba:46:cc:f0:6d:b2:a3:c7:51:bc:84:
         12:7a:ee:b9:25:c7:af:55:db:35:ab:f3:57:d5:50:83:c0:ed:
         49:b8:35:e3:e5:aa:12:63:a5:52:aa:d3:e7:90:de:d7:af:fb:
         2d:bf:7d:42:e9:ca:1a:12:e0:bc:ae:9e:87:7d:91:26:48:51:
         6e:e2:69:07:46:6e:ba:51:c5:53:3b:83:bf:81:fb:0e:73:2c:
         fc:7e:76:ee:26:2b:93:7a:ba:d6:7d:90:7a:a3:47:60:bb:9d:
         8f:6b:1c:9b:d7:98:04:48:a8:47:bf:d7:10:9a:fa:78:74:e2:
         15:a9:b3:e2:03:ec:d8:de:8d:0a:db:1f:e4:d5:b6:80:45:24:
         88:ba:f2:01:df:5d:a4:bc:90:ca:cd:29:4d:61:ad:e1:d3:3c:
         f9:18:40:7e:43:64:3d:71:94:c7:f4:3a:9b:49:9a:9e:ad:1b:
         61:b9:67:80:57:93:2b:a5:e3:54:2e:23:d9:a6:e4:7a:f0:00:
         a7:a1:0a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:00 2026 by rpki-client