Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File:                     18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier:          NzR8hW0MdXYh4l8ijpih30Yli7VPZpheAykcvp3y8OA=
Subject key identifier:   A9:69:BE:5D:F5:F1:0A:70:BA:30:CC:A9:5D:7C:CD:06:0F:8B:1A:9D
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer:       /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial:       019F909125A7A3C33828BBFB1F980CCDBA59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number:          10EB
Signing time:             Thu 23 Jul 2026 20:00:59 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:59 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:59 +0000
Files and hashes:         1: 1-xQpxgbsAccfNR_RPwpELLBga3Q.roa (hash: O9JFLbnCzJwjSJV7ChA49hvf5EARsdHIdJti0Ql7a20=)
                          2: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: YxZNVto9Dqu+G5O3LXnVCld2nEC8PuStSR5s1B76l1M=)
                          3: 7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa (hash: zGb9a33Qnpr4WzIXt8XY3dXadxDHjRQNTlqjB3b8R/g=)
                          4: InpXhnM9MS1muu9R3XQVBIkVVN8.roa (hash: yU7SB2RYwoKjc2l3Eev4frxkOGpJzWi5EJ1oAWnsaXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:25:a7:a3:c3:38:28:bb:fb:1f:98:0c:cd:ba:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
        Validity
            Not Before: Jul 23 20:00:59 2026 GMT
            Not After : Jul 24 20:00:59 2026 GMT
        Subject: CN=a969be5df5f10a70ba30cca95d7ccd060f8b1a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:88:46:3f:55:6c:69:ae:10:44:f7:a6:3b:36:
                    e2:3a:4c:0f:55:c7:7a:b9:7c:5e:56:50:1b:78:fb:
                    aa:ed:f2:da:50:52:23:4e:26:a3:74:56:f7:1c:8f:
                    6c:0d:98:8d:84:dc:33:af:a5:75:44:f1:e0:e2:eb:
                    d3:2e:b6:98:ba:4a:85:c4:0e:bb:e4:04:d3:4d:4e:
                    f6:15:65:0d:22:1a:df:e5:ed:f1:86:00:11:e1:9d:
                    d2:2b:b2:76:28:b0:62:30:f9:44:d2:3a:90:9d:59:
                    c3:ba:5b:74:f3:61:b7:84:36:75:cd:22:2f:7e:d3:
                    13:4e:71:bd:31:56:a7:18:31:58:af:e3:6b:50:cd:
                    f4:f2:32:21:ed:67:23:8a:d2:de:24:4c:f5:8c:96:
                    be:8e:64:e5:2c:b0:b3:f6:97:2f:fd:79:6f:49:90:
                    f9:6c:03:f7:82:af:84:a6:e8:fe:08:82:ec:09:f3:
                    73:19:a7:61:74:a4:5c:eb:e5:f2:bf:41:10:d7:21:
                    f0:73:00:e9:f5:ef:d1:db:ff:37:87:58:8c:5d:c1:
                    8e:70:c3:4f:d1:78:bc:3c:49:87:f1:33:c5:6a:68:
                    69:e0:cb:d7:75:42:0f:7a:fe:9e:e3:e3:03:c5:86:
                    f3:13:3b:6a:dd:68:de:41:ca:05:81:6d:96:a7:4d:
                    0e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:69:BE:5D:F5:F1:0A:70:BA:30:CC:A9:5D:7C:CD:06:0F:8B:1A:9D
            X509v3 Authority Key Identifier:
                keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e0:f1:1a:14:7b:33:6d:d9:43:4a:6b:de:7c:e4:a2:bb:bd:
         4f:7e:5e:c1:0d:ae:f2:a3:6e:2b:76:e7:de:1d:09:8e:60:a2:
         eb:7c:e2:4c:ce:c4:e3:7f:2b:47:39:93:eb:a6:29:29:08:a6:
         38:a0:53:d6:01:09:91:34:f3:5e:1d:4b:20:e8:76:4a:73:8b:
         38:3b:20:89:74:3d:d5:96:d4:0b:16:30:5b:52:08:24:84:ff:
         fc:23:a7:ab:e4:60:b9:62:bf:19:18:e3:1f:8f:e0:02:63:cd:
         a5:c8:69:cc:43:d3:92:65:15:f5:44:fa:4f:3f:f4:35:ee:0f:
         d1:21:16:26:7c:fe:ce:58:07:3b:05:1e:ec:68:d5:7e:4c:ea:
         3d:61:d8:a6:15:b9:c1:d6:e3:7a:ef:fd:33:2a:45:94:60:93:
         fe:93:c5:9f:ca:30:d6:52:83:97:d5:90:10:78:4a:d3:44:ac:
         cd:f1:14:f0:c4:1c:b3:80:c8:ce:a9:db:b6:67:49:57:05:73:
         e5:c4:04:f2:f9:32:88:59:f9:7c:a8:50:7f:a8:6b:3a:24:c0:
         ae:13:9a:90:ea:29:f9:e6:95:2f:aa:98:30:4d:b6:0c:18:1e:
         3c:77:5c:d6:c1:8d:e8:e0:8d:f1:aa:29:ba:09:81:5c:14:45:
         b3:b7:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:44:17 2026 by rpki-client