Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File:                     18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier:          RuyXps3v0qRuGzzHAEEvdlHnKR15fE8OF5EnZg1tQm0=
Subject key identifier:   05:C4:26:F4:74:9C:C2:F8:3E:50:95:2A:78:6E:F6:BF:AA:E3:1D:BF
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer:       /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial:       019E1BD8A07EE050202AFB7234D53A009485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number:          102A
Signing time:             Tue 12 May 2026 11:00:42 +0000
Manifest this update:     Tue 12 May 2026 11:00:42 +0000
Manifest next update:     Wed 13 May 2026 11:00:42 +0000
Files and hashes:         1: 1-xQpxgbsAccfNR_RPwpELLBga3Q.roa (hash: O9JFLbnCzJwjSJV7ChA49hvf5EARsdHIdJti0Ql7a20=)
                          2: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: bhiWfNZDEx4nhULJhYYGmfXwP9JnRaoTU+Ht+Q0Nzc8=)
                          3: 7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa (hash: zGb9a33Qnpr4WzIXt8XY3dXadxDHjRQNTlqjB3b8R/g=)
                          4: InpXhnM9MS1muu9R3XQVBIkVVN8.roa (hash: yU7SB2RYwoKjc2l3Eev4frxkOGpJzWi5EJ1oAWnsaXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:a0:7e:e0:50:20:2a:fb:72:34:d5:3a:00:94:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
        Validity
            Not Before: May 12 11:00:42 2026 GMT
            Not After : May 13 11:00:42 2026 GMT
        Subject: CN=05c426f4749cc2f83e50952a786ef6bfaae31dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e1:e6:a2:e4:78:38:85:48:65:1a:d1:e1:b0:
                    eb:d3:cf:7f:a0:72:bd:ff:a9:a0:e3:fc:45:f8:62:
                    2b:63:e9:df:fc:9f:c2:f3:2a:cf:20:52:ee:59:3b:
                    24:3e:a3:b0:8d:c2:15:9a:d9:c9:cc:41:4d:a8:4c:
                    b5:42:e4:cd:4d:6d:8d:f2:b6:3e:ef:5a:58:cd:69:
                    6e:07:a8:18:a6:48:da:80:fa:47:c9:68:82:cc:e6:
                    1a:60:62:07:2c:78:5a:49:d1:be:03:2b:af:a5:87:
                    84:dc:31:e1:92:21:9a:30:b7:c7:9e:d3:17:1b:24:
                    83:fb:8a:2f:8c:d3:1a:f5:20:2d:b3:b2:14:cd:13:
                    a9:f2:2a:a2:6e:32:c0:53:d4:73:d1:ac:03:1e:db:
                    e5:dd:6a:37:c9:a6:5c:84:0e:08:eb:d1:d9:e2:76:
                    bc:c3:81:d7:a4:21:9c:f6:5a:40:1a:55:b2:fe:e5:
                    c2:06:24:2e:12:e5:2e:2d:d6:ec:39:31:fd:89:ad:
                    3a:30:6b:f1:c4:c1:eb:c0:1e:2a:25:06:7f:cd:e3:
                    52:9c:c3:92:0a:f6:ed:03:ab:bb:24:01:10:47:43:
                    16:f1:77:1a:cb:0d:e5:05:99:2c:61:8e:88:f3:3e:
                    96:40:08:55:60:b2:5c:17:10:17:36:e8:7e:20:cd:
                    b9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C4:26:F4:74:9C:C2:F8:3E:50:95:2A:78:6E:F6:BF:AA:E3:1D:BF
            X509v3 Authority Key Identifier:
                keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2d:af:f2:6e:d7:81:5a:7e:61:ed:b7:6c:06:66:51:b3:d4:
         b0:ff:3f:f1:e8:58:45:72:4c:0e:ce:26:05:29:2c:5e:14:54:
         a9:93:af:53:bf:a8:b6:70:1f:2e:33:89:b2:64:73:97:82:86:
         06:10:49:7b:8c:28:dc:32:71:ac:87:ea:e2:71:4b:8b:3e:52:
         21:be:ba:b3:e3:09:fa:b5:fa:ce:5e:e5:ed:cf:49:c0:17:06:
         3b:35:30:36:ee:24:a6:dc:a4:d8:fc:31:2e:c8:ac:9b:30:7a:
         90:8b:e3:8b:a3:c4:4b:3d:73:b3:18:51:85:5a:69:79:f7:5a:
         20:f1:86:88:6d:91:8c:1a:ac:06:c6:cc:fa:21:c6:b1:0b:26:
         db:9c:ba:0c:5e:f2:6b:2e:e3:ad:a9:d2:53:e6:1f:b9:ba:64:
         6d:19:ee:cf:bf:77:8d:cd:8e:43:84:97:a3:0c:63:81:cf:df:
         98:33:d6:e5:3b:49:43:f2:2c:01:1a:dc:65:d0:97:b2:47:31:
         b2:c7:68:b9:e7:f1:39:cc:3f:91:9f:f9:69:98:fb:1c:75:b2:
         72:57:25:dd:14:5c:37:b7:03:cb:5e:00:c7:3c:04:32:dc:52:
         2c:08:6b:f4:eb:e6:40:a5:54:99:ab:be:5e:ed:17:68:ae:37:
         e1:42:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:32 2026 by rpki-client