Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
File:                     18cz6fYTT3RJxBpe6_WDzjW1QmA.mft (raw, json)
Hash identifier:          tgVsZhn4Rg3yN2MBqzUQ1weUyCPToPVo86hlZS5Olhs=
Subject key identifier:   46:1F:D6:C1:99:CE:F7:00:55:7D:C5:57:D9:AD:AB:DF:92:40:8A:90
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Certificate issuer:       /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial:       01A0CAB55A36BE94AF47FBD4B9DF51DAD7E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
Manifest number:          1066
Signing time:             Tue 22 Sep 2026 20:01:17 +0000
Manifest this update:     Tue 22 Sep 2026 20:01:17 +0000
Manifest next update:     Wed 23 Sep 2026 20:01:17 +0000
Files and hashes:         1: 18cz6fYTT3RJxBpe6_WDzjW1QmA.crl (hash: qyA3rSlvwLYzO0nRcCmH1ZcvlmcGFP2xClwf/dnT2oM=)
                          2: 42BFHGjX0bzPkKLzW4nj7c5jtTc.roa (hash: n6bWVgGKzyz1m/NGMgopOR2F2jnCFtpr5dDWpPXcm0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:b5:5a:36:be:94:af:47:fb:d4:b9:df:51:da:d7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
        Validity
            Not Before: Sep 22 20:01:17 2026 GMT
            Not After : Sep 23 20:01:17 2026 GMT
        Subject: CN=461fd6c199cef700557dc557d9adabdf92408a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:51:75:ce:cd:cb:f2:58:13:3e:d7:d6:8e:5d:
                    66:ae:64:58:6c:e4:7f:5b:0a:dc:ee:2d:bb:ee:8d:
                    97:07:e7:82:d6:88:54:6e:46:6a:8e:d8:77:3f:51:
                    6f:11:7d:12:5f:ec:a8:31:8e:43:28:a6:90:13:a1:
                    87:30:fb:00:d7:da:b0:42:56:05:c1:3c:f5:69:e1:
                    95:52:3e:d6:c3:98:1e:fd:81:17:f0:72:34:64:5d:
                    5c:90:ff:ee:84:03:18:4a:4a:69:f8:05:c9:1a:ca:
                    cf:41:a0:db:fe:e3:53:1a:04:32:11:8e:32:2b:6c:
                    c2:8c:e1:3f:33:24:15:98:0d:5c:14:49:15:6e:c0:
                    99:c8:d4:ba:84:2b:c8:28:a4:d0:d1:f0:12:d6:35:
                    1b:fd:2f:d1:b6:ec:9b:af:ab:7d:4d:fb:f9:8c:3d:
                    d4:c1:4f:c4:4b:98:61:5f:f6:57:c6:9c:99:13:31:
                    ef:27:c0:b9:a3:8d:c5:aa:35:0f:06:9b:a0:f3:1e:
                    d0:51:f2:b3:5e:ef:35:22:66:68:80:d4:91:77:99:
                    1c:cb:f8:2e:a0:9a:6e:a2:33:b4:7f:c1:dc:47:e3:
                    cf:cd:c5:44:e8:be:70:58:7c:df:ff:f9:7e:7f:b3:
                    38:b6:71:b5:e7:f9:c5:5c:8b:30:4a:43:9c:ef:1e:
                    34:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1F:D6:C1:99:CE:F7:00:55:7D:C5:57:D9:AD:AB:DF:92:40:8A:90
            X509v3 Authority Key Identifier:
                keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:db:d9:5b:aa:41:a2:44:89:d4:20:3e:52:b9:ac:60:6d:1e:
         7d:90:a8:2f:30:fb:cb:7f:5e:5b:6c:47:47:2e:73:a5:5c:46:
         2f:73:be:41:85:a4:08:a0:59:2e:a0:14:eb:4b:33:8c:91:88:
         be:1d:7f:da:18:bb:ca:ff:28:01:23:1a:d3:e2:d9:46:98:9a:
         b6:1d:13:a2:da:7e:48:b3:c4:50:0b:6a:e4:9c:bc:54:6e:f3:
         fd:50:37:b8:fe:28:4e:da:10:9d:cd:88:da:a7:31:69:d9:b0:
         6e:36:23:da:1d:f7:81:62:4d:19:a0:c7:64:d5:3e:8a:99:83:
         06:c7:d4:88:69:1c:8f:c5:ef:08:45:68:3c:4f:38:c2:a8:58:
         18:7a:1d:2b:35:e4:96:eb:ec:47:20:30:eb:4a:5b:3e:e4:68:
         1f:d3:3d:a0:23:ef:db:3c:a9:1f:b4:a5:0e:41:91:4c:9a:5d:
         f0:d1:03:33:ad:ca:25:4e:b3:70:be:33:25:4d:a6:49:90:f7:
         6c:32:5e:fb:9b:b5:5a:f4:81:09:34:7c:f8:e8:84:85:76:a6:
         50:7c:1c:3b:3e:76:bc:51:32:5e:6e:03:b0:e2:9c:9c:72:e0:
         fb:dc:0a:04:98:29:f9:a9:40:cc:f7:07:0e:ea:63:35:e0:77:
         5b:e8:86:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:28:41 2026 by rpki-client