Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
File:                     18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json)
Hash identifier:          10LzZNt1JMaLUDnSmpkWgFK1cg8seFj2VjStmZui6mI=
Subject key identifier:   6B:30:73:65:81:15:61:E0:47:2C:E1:97:00:5C:93:6E:60:12:7C:9A
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Certificate issuer:       /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial:       019E2D0433E76D413961B8DADAC85CD2EF5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
Manifest number:          0F3A
Signing time:             Fri 15 May 2026 19:01:50 +0000
Manifest this update:     Fri 15 May 2026 19:01:50 +0000
Manifest next update:     Sat 16 May 2026 19:01:50 +0000
Files and hashes:         1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: Q1n63tWSITZ8u7pJzrmKwY4xqna1n/o+uyc8ZONLW30=)
                          2: a95lTc6SyYotVQ4RVCtdQF5CTXI.roa (hash: Y3c98ZkhrxCxq69lmMzhboHkIdool+SBVrSnVJwe+fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2d:04:33:e7:6d:41:39:61:b8:da:da:c8:5c:d2:ef:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
        Validity
            Not Before: May 15 19:01:50 2026 GMT
            Not After : May 16 19:01:50 2026 GMT
        Subject: CN=6b307365811561e0472ce197005c936e60127c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:17:16:23:49:cb:e3:0d:22:23:94:4d:16:
                    11:32:c4:c8:47:77:26:b4:21:b3:f7:1b:94:b1:14:
                    09:0f:8a:a6:3c:a1:c9:af:48:0f:77:12:8c:d0:50:
                    e4:d6:45:99:54:45:29:e6:73:7b:92:0e:36:dc:15:
                    81:ff:26:24:49:d4:7c:f2:7b:13:8e:db:b8:28:1c:
                    51:be:b6:27:39:5f:9c:b4:fe:f6:b3:65:07:b1:ec:
                    a2:04:e2:ac:81:6e:de:fa:20:14:b7:e9:26:f9:67:
                    12:5c:c4:21:b2:39:32:a8:a2:37:73:5b:ba:b6:c0:
                    44:b7:ba:e6:24:b7:36:6f:3e:9d:11:d9:35:c5:99:
                    24:b4:7d:8c:a3:51:c4:87:92:8f:b1:58:ae:40:a7:
                    5f:71:ef:6a:96:12:67:bb:9e:53:44:18:a8:14:73:
                    0b:6d:cb:19:e4:d1:70:17:61:81:1c:d0:e1:78:7e:
                    78:8c:f8:3d:26:c7:fe:35:e3:2a:1a:45:da:a0:d7:
                    de:1a:f6:20:fc:a4:66:0a:d4:22:5e:ff:56:f9:4a:
                    54:1f:e4:73:49:14:cd:30:18:2d:74:9c:62:38:52:
                    8e:67:4c:55:15:61:67:ac:53:07:cb:8b:d3:de:25:
                    8c:c3:f4:61:9b:f6:46:3f:ce:6f:b9:f7:f7:a7:c8:
                    b9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:30:73:65:81:15:61:E0:47:2C:E1:97:00:5C:93:6E:60:12:7C:9A
            X509v3 Authority Key Identifier:
                keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:27:c6:0a:c0:c7:7b:48:dc:36:80:82:b8:b2:af:8b:30:a4:
         e8:3c:4e:0b:d8:a1:ab:8d:3e:38:cb:7d:e3:19:26:54:96:c1:
         60:d2:7b:83:d5:50:93:a5:a1:44:3e:90:0e:c6:21:3b:9f:71:
         eb:14:d7:a9:5f:bc:c1:4a:3d:37:fa:f8:f2:fd:4e:83:b4:b4:
         e9:64:e6:00:e4:8f:09:f1:e1:de:3c:24:3f:7f:e4:62:da:5f:
         68:0f:dd:b6:61:00:e5:a7:c4:0d:65:37:b1:94:52:3c:2b:3d:
         35:df:d8:fb:48:3d:80:92:ff:bc:79:a1:38:35:21:4c:c7:97:
         49:f3:29:60:5d:31:a2:1f:6c:f4:bd:2d:2f:f2:58:41:4a:26:
         6c:ac:2f:ff:91:7f:46:7d:30:d3:74:08:cc:28:71:61:3a:20:
         99:28:85:23:2e:61:66:20:7b:0a:d5:21:2c:44:96:04:07:d2:
         b3:96:dc:80:b9:6c:c7:ed:9c:7c:15:ba:df:e4:17:45:94:98:
         6e:32:6a:de:88:bd:c3:80:35:dd:fe:fd:6b:ab:e8:98:00:6f:
         db:5f:0d:64:61:c5:f2:c1:e5:1b:15:f4:ab:4c:bd:7e:50:77:
         d8:f9:02:80:32:8e:2a:ec:d1:bb:8e:d0:1b:f0:aa:62:a6:ec:
         61:1e:8e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:45:15 2026 by rpki-client