Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
File:                     18thbM_g6Ga0J8CkXvQYGwmB5jE.mft (raw, json)
Hash identifier:          pbIKUShvAw3lQt9TNJDUdxxqHQudNEyRMkzLfb9SNJU=
Subject key identifier:   A2:7F:9D:8A:4F:C7:8F:8F:C0:0B:AC:EB:7F:0C:86:3B:7E:8C:2C:13
Authority key identifier: D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31
Certificate issuer:       /CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
Certificate serial:       019D39AE782B419A6367AEE6B7669CC81606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
Manifest number:          132F
Signing time:             Sun 29 Mar 2026 13:00:28 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:28 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:28 +0000
Files and hashes:         1: 18thbM_g6Ga0J8CkXvQYGwmB5jE.crl (hash: lrv8/UisUix9c24aI2aEh9Ks149Ij+JWe6ZQZlWh34Q=)
                          2: 3hk9XqmHqY58TN36FPRIol4THYs.roa (hash: UsqCD7ME+ILVSkGV9DubbwCdNyqKHd5/MbEJEt8ZDw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:78:2b:41:9a:63:67:ae:e6:b7:66:9c:c8:16:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
        Validity
            Not Before: Mar 29 13:00:28 2026 GMT
            Not After : Mar 30 13:00:28 2026 GMT
        Subject: CN=a27f9d8a4fc78f8fc00baceb7f0c863b7e8c2c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:82:02:fa:ec:98:78:9c:9f:93:7c:f8:a3:bc:
                    bf:31:f4:c9:0c:f7:6c:45:dd:ee:47:5b:05:bf:dc:
                    59:44:6f:62:f2:34:43:73:80:72:5b:26:35:40:60:
                    a3:5b:78:1f:9a:38:d6:a8:51:c1:1c:c6:47:ed:f4:
                    91:98:21:33:6a:d9:62:e6:f6:8c:9f:bd:bd:61:9b:
                    72:24:96:7b:16:64:9f:2b:46:53:52:ac:32:1f:98:
                    a0:4d:8e:b4:8c:e8:d2:23:f8:e2:a4:a5:6a:6e:46:
                    22:a0:be:24:e3:c8:7f:a1:c5:d1:86:89:f1:07:db:
                    86:81:3b:9c:a7:36:fd:b9:1c:49:c5:8a:61:81:92:
                    a9:2b:9c:23:af:90:cb:6c:86:26:aa:91:99:79:7d:
                    3f:dd:bf:00:8f:45:78:27:34:d6:fb:4c:37:28:04:
                    7d:b0:85:fb:e6:ac:da:8a:e0:c4:78:24:fc:16:64:
                    29:b2:32:0b:b1:f5:d0:59:cd:c4:1a:55:51:6f:40:
                    e6:52:c3:f0:d2:a8:e6:24:a7:13:5c:09:7b:53:0f:
                    46:d5:15:b9:a9:4b:43:70:8c:17:2d:8f:cb:2b:46:
                    0c:ce:bf:e4:d4:da:12:28:e5:b2:fc:c7:fb:e2:09:
                    46:e4:5b:3b:fb:28:93:03:7e:da:18:ee:29:d1:62:
                    8b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7F:9D:8A:4F:C7:8F:8F:C0:0B:AC:EB:7F:0C:86:3B:7E:8C:2C:13
            X509v3 Authority Key Identifier:
                keyid:D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:66:63:a3:9b:a9:83:4c:27:6e:85:17:c2:9f:29:ec:34:98:
         47:a0:63:69:39:c6:7b:fc:cb:1a:b4:25:f8:57:4b:6a:f1:0f:
         ce:29:4f:07:22:89:d2:50:e1:c4:c2:38:9c:a2:8b:03:fa:61:
         86:ad:2e:d8:f4:8a:09:49:58:7b:13:14:fa:b5:54:4c:54:fc:
         5f:21:3a:44:17:de:d8:f6:cc:bf:0e:b4:dc:c6:90:07:08:0f:
         27:52:f9:e1:61:d2:14:46:48:b2:6d:49:12:0e:ba:1b:6c:f3:
         80:96:50:fd:7e:3e:9f:03:f2:5a:61:5b:04:e0:7b:b8:be:6c:
         78:65:d7:9d:e9:e8:7d:82:05:7b:32:d7:e6:e7:c9:e5:13:f5:
         c2:ad:07:a2:21:a2:e7:e3:6a:b6:e1:45:bb:47:23:a3:b1:b1:
         bf:3f:d9:92:92:05:57:28:7d:a1:39:09:80:28:82:39:13:b0:
         64:f8:5c:ba:85:7c:3a:46:6d:47:2e:16:47:06:ae:65:88:80:
         3b:f8:1d:02:1e:c6:b3:c5:39:f9:0b:2a:e8:d8:09:4a:05:38:
         54:b1:76:0a:8d:38:88:28:e5:04:5d:cd:b4:3d:fd:e9:f6:c4:
         c2:d3:3b:76:4b:d1:7e:db:e2:82:b2:6d:9c:f5:5a:0f:46:ea:
         4f:3e:bd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:54 2026 by rpki-client