Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
File:                     18thbM_g6Ga0J8CkXvQYGwmB5jE.mft (raw, json)
Hash identifier:          ejPXGqigva1vJBl+913EGPcSMPV98ZOcrjU+84EF9oQ=
Subject key identifier:   FF:90:E7:1D:CC:DE:36:77:A8:29:84:BD:EE:4C:19:81:B1:9C:48:8C
Authority key identifier: D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31
Certificate issuer:       /CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
Certificate serial:       01A08D564215B26E671425320426A5E82059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
Manifest number:          14E8
Signing time:             Thu 10 Sep 2026 22:00:35 +0000
Manifest this update:     Thu 10 Sep 2026 22:00:35 +0000
Manifest next update:     Fri 11 Sep 2026 22:00:35 +0000
Files and hashes:         1: 18thbM_g6Ga0J8CkXvQYGwmB5jE.crl (hash: y+lq6mpFEbQTh7yxELPbxhnQImd2DvKaInZAjjG3g/w=)
                          2: 3hk9XqmHqY58TN36FPRIol4THYs.roa (hash: UsqCD7ME+ILVSkGV9DubbwCdNyqKHd5/MbEJEt8ZDw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:56:42:15:b2:6e:67:14:25:32:04:26:a5:e8:20:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
        Validity
            Not Before: Sep 10 22:00:35 2026 GMT
            Not After : Sep 11 22:00:35 2026 GMT
        Subject: CN=ff90e71dccde3677a82984bdee4c1981b19c488c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a3:f5:3d:60:d8:af:ef:1d:09:1b:3b:4b:3f:
                    1c:36:d1:fe:67:c5:fe:c2:cf:df:05:bd:c1:7c:f2:
                    f3:1c:66:73:7b:3e:36:b8:46:87:24:da:91:65:34:
                    00:6a:47:8a:84:04:f7:43:95:a4:cd:aa:52:1a:0f:
                    fd:b9:68:0b:fe:ac:f9:7b:1a:fc:13:29:8e:4e:a8:
                    d2:fe:f5:34:a3:10:c8:b2:09:30:15:c6:60:b0:04:
                    da:bf:59:65:9c:d1:3d:79:0f:f4:da:21:2b:e6:f2:
                    10:d3:70:3a:23:7d:24:c5:77:96:ee:ec:c5:73:1f:
                    a0:e5:67:8c:bf:e1:66:9d:8c:5d:b0:d1:90:5e:8f:
                    48:a3:74:e5:65:58:af:e2:fc:bb:e2:8e:98:e4:4f:
                    bc:8c:fc:24:90:93:c3:3d:e7:f5:3f:ef:77:b8:a0:
                    02:b9:c8:8c:7b:46:be:38:2b:ff:0c:94:7f:45:87:
                    95:52:8e:59:ac:c3:33:eb:69:9f:96:49:8a:d5:9e:
                    b6:b5:51:4c:9c:0a:26:43:6a:e6:99:10:fe:96:d8:
                    a7:77:d8:9f:73:62:36:c5:41:57:13:f9:4b:20:f7:
                    f5:7f:fc:89:10:3a:94:d0:90:30:74:b3:1d:89:ef:
                    d3:18:4f:81:f1:18:06:ef:13:ba:5b:24:ab:34:61:
                    7b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:90:E7:1D:CC:DE:36:77:A8:29:84:BD:EE:4C:19:81:B1:9C:48:8C
            X509v3 Authority Key Identifier:
                keyid:D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:27:aa:a0:95:20:d5:8b:b3:4b:4c:3d:e4:f0:04:ca:74:91:
         7d:56:5f:0a:c5:22:93:d5:56:c8:fe:ab:b3:7f:0c:ac:ea:b1:
         8f:14:e6:4d:c5:05:9d:29:db:e3:13:48:f7:4e:8d:6e:48:f4:
         60:2c:fa:c3:33:1a:28:f8:49:79:84:13:4c:98:50:08:ec:0c:
         4c:df:a5:ff:01:25:a7:06:1c:1f:72:38:a4:ae:4d:b1:38:40:
         36:58:0f:92:e9:b1:b5:fb:69:2f:37:0b:53:3e:cb:3a:57:bd:
         96:c3:b7:65:e2:5a:c8:69:5c:a8:7e:67:11:b2:ba:12:ef:f7:
         77:a9:af:bc:2b:60:80:af:da:b1:a6:7b:91:5a:56:60:97:bd:
         34:c1:53:03:57:f8:13:ba:21:70:d2:f9:82:7b:f5:9f:fa:3d:
         a8:21:e9:fe:ab:ff:2c:4a:0a:a8:9e:79:ca:86:8e:85:bf:1e:
         55:6f:33:78:e3:3a:62:75:e9:b3:f7:de:f6:e1:a7:f9:a6:21:
         0e:5a:90:52:34:0b:27:2a:13:d5:06:5a:1a:7e:fa:0d:23:86:
         dc:ce:e2:1e:85:33:3f:a2:ac:69:b2:84:0e:48:6a:fe:ad:5b:
         59:95:5b:68:44:62:7c:f5:c3:f4:3c:b0:7f:9e:a2:f5:6d:28:
         00:ae:e1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:24:09 2026 by rpki-client