Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
File:                     18thbM_g6Ga0J8CkXvQYGwmB5jE.mft (raw, json)
Hash identifier:          EyIG0dcKXyV9Gze8upUFmklfArOMrbIt7anYEPPb4Tc=
Subject key identifier:   DB:A7:3D:22:19:44:46:FB:BA:12:2C:D5:A2:9B:21:CB:CB:B4:C1:C2
Authority key identifier: D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31
Certificate issuer:       /CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
Certificate serial:       019FA3AA9966418043248F29053102ECE301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
Manifest number:          146F
Signing time:             Mon 27 Jul 2026 13:01:34 +0000
Manifest this update:     Mon 27 Jul 2026 13:01:34 +0000
Manifest next update:     Tue 28 Jul 2026 13:01:34 +0000
Files and hashes:         1: 18thbM_g6Ga0J8CkXvQYGwmB5jE.crl (hash: HOlQeWRYIU+CDwZT9s6FXMk58nyDRAIynr8Cbj7e32U=)
                          2: 3hk9XqmHqY58TN36FPRIol4THYs.roa (hash: UsqCD7ME+ILVSkGV9DubbwCdNyqKHd5/MbEJEt8ZDw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:aa:99:66:41:80:43:24:8f:29:05:31:02:ec:e3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
        Validity
            Not Before: Jul 27 13:01:34 2026 GMT
            Not After : Jul 28 13:01:34 2026 GMT
        Subject: CN=dba73d22194446fbba122cd5a29b21cbcbb4c1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:55:cc:8e:2b:b5:f3:e4:23:4e:01:ab:69:d7:
                    1b:81:c9:3b:2c:69:ff:b8:43:43:b3:91:04:02:3d:
                    f9:fc:e6:84:6e:15:6b:9d:7a:ad:b9:0e:9a:7e:71:
                    8a:a4:e7:3e:ec:84:1b:3e:12:3a:77:ce:f3:f4:ed:
                    20:33:04:ee:65:47:6b:77:0c:85:69:b3:fa:19:c0:
                    2b:8b:81:27:4f:e1:ae:99:0d:23:13:80:aa:f5:49:
                    1c:a2:4c:aa:60:65:46:a6:71:39:a0:c1:0d:bd:3f:
                    96:29:e0:43:39:76:ca:7b:b2:25:60:dc:00:4e:db:
                    f3:b1:31:48:65:0c:03:6d:2a:e0:d9:ab:66:40:c7:
                    81:2d:c2:1f:51:a8:f1:15:42:fc:77:b6:c6:77:77:
                    5d:5d:d1:7a:05:0e:28:10:3f:56:b0:06:69:02:ae:
                    11:4a:43:8c:68:9c:da:50:51:49:f5:74:c5:41:94:
                    1b:8b:b6:bd:f6:dd:32:16:ec:ba:5a:1d:38:57:7a:
                    84:ac:59:f8:93:c2:a0:bf:b9:d5:ec:13:1c:64:6a:
                    9b:6e:77:53:83:45:21:98:70:7b:18:ff:50:63:76:
                    f2:37:66:b7:c1:26:47:9d:70:b5:61:ba:57:18:f1:
                    1c:3b:c7:73:96:f6:6a:1f:38:b2:f5:a0:f2:16:50:
                    54:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A7:3D:22:19:44:46:FB:BA:12:2C:D5:A2:9B:21:CB:CB:B4:C1:C2
            X509v3 Authority Key Identifier:
                keyid:D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f1:26:a0:8e:a9:32:a9:4d:b3:09:1a:57:b6:8a:84:f0:61:
         e7:64:3b:67:53:4f:c7:4c:61:65:89:42:c4:2b:74:e7:35:1b:
         1a:a9:68:b9:54:a7:ce:e5:4e:89:54:a7:14:79:bf:58:f9:8b:
         d7:c2:a8:8b:0e:13:89:94:c8:33:bc:10:71:82:0e:2d:6a:ba:
         6b:d7:83:8a:81:9e:9d:f2:62:03:84:33:96:74:88:b2:15:75:
         42:4f:8f:21:f6:de:c8:4e:66:0e:47:90:b8:16:00:1a:ef:fa:
         02:19:9f:bf:0f:f9:4b:03:7b:a0:d0:31:89:94:fc:1b:17:9b:
         84:c8:6e:c8:8e:d1:e1:a2:29:67:52:e2:98:7a:4b:88:65:44:
         45:eb:d1:47:3e:1f:00:ad:1d:5e:dc:ed:2b:97:bb:6c:cb:9e:
         de:ad:43:c2:cb:62:61:da:61:fd:96:93:47:2d:94:ab:a5:94:
         e7:ba:69:5f:c8:8c:fb:88:73:cf:36:c2:d9:9c:e1:33:20:b9:
         7c:66:b4:ef:b1:06:54:42:aa:f3:d5:18:86:fc:42:3c:24:f8:
         7f:aa:e9:e1:dd:7b:14:66:d4:a9:bd:5b:19:f1:24:d0:30:fd:
         b9:28:1a:15:2d:4f:03:e3:09:4e:73:e2:7b:d5:d0:d8:bc:ac:
         2b:ae:0e:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jqplmQYBDJI8pBTEC7OMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2I2MTZjY2ZlMGU4NjZiNDI3YzBhNDVlZjQxODFiMDk4
MWU2MzEwHhcNMjYwNzI3MTMwMTM0WhcNMjYwNzI4MTMwMTM0WjAzMTEwLwYDVQQD
EyhkYmE3M2QyMjE5NDQ0NmZiYmExMjJjZDVhMjliMjFjYmNiYjRjMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1XMjiu18+QjTgGradcbgck7LGn/
uENDs5EEAj35/OaEbhVrnXqtuQ6afnGKpOc+7IQbPhI6d87z9O0gMwTuZUdrdwyF
abP6GcAri4EnT+GumQ0jE4Cq9UkcokyqYGVGpnE5oMENvT+WKeBDOXbKe7IlYNwA
TtvzsTFIZQwDbSrg2atmQMeBLcIfUajxFUL8d7bGd3ddXdF6BQ4oED9WsAZpAq4R
SkOMaJzaUFFJ9XTFQZQbi7a99t0yFuy6Wh04V3qErFn4k8Kgv7nV7BMcZGqbbndT
g0UhmHB7GP9QY3byN2a3wSZHnXC1YbpXGPEcO8dzlvZqHziy9aDyFlBUvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNunPSIZREb7uhIs1aKbIcvLtMHCMB8GA1UdIwQY
MBaAFNfLYWzP4OhmtCfApF70GBsJgeYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83Y2UzZGMtNjhkYi00NWJiLThlNTct
M2U2MTk4YTUxMmUwLzEvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC83Y2UzZGMtNjhkYi00NWJiLThlNTctM2U2MTk4YTUxMmUw
LzEvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvEmoI6p
MqlNswkaV7aKhPBh52Q7Z1NPx0xhZYlCxCt05zUbGqlouVSnzuVOiVSnFHm/WPmL
18Koiw4TiZTIM7wQcYIOLWq6a9eDioGenfJiA4QzlnSIshV1Qk+PIfbeyE5mDkeQ
uBYAGu/6Ahmfvw/5SwN7oNAxiZT8GxebhMhuyI7R4aIpZ1LimHpLiGVERevRRz4f
AK0dXtztK5e7bMue3q1DwstiYdph/ZaTRy2Uq6WU57ppX8iM+4hzzzbC2ZzhMyC5
fGa077EGVEKq89UYhvxCPCT4f6rp4d17FGbUqb1bGfEk0DD9uSgaFS1PA+MJTnPi
e9XQ2LysK64OTQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 18:18:29 2026 by rpki-client