Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
File:                     18thbM_g6Ga0J8CkXvQYGwmB5jE.mft (raw, json)
Hash identifier:          rbtqqEPFlRhtTHFcH4R+T65uwn+MADKHu8dkbLpsEng=
Subject key identifier:   4B:78:0D:9D:29:52:5C:7D:00:8E:93:0E:B9:C0:2C:60:37:FF:79:11
Authority key identifier: D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31
Certificate issuer:       /CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
Certificate serial:       01A18C41A1614CC12B03D49A7496F6060934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
Manifest number:          156C
Signing time:             Fri 30 Oct 2026 10:01:13 +0000
Manifest this update:     Fri 30 Oct 2026 10:01:13 +0000
Manifest next update:     Sat 31 Oct 2026 10:01:13 +0000
Files and hashes:         1: 18thbM_g6Ga0J8CkXvQYGwmB5jE.crl (hash: Lq5wb0j4xcD8nawwfxiOTjDJ5YhmS89XKteu3VYi8FI=)
                          2: 3hk9XqmHqY58TN36FPRIol4THYs.roa (hash: UsqCD7ME+ILVSkGV9DubbwCdNyqKHd5/MbEJEt8ZDw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8c:41:a1:61:4c:c1:2b:03:d4:9a:74:96:f6:06:09:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
        Validity
            Not Before: Oct 30 10:01:13 2026 GMT
            Not After : Oct 31 10:01:13 2026 GMT
        Subject: CN=4b780d9d29525c7d008e930eb9c02c6037ff7911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:6b:45:e4:8c:ec:a7:47:57:80:1e:dd:61:
                    59:26:03:12:30:69:97:c6:1f:f1:2b:4a:7d:41:98:
                    8a:c5:43:b6:9a:9c:51:f1:f3:71:89:63:b1:6e:04:
                    1f:04:47:2e:6e:4b:16:b9:9c:64:9b:59:62:0c:3d:
                    93:79:7c:1f:c1:17:82:4c:08:bc:4d:9e:d1:58:c9:
                    3e:ee:5d:46:e2:bc:ef:85:7e:07:23:e5:63:a5:7e:
                    2b:0c:e8:25:b6:a0:2a:05:6f:c7:0e:ef:4a:26:cb:
                    39:dc:07:8f:bf:c6:b7:1e:9f:0b:05:0f:32:d8:6e:
                    b1:4f:91:c0:91:f8:a2:ba:f9:43:85:d9:27:53:c9:
                    31:df:db:75:8a:92:c7:90:30:25:28:6a:61:0c:94:
                    10:71:34:87:0a:65:3a:40:e3:9b:6e:1d:1f:fa:8b:
                    25:5b:a1:c3:20:88:10:51:fb:20:82:31:7c:7a:c9:
                    52:4c:0a:9d:d8:3a:30:09:2d:f5:2f:1a:30:d6:fe:
                    26:ba:9f:8f:71:04:63:2b:13:11:78:4c:4e:3d:3e:
                    29:d6:39:bd:78:3c:fa:6c:75:a7:35:56:da:9f:91:
                    99:3f:a9:21:f8:7f:ea:16:7d:e7:c1:5e:fc:b5:2a:
                    7e:24:9e:b1:09:57:0d:56:41:83:fd:ce:0f:c3:d5:
                    01:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:78:0D:9D:29:52:5C:7D:00:8E:93:0E:B9:C0:2C:60:37:FF:79:11
            X509v3 Authority Key Identifier:
                keyid:D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:85:08:9a:f7:df:82:0b:d4:68:6e:6a:e7:05:51:d0:5f:61:
         22:7e:df:ee:a0:65:09:42:f3:e0:6d:f8:99:b5:c9:be:26:fe:
         51:1f:24:a9:34:f8:a4:27:8e:a6:e5:b0:c5:34:f2:39:1e:c8:
         30:66:62:0a:0e:6e:4b:37:8f:34:bb:ed:1e:db:51:cb:27:2e:
         ca:5c:ac:1e:b4:36:f5:a4:5a:60:53:d4:84:85:b7:38:2c:84:
         05:2c:db:4f:94:5c:6f:a6:29:13:2f:38:d0:7f:a2:ca:e9:3f:
         fd:d7:ee:fa:3d:f5:f1:d1:61:94:27:aa:56:a4:50:1c:12:c9:
         02:7f:e1:a7:41:e1:98:01:71:01:c6:cf:81:8a:c9:08:6c:5a:
         ce:4c:bf:79:fb:9f:60:47:78:af:18:a5:a9:ff:36:c8:f4:50:
         18:2b:ec:48:db:7a:7e:7f:2a:93:25:20:96:c2:2e:35:85:18:
         8c:cc:8b:81:48:02:8b:02:61:6d:93:15:1f:0f:cd:26:85:51:
         34:7b:cf:9d:9e:2e:ed:3d:f3:8e:d0:b2:e0:8e:68:11:e9:ee:
         2a:52:98:d8:98:ac:7f:f7:a8:1a:f0:ba:ee:95:20:cf:e9:c6:
         9d:8a:e9:4e:cf:e5:4a:e5:a6:85:74:47:7a:8e:86:75:a8:1e:
         24:da:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:09:58 2026 by rpki-client