Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File:                     18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier:          d3u4X1N6OHIOnrHBeISLAFR61yZnTKzGLIZRp4IUkhE=
Subject key identifier:   69:2F:DD:18:DF:D6:E3:2E:3D:A7:A5:E9:4C:5C:5F:1C:9A:3B:5F:41
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer:       /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial:       019E30E019D1B8CC9EEE45FE7B80B644FB9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number:          190E
Signing time:             Sat 16 May 2026 13:00:53 +0000
Manifest this update:     Sat 16 May 2026 13:00:53 +0000
Manifest next update:     Sun 17 May 2026 13:00:53 +0000
Files and hashes:         1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: TgU0fzNWSC7Q1oGpa+nPG1IQ7m0AjM01SCJySkp3i+8=)
                          2: 5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa (hash: esrOMmA+0Y4Owzn/Tp8QtyowPBDFA761U7pC1R7xerw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:19:d1:b8:cc:9e:ee:45:fe:7b:80:b6:44:fb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
        Validity
            Not Before: May 16 13:00:53 2026 GMT
            Not After : May 17 13:00:53 2026 GMT
        Subject: CN=692fdd18dfd6e32e3da7a5e94c5c5f1c9a3b5f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:79:1b:09:ed:34:fa:95:d3:2b:c2:78:65:
                    e9:de:39:82:90:21:49:84:ef:26:a2:7d:51:14:32:
                    57:e7:8c:18:3b:23:9d:e2:06:51:c8:63:05:df:43:
                    df:09:ce:03:21:7c:04:b8:84:43:84:17:4e:ba:d4:
                    5f:a6:01:21:fc:40:a6:80:f9:93:7b:37:85:5e:28:
                    4c:3b:25:d8:5c:f5:66:63:0c:9f:7f:2c:e2:7e:df:
                    4a:dd:57:2e:dd:f4:59:b3:2a:b1:85:19:b7:85:a1:
                    54:b0:7e:0e:38:88:05:80:3d:c4:00:08:5a:2c:cc:
                    90:10:91:ee:27:58:88:eb:52:32:b5:21:31:99:c2:
                    3d:b5:54:a8:64:71:9e:87:ee:1f:0e:80:aa:e3:53:
                    94:c6:42:3e:ee:e5:3d:59:89:fa:66:29:cf:f6:dc:
                    d1:57:34:85:75:74:44:08:1e:d4:18:d9:aa:d9:85:
                    90:d8:f4:5b:81:c9:32:80:51:a2:20:7f:cb:c1:9c:
                    62:af:43:81:d2:bf:63:76:7b:7a:45:c9:e7:96:66:
                    0f:74:9b:1a:52:52:d7:da:da:70:54:d6:f1:bb:d8:
                    7e:41:ba:01:b3:15:a7:7d:00:ed:53:c2:5a:f2:e8:
                    c7:f6:16:1d:1a:62:1f:21:ae:d3:ad:6e:f9:ef:4c:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2F:DD:18:DF:D6:E3:2E:3D:A7:A5:E9:4C:5C:5F:1C:9A:3B:5F:41
            X509v3 Authority Key Identifier:
                keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:43:1a:a1:ed:da:47:29:bb:88:3e:b1:67:b0:b6:f7:cd:39:
         3f:97:f1:95:c3:ac:31:09:52:fb:23:fb:1a:b5:1d:6c:26:96:
         a7:96:6b:21:f9:22:d2:46:15:bb:72:dd:8d:c4:7d:cf:6c:cc:
         17:ce:d9:df:7a:6f:5a:79:9f:24:b9:be:9d:fa:76:87:8a:4a:
         8c:78:2b:40:f1:11:a9:20:0c:14:88:09:81:72:49:a5:d0:0d:
         a5:00:4f:58:54:6f:36:26:fd:8c:95:08:7a:21:f2:c4:6d:05:
         77:fd:79:d7:e9:a6:59:56:f4:69:25:92:a7:c8:61:0e:39:e1:
         2a:9a:15:69:9d:e3:b4:b3:eb:b4:50:98:d7:bf:fd:91:1d:a1:
         00:de:c6:7a:be:ae:5f:ab:0e:f3:f1:05:d9:15:e4:c8:32:17:
         f9:22:88:22:12:e8:3e:44:a6:0b:12:f5:ae:79:72:a6:0f:52:
         da:9c:91:0a:9c:c7:dc:c1:62:7f:d8:c3:06:2b:c2:4d:5e:a4:
         fe:dd:75:8d:4f:9e:8d:e6:57:ec:30:75:5c:f9:dc:52:6b:74:
         d9:21:ff:26:a9:04:76:8d:b5:3a:aa:f1:7a:e8:dd:e7:3a:a9:
         63:8a:a4:0a:de:67:99:0a:67:b4:d9:b9:16:0e:d6:05:01:3b:
         c3:22:6c:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4BnRuMye7kX+e4C2RPucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YzE0ODc2MWI2NzAwNTMyOWFhODkxMzVkMzVhZDIzNTE3
M2JjNDgwHhcNMjYwNTE2MTMwMDUzWhcNMjYwNTE3MTMwMDUzWjAzMTEwLwYDVQQD
Eyg2OTJmZGQxOGRmZDZlMzJlM2RhN2E1ZTk0YzVjNWYxYzlhM2I1ZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKt5GwntNPqV0yvCeGXp3jmCkCFJ
hO8mon1RFDJX54wYOyOd4gZRyGMF30PfCc4DIXwEuIRDhBdOutRfpgEh/ECmgPmT
ezeFXihMOyXYXPVmYwyffyzift9K3Vcu3fRZsyqxhRm3haFUsH4OOIgFgD3EAAha
LMyQEJHuJ1iI61IytSExmcI9tVSoZHGeh+4fDoCq41OUxkI+7uU9WYn6ZinP9tzR
VzSFdXRECB7UGNmq2YWQ2PRbgckygFGiIH/LwZxir0OB0r9jdnt6RcnnlmYPdJsa
UlLX2tpwVNbxu9h+QboBsxWnfQDtU8Ja8ujH9hYdGmIfIa7TrW7570zUywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkv3Rjf1uMuPael6UxcXxyaO19BMB8GA1UdIwQY
MBaAFNfBSHYbZwBTKaqJE101rSNRc7xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lOGY2OWEtMTczYS00NDc1LWE2ZmIt
MDExNjUwZmJkNGM0LzEvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9lOGY2OWEtMTczYS00NDc1LWE2ZmItMDExNjUwZmJkNGM0
LzEvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0Maoe3a
Rym7iD6xZ7C29805P5fxlcOsMQlS+yP7GrUdbCaWp5ZrIfki0kYVu3LdjcR9z2zM
F87Z33pvWnmfJLm+nfp2h4pKjHgrQPERqSAMFIgJgXJJpdANpQBPWFRvNib9jJUI
eiHyxG0Fd/151+mmWVb0aSWSp8hhDjnhKpoVaZ3jtLPrtFCY17/9kR2hAN7Ger6u
X6sO8/EF2RXkyDIX+SKIIhLoPkSmCxL1rnlypg9S2pyRCpzH3MFif9jDBivCTV6k
/t11jU+ejeZX7DB1XPncUmt02SH/JqkEdo21Oqrxeujd5zqpY4qkCt5nmQpntNm5
Fg7WBQE7wyJsog==
-----END CERTIFICATE-----
Generated at Sat May 16 18:41:49 2026 by rpki-client