Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File:                     18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier:          Jd65KNJLQxZmnkt2Thkb++I1mE2tevdMBLkfESH002E=
Subject key identifier:   25:C7:24:A8:26:61:E6:D6:FF:A3:D7:C5:FB:47:C5:1E:7C:94:C4:0E
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer:       /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial:       01A13FDE29E6BDF0C3D1302BB343F7608E8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number:          162E
Signing time:             Thu 15 Oct 2026 14:01:26 +0000
Manifest this update:     Thu 15 Oct 2026 14:01:26 +0000
Manifest next update:     Fri 16 Oct 2026 14:01:26 +0000
Files and hashes:         1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: Trx6bzLTbQtMkvEXLr2PUrm5aIxWels/9+QaeSIB8OA=)
                          2: 2CFiWjPHpaVJlZUTDr9i3ngvO-8.roa (hash: o6E4nUSkugq5sP9EdIqz6vNORtXVkV1RTL2nfUIeUVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:de:29:e6:bd:f0:c3:d1:30:2b:b3:43:f7:60:8e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
        Validity
            Not Before: Oct 15 14:01:26 2026 GMT
            Not After : Oct 16 14:01:26 2026 GMT
        Subject: CN=25c724a82661e6d6ffa3d7c5fb47c51e7c94c40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:b7:31:2d:6c:f1:a9:93:ee:5a:ac:b4:44:
                    cf:a3:a2:b6:b3:a8:d0:ba:ea:58:37:18:ef:7b:60:
                    f6:af:bc:dc:25:a1:28:2c:39:79:81:0b:a0:21:70:
                    f3:4d:b2:a6:f5:7d:ef:82:0d:3d:f9:72:75:ec:a3:
                    8d:7c:86:38:0c:d7:39:13:82:ae:27:3d:d3:78:1a:
                    3a:ef:3b:e0:8e:dc:e7:69:ae:52:6f:12:96:32:d6:
                    2b:84:8b:9f:60:c8:6e:dd:a1:66:93:8a:a3:b6:b0:
                    07:8f:44:2d:bb:a7:76:1b:c1:aa:29:c1:fc:fd:bc:
                    fd:7e:10:57:bf:46:1d:5d:c8:38:a3:aa:e4:36:c8:
                    47:e1:63:69:9a:7d:13:17:29:6b:fd:b5:35:d3:1e:
                    9a:da:77:92:db:52:59:b4:0e:e7:20:ef:2a:89:df:
                    fa:fc:9f:e3:27:47:f7:17:82:b3:24:ec:d8:f7:6c:
                    8d:ae:ad:4d:d2:b1:eb:71:c3:54:c4:53:96:54:0f:
                    eb:2e:90:79:f6:85:72:ed:c8:5c:d3:31:42:e7:6e:
                    83:37:bb:0a:a8:05:24:16:13:0a:7f:45:73:63:a0:
                    01:dc:47:bf:db:22:b7:34:14:e6:12:22:a3:26:95:
                    9a:c5:ec:4b:e4:c5:b1:b0:21:f5:94:ae:d9:16:c9:
                    9f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C7:24:A8:26:61:E6:D6:FF:A3:D7:C5:FB:47:C5:1E:7C:94:C4:0E
            X509v3 Authority Key Identifier:
                keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:21:fb:06:51:df:f9:a5:0b:3e:dc:ec:66:63:35:ce:20:95:
         43:f4:5b:e0:69:4b:50:9e:f1:2b:b0:89:a1:58:8a:ef:7b:92:
         56:9b:c0:d3:83:8a:76:60:6f:ce:0a:e6:5e:c8:93:7f:5a:b1:
         81:ea:63:f0:51:a9:6a:8d:61:22:ea:34:bc:e7:d3:4c:77:5c:
         47:07:4c:5b:17:75:79:6a:f1:8a:b8:fa:3d:87:fd:b3:51:6a:
         62:8f:f7:92:f0:42:03:2c:c9:23:ca:6a:f0:c4:0c:83:bd:92:
         7b:09:89:51:f1:d7:03:75:29:9a:76:be:b6:9f:54:8e:ea:f0:
         3a:c3:ae:51:b2:77:7f:76:0d:02:cd:f9:31:cf:3e:0c:9f:db:
         a3:71:7e:14:ec:de:71:0e:3b:88:a2:29:76:ba:98:ba:ee:32:
         0d:23:ac:ad:59:a0:4c:16:87:eb:b9:78:5f:28:04:ef:0f:16:
         f3:17:03:13:3c:75:98:92:ff:fc:a4:ad:2c:9d:0d:5c:87:9d:
         93:c0:43:7e:fa:40:7d:6d:7a:64:b6:54:6a:2e:7e:df:84:56:
         6f:34:e8:46:3f:7c:c9:e9:35:8f:82:8e:bc:d3:af:51:dc:26:
         36:53:cd:10:b4:05:d2:fc:26:44:c2:96:0a:4e:8d:62:16:7a:
         37:34:64:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:06 2026 by rpki-client