Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File:                     18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier:          2H8W9G5wMojzle/GFcyBja3Z5uy1gEPElXd+hfoV2Io=
Subject key identifier:   E1:95:AC:EE:84:B9:8F:83:85:17:70:D1:C0:5E:BA:A2:0D:51:21:2A
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer:       /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial:       01A16947755CAFC4A7FE74D784385905EC11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number:          11E0
Signing time:             Fri 23 Oct 2026 15:00:53 +0000
Manifest this update:     Fri 23 Oct 2026 15:00:53 +0000
Manifest next update:     Sat 24 Oct 2026 15:00:53 +0000
Files and hashes:         1: 1-xQpxgbsAccfNR_RPwpELLBga3Q.roa (hash: O9JFLbnCzJwjSJV7ChA49hvf5EARsdHIdJti0Ql7a20=)
                          2: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: uNghhNXEAVtsoho7Rpd3TzpDZ/TyvNCxgmBq6Ifc5do=)
                          3: 7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa (hash: zGb9a33Qnpr4WzIXt8XY3dXadxDHjRQNTlqjB3b8R/g=)
                          4: tVmfZeWdVMnwiX3UKcOJh8Hr-Uc.roa (hash: /3YflutobnpMb4cvv5YYiqUDPoXca6VxOl9t+YmVV6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 15:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:69:47:75:5c:af:c4:a7:fe:74:d7:84:38:59:05:ec:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
        Validity
            Not Before: Oct 23 15:00:53 2026 GMT
            Not After : Oct 24 15:00:53 2026 GMT
        Subject: CN=e195acee84b98f83851770d1c05ebaa20d51212a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:2a:b2:58:51:70:63:4b:d4:f8:f4:7f:a0:
                    ea:64:a7:92:a2:9b:15:a2:ac:72:56:81:a8:27:3b:
                    b4:23:92:80:6f:cc:a3:a6:d0:6d:ed:c0:03:94:37:
                    9b:ac:ae:11:67:26:7e:9d:58:f8:72:d9:70:f3:54:
                    9f:0f:1f:c9:aa:3b:a3:12:fe:af:f9:a8:05:33:bd:
                    76:1e:0a:35:83:8c:c1:44:df:89:7d:b0:35:c6:22:
                    3a:cc:3a:31:cb:45:66:42:df:5b:2b:77:00:67:8d:
                    95:cb:11:53:a3:61:61:3f:c8:d3:72:2e:7c:83:a1:
                    17:cb:cd:56:e6:c0:6d:08:4b:db:84:0a:95:76:d6:
                    3c:56:d1:a0:54:a1:a9:f7:a4:cf:d7:51:62:25:f2:
                    80:e1:20:aa:69:c7:11:0a:07:a4:af:5e:84:6d:77:
                    4e:d9:60:f4:3b:e8:6d:25:a4:73:68:9c:29:63:19:
                    94:76:46:d7:90:0f:89:3c:ee:ca:37:59:0f:af:f4:
                    64:a1:85:bb:b7:f9:52:3b:f7:53:b2:c2:dc:92:44:
                    73:b7:65:dd:b6:e6:66:b4:d4:ce:d7:a0:46:c6:ea:
                    1b:02:f7:18:06:78:78:50:58:af:27:e5:37:f7:38:
                    7e:0f:e5:af:62:13:28:4e:7b:47:08:0a:f1:87:3c:
                    ce:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:95:AC:EE:84:B9:8F:83:85:17:70:D1:C0:5E:BA:A2:0D:51:21:2A
            X509v3 Authority Key Identifier:
                keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:69:d3:9c:e4:f9:0d:41:50:cc:54:37:f5:f3:38:07:9f:a4:
         e5:07:a7:b1:71:ff:eb:23:ca:0d:4f:4e:90:1c:6e:e9:62:a4:
         54:8a:9b:89:c0:0e:e4:93:db:11:61:3d:52:8a:1f:a6:30:38:
         ec:67:5b:a5:07:88:18:39:8d:2d:d9:27:34:2d:0b:d8:cd:ef:
         b4:a9:28:9e:17:08:5e:90:16:60:f4:c7:d3:6b:97:65:f1:d3:
         1b:f7:bb:51:cd:93:d8:14:a8:10:c8:1f:88:76:fd:9b:b8:47:
         ba:6a:01:6b:82:65:cb:7a:c3:7a:2a:74:9f:f0:0e:aa:70:9e:
         a5:95:62:c5:f0:19:c2:fc:ce:a6:06:5c:f1:d3:5f:b7:a0:77:
         df:d1:71:12:43:bd:7c:59:ac:4e:07:00:29:a7:2f:6e:65:94:
         ea:c2:a4:0f:2b:d1:fe:e6:f2:94:e4:16:e3:26:02:43:ab:0a:
         eb:db:60:9b:a7:af:2b:e1:60:8a:37:28:59:c3:71:09:c7:f8:
         21:1e:c1:bc:ae:02:86:a7:ab:eb:4a:2c:0f:22:6f:9a:95:bf:
         19:e4:5d:cb:64:ba:a5:e2:ca:e0:c8:d1:27:31:ad:a2:dc:a6:
         15:87:d6:04:8f:65:6f:81:2f:a4:a5:6e:12:a5:db:f3:0a:43:
         d8:37:92:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:31:51 2026 by rpki-client