Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File:                     18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier:          kKe1wi2kuLO48bY/xNf0CNmW4aG5KrzRyFnEexDIQj4=
Subject key identifier:   DB:39:04:33:9C:09:60:3D:AA:8C:08:8B:05:19:83:B4:5C:92:C5:04
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer:       /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial:       01A13E26B0B42B3182E702420E5A06AEAAB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number:          1AA1
Signing time:             Thu 15 Oct 2026 06:01:25 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:25 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:25 +0000
Files and hashes:         1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: 4Rtu48dUHCrrfVAxlxAaK6HoeyYsfXqN5uyxUMqa3oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:b0:b4:2b:31:82:e7:02:42:0e:5a:06:ae:aa:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
        Validity
            Not Before: Oct 15 06:01:25 2026 GMT
            Not After : Oct 16 06:01:25 2026 GMT
        Subject: CN=db3904339c09603daa8c088b051983b45c92c504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:bf:08:af:e1:87:0c:7f:19:84:3e:21:56:
                    83:39:ce:a1:99:ef:f7:03:d6:d9:91:21:69:82:b0:
                    75:d6:51:32:c7:0d:d8:fc:08:54:3d:7d:d8:d0:62:
                    5a:21:0d:e9:59:26:8f:36:06:c0:de:2e:49:d3:37:
                    40:f9:bb:b0:93:54:eb:fc:7e:a0:75:2a:e8:bb:94:
                    0b:48:fc:18:48:a4:70:35:72:0c:e0:69:34:ce:02:
                    4d:d1:30:4e:f5:af:21:7f:d2:d2:1d:61:c6:da:46:
                    af:b6:08:d8:ae:4b:b8:31:fa:cd:cd:0e:02:75:b8:
                    d9:af:0a:d3:29:37:f2:a7:16:1c:1e:1e:b9:7e:33:
                    59:51:f1:f5:29:4f:7e:1d:41:95:3e:12:95:18:3d:
                    43:32:36:ac:00:fb:a8:dd:6a:11:27:a8:2f:6c:6e:
                    e9:87:bd:32:b9:c1:07:b2:14:5e:1c:27:53:55:6a:
                    6b:50:24:7b:c9:09:d9:f8:48:6c:1e:07:7c:fe:a5:
                    5d:d0:50:48:e8:01:30:8b:c0:f1:dc:15:21:d1:e4:
                    e2:b1:6d:1d:d3:00:cd:0b:f1:52:e8:d7:ee:9a:60:
                    ed:12:87:e9:c4:81:1d:c6:58:95:a9:31:3f:06:38:
                    24:fa:42:7e:89:d2:d6:4f:31:79:52:ee:fb:48:95:
                    3c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:39:04:33:9C:09:60:3D:AA:8C:08:8B:05:19:83:B4:5C:92:C5:04
            X509v3 Authority Key Identifier:
                keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:23:83:6d:fc:43:ee:9d:de:a1:a3:c1:62:c7:57:2b:c6:ed:
         b5:1d:ef:57:e6:1c:b2:87:40:77:f6:a6:fb:63:0e:86:26:40:
         05:c7:e1:51:a1:b4:d2:5e:1c:db:bb:02:5e:23:22:a3:e2:63:
         8b:9d:6f:3b:73:6a:28:ef:eb:6d:bc:26:cc:5c:cb:2a:f0:d4:
         55:6a:08:57:90:19:09:64:a6:19:38:40:12:96:1d:1b:c9:ba:
         56:6c:b7:24:eb:c8:dc:9f:4f:53:1b:15:ea:89:d7:a2:0d:fa:
         7f:68:53:ae:89:a5:60:c4:54:dc:ef:a2:4a:53:c0:af:8e:25:
         1d:ee:a9:7c:a0:6d:bb:ed:d5:4c:7f:82:ea:5f:87:f2:0e:70:
         7f:38:e4:6d:a4:3f:6d:2f:3b:fb:97:ae:2e:ba:83:52:cd:38:
         a2:02:31:f9:83:3c:62:55:be:33:a7:65:f1:e9:25:a7:90:85:
         0c:b3:02:1a:e7:c9:1f:06:e7:64:5a:ee:4a:71:79:94:60:ac:
         dd:36:7d:87:17:71:de:c1:72:30:95:42:ae:ff:17:cb:ee:88:
         50:cf:97:5d:6e:52:f0:ff:49:59:6a:44:74:57:e2:05:82:25:
         e6:ea:fc:66:55:bf:65:68:9b:16:e8:f0:81:22:b0:f5:d8:8c:
         b6:83:8c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:11 2026 by rpki-client