Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File:                     18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier:          tp3c0QRpieIAX5ZritdX2Y29ZHQAit6USrZJC/zvny8=
Subject key identifier:   7E:2F:1E:74:BD:8A:C6:39:E4:45:07:9D:2B:C7:37:72:11:53:34:40
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer:       /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial:       019D38D3CC80AB750BE0E0300980E7525BF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 09:01:37 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:37 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:37 +0000
Files and hashes:         1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: Ourqc0tjgjrx6LgfjeIprK0t4QeYBiJYX6hzEhbyb7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:cc:80:ab:75:0b:e0:e0:30:09:80:e7:52:5b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
        Validity
            Not Before: Mar 29 09:01:37 2026 GMT
            Not After : Mar 30 09:01:37 2026 GMT
        Subject: CN=7e2f1e74bd8ac639e445079d2bc7377211533440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5e:39:1e:ab:33:f0:16:6b:2a:8e:c0:2c:86:
                    80:ea:f5:f3:4d:2f:04:20:e5:ef:2d:e3:b3:7d:f2:
                    9d:44:e0:81:a4:8f:ec:b6:ea:51:60:4a:c7:7c:45:
                    34:c3:17:c3:da:73:bc:53:e2:ef:93:26:5c:f4:fc:
                    59:4f:a3:78:15:8a:cd:01:68:86:ab:31:c3:00:70:
                    0d:7f:73:4c:52:d0:fb:ae:71:42:b3:6b:2c:27:52:
                    cb:30:4c:00:82:0b:03:7e:d9:9c:e6:62:97:06:6d:
                    94:3d:ed:09:fe:90:aa:f9:ac:be:ea:27:08:aa:bc:
                    f4:9b:0f:a2:44:a1:b5:29:d7:4b:50:a2:b0:4f:fa:
                    b4:bf:92:7a:5b:3b:37:9e:6b:bb:ce:c4:83:39:f4:
                    56:03:dc:9b:17:76:a3:b0:21:c0:a2:bb:15:73:2d:
                    44:49:e9:b4:28:de:3d:7c:dd:f7:c4:2f:9f:00:33:
                    79:05:53:7e:63:0e:76:6b:4c:92:72:0c:12:d0:53:
                    ce:e5:a2:5a:cf:7e:58:93:09:c4:88:d6:c7:f8:56:
                    cc:8a:99:52:52:a5:e4:95:78:93:3f:85:dc:e9:2a:
                    24:2d:1c:e9:97:9a:6a:12:b5:2e:be:0d:38:c0:a3:
                    08:44:f1:d2:aa:3c:cc:e2:62:bd:64:61:b3:b7:bb:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2F:1E:74:BD:8A:C6:39:E4:45:07:9D:2B:C7:37:72:11:53:34:40
            X509v3 Authority Key Identifier:
                keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3f:59:86:12:b6:c2:14:f5:0a:af:23:26:b6:24:2e:40:53:
         ce:7b:44:71:87:98:24:b4:a1:01:02:6e:b7:4c:75:af:72:d8:
         36:a8:db:86:d7:a2:39:80:a0:ab:12:44:1d:99:d3:96:07:e4:
         90:61:b5:59:71:e4:92:75:f3:70:37:24:cc:69:c4:a1:0e:59:
         1c:17:a2:4c:b7:45:63:a2:96:b8:a5:74:51:6f:2a:a4:fb:7b:
         f4:e1:ef:70:24:2c:a4:ef:bf:b5:42:71:c7:f2:d2:b4:f7:3a:
         21:d4:b5:19:8b:c4:70:64:86:ce:64:08:5c:91:2f:d1:fe:8c:
         35:2c:e3:58:eb:ff:84:00:e0:9a:3a:d0:4a:a8:35:93:63:6d:
         2a:cf:7a:4c:e5:16:3f:88:08:b1:a8:5f:6d:c2:a8:b4:74:7e:
         c8:d6:65:5c:c2:dd:95:33:44:26:5b:f4:2d:96:85:ff:f1:15:
         78:56:53:49:a9:71:06:0c:27:a5:3d:24:a3:a4:21:a1:0f:9b:
         42:57:ef:d3:04:3e:ee:1a:38:2b:e8:05:e7:39:93:35:b6:a7:
         a4:b2:3d:39:4b:c7:14:6b:f5:42:58:59:a0:11:4c:f7:ec:25:
         c3:82:b4:3d:f8:2a:57:17:bc:eb:2f:55:5d:c3:d2:87:cd:ca:
         28:b4:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:38 2026 by rpki-client