Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
File:                     mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft (raw, json)
Hash identifier:          Z03oOyXLNRq5hnC+5AqaKiF/vGM+SWfw8grPkn9aAW4=
Subject key identifier:   4A:17:C0:10:83:97:66:6B:B9:25:F7:FF:12:BE:92:31:AC:B3:22:E3
Authority key identifier: 98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60
Certificate issuer:       /CN=983750f247069679b83eedfd7bd565ea46789a60
Certificate serial:       019F916CA437590AA987F6ED31167FA11F55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:43 +0000
Files and hashes:         1: P9PKZAt5djm7FdGsrSvgtxYkacg.roa (hash: ugWkvKLaNhrHSnXEVwNyBj9pWu4yB48C3daCoDS8DQk=)
                          2: mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl (hash: LaAXldb442ZxGv/mt62qxvEhLvmPvPKcVdLyajpkLG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:a4:37:59:0a:a9:87:f6:ed:31:16:7f:a1:1f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983750f247069679b83eedfd7bd565ea46789a60
        Validity
            Not Before: Jul 24 00:00:43 2026 GMT
            Not After : Jul 25 00:00:43 2026 GMT
        Subject: CN=4a17c0108397666bb925f7ff12be9231acb322e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fe:be:0e:a6:44:f6:b1:88:7d:60:a0:72:37:
                    0b:ea:f7:c3:ac:00:f6:c5:af:17:86:6b:0b:e9:54:
                    8e:40:59:90:bf:40:f8:fa:28:eb:12:c9:99:f7:41:
                    df:ee:a2:cd:5d:fe:ca:27:d2:e7:58:87:a2:02:ce:
                    7b:b4:bd:39:7d:01:3c:c0:14:65:fc:64:19:f3:58:
                    e7:75:61:f3:36:67:45:4f:38:65:e4:39:bf:63:98:
                    3d:85:9b:5f:11:71:2e:8e:8f:86:83:d5:05:b5:0d:
                    a4:26:39:ab:2f:c9:03:32:fb:f9:18:bb:d8:cc:6d:
                    a6:e0:a9:b3:b0:a8:a3:d5:8b:8b:be:4f:4e:9c:3f:
                    f1:23:c4:7f:60:c9:1a:d2:5e:ee:8d:38:8a:e0:56:
                    e5:d8:bb:dc:84:3a:b1:a0:f9:46:01:de:9a:e2:01:
                    90:1c:7f:f6:69:ea:a1:42:9e:78:5e:fb:3f:9d:ed:
                    7b:6e:cd:d7:73:82:19:e8:35:d3:5a:55:a7:ca:52:
                    f1:6c:ce:78:97:dc:a6:06:2e:bb:97:3c:33:b9:32:
                    88:24:b1:70:75:1c:0a:00:a0:0a:22:e7:5b:2b:52:
                    74:64:db:17:64:56:77:d0:d3:f5:4c:1f:b2:62:1e:
                    d7:c3:e3:91:4c:61:f6:74:9b:87:7b:e2:57:50:13:
                    93:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:17:C0:10:83:97:66:6B:B9:25:F7:FF:12:BE:92:31:AC:B3:22:E3
            X509v3 Authority Key Identifier:
                keyid:98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:3c:2a:51:97:de:50:0d:0a:1f:a1:10:03:ee:dd:be:9b:86:
         34:cd:6f:47:65:74:b2:3a:cc:94:ab:a7:10:53:93:9f:2a:08:
         74:b5:c8:4b:38:3b:ff:cf:ff:7c:71:31:1f:b0:87:2d:c4:92:
         7e:5b:bf:fd:1f:45:8d:5c:e5:b1:c7:10:01:17:5b:d6:17:71:
         63:52:83:8a:f1:13:2a:45:e5:ab:87:14:83:02:b7:91:ea:42:
         df:a4:93:63:25:d3:a4:4e:6e:fc:10:24:cf:e9:19:f2:b6:67:
         09:7e:bc:6c:14:d8:55:95:18:de:39:ea:4f:70:f6:86:6b:de:
         5a:f0:c5:fc:89:25:dd:b4:93:9e:33:1b:b0:56:c3:5c:f9:d7:
         2e:1f:ff:c9:72:49:90:9e:55:07:53:e5:5d:f8:27:b8:40:79:
         a9:a5:82:cb:54:6a:83:0d:c0:50:8c:d7:b8:cf:62:3f:f2:db:
         ef:21:bc:c4:75:f9:cb:17:04:2c:74:14:71:63:14:37:60:17:
         19:95:68:63:97:55:34:52:72:19:98:90:72:04:d0:32:b0:48:
         76:83:c2:e4:e3:ce:33:0a:b4:b2:03:0a:f6:44:7c:61:91:72:
         73:64:dc:7b:37:83:f6:81:49:b0:2f:12:77:4a:31:5f:da:f0:
         95:c7:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:44 2026 by rpki-client