Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File:                     ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier:          w1uOglRgBrC4yV3H7fFuwuFs+Wsy43s1Vs//0X1x42I=
Subject key identifier:   36:E8:05:A5:DE:2C:03:DE:48:8D:B4:84:5D:56:50:0C:8B:6D:36:4A
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer:       /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial:       019D29CDD1F12046111653CA467CFC307E2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number:          178C
Signing time:             Thu 26 Mar 2026 11:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 11:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 11:00:47 +0000
Files and hashes:         1: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: 0mIeQiVsasGCJG7zH/w+8lrpi5+m8FO+tebD3a/9hjY=)
                          2: hsS_dQVQFPV5hLzgsOTPdvSM2Go.roa (hash: ATrYNNXfTceiohlPFSe9W4JtggiaqmzTnSYR0lAfwkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:cd:d1:f1:20:46:11:16:53:ca:46:7c:fc:30:7e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
        Validity
            Not Before: Mar 26 11:00:47 2026 GMT
            Not After : Mar 27 11:00:47 2026 GMT
        Subject: CN=36e805a5de2c03de488db4845d56500c8b6d364a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:22:df:80:93:e5:3d:d4:7d:9c:be:4e:94:
                    d0:e4:92:3f:40:be:c1:6e:c8:6c:01:2a:48:1e:cf:
                    2b:3d:90:3e:56:5d:8f:7b:47:5c:3c:31:c2:78:3d:
                    13:b4:fc:4c:a8:3b:57:09:91:3e:67:f5:8c:8a:f6:
                    9a:33:ad:38:b3:d8:6f:d1:08:a0:df:76:0f:1b:48:
                    39:d5:8c:fe:f4:6b:22:1a:d8:85:66:0f:24:62:ff:
                    f1:09:ad:71:04:f6:19:71:87:1e:e3:83:d0:ca:c3:
                    85:bf:0c:32:cb:48:e0:4c:8b:e7:88:4e:11:0b:f6:
                    18:d5:cd:9b:1a:75:f2:ee:d4:57:a0:32:0c:0d:4e:
                    d1:8d:ad:db:cb:c0:e2:67:bc:25:fa:2f:f2:a4:fa:
                    32:ff:dd:25:2d:c6:63:9f:21:6d:e0:7f:bc:21:43:
                    fa:fa:48:30:8e:83:e7:0d:56:11:eb:5f:a2:10:7c:
                    79:23:ba:50:d6:8e:0b:05:fb:d7:73:51:dc:d0:8b:
                    ae:03:ef:fd:a8:fd:b1:2e:41:ae:6f:db:6e:e1:cb:
                    77:a0:33:4a:a1:1a:26:e9:72:1e:72:02:88:ea:87:
                    4a:6f:17:8a:8a:bb:c7:e9:fd:d4:0e:fa:40:90:7b:
                    bd:d3:a2:7d:82:ca:d9:e7:96:5f:ac:31:ee:49:89:
                    30:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E8:05:A5:DE:2C:03:DE:48:8D:B4:84:5D:56:50:0C:8B:6D:36:4A
            X509v3 Authority Key Identifier:
                keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:22:a6:19:c8:90:b7:95:4d:d5:5a:c2:eb:b4:f1:d7:30:20:
         ec:7e:d1:86:6f:2e:c2:7f:b6:07:82:91:ac:38:ca:5c:19:fd:
         c5:6a:57:88:d3:10:f1:ec:4c:39:06:16:fc:60:1a:7d:84:51:
         cf:c3:a7:4c:c8:6b:aa:20:b7:19:a2:04:a0:e9:9b:4d:52:42:
         81:28:d6:12:7b:43:1a:82:89:18:25:fe:1a:5e:e8:cb:5a:f4:
         01:15:48:47:5a:1b:f3:e4:92:13:b7:0a:93:db:e2:a4:4d:b1:
         1a:e7:87:3f:e4:d3:19:f2:42:2b:dd:47:3e:b0:c7:45:c4:39:
         f6:a0:f1:b8:35:db:59:75:41:3b:9b:c0:8c:e1:9e:2d:49:0a:
         a8:ca:32:6b:4e:49:44:42:e4:0b:e5:b3:e9:aa:03:ec:6d:7e:
         86:1e:0f:75:a7:ed:4d:0f:07:83:7e:1d:09:13:e5:52:7b:55:
         e4:88:42:48:08:20:86:1b:b0:c9:3e:f3:68:5d:50:5d:ea:34:
         13:06:8f:43:a8:6a:bc:fc:6c:b9:9f:6d:4a:59:be:6c:cc:ac:
         bf:5f:6a:68:8e:03:54:50:8d:91:67:82:e7:b4:8d:66:43:ff:
         bb:e7:61:69:b2:ff:6c:c6:67:8e:86:e2:2d:77:03:6d:38:fd:
         c1:0b:51:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:43 2026 by rpki-client