Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File:                     ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier:          Z3hiJ1Sy2tspouP++DTshL1K82umiqvtDAyXUh6eMtk=
Subject key identifier:   F4:90:9C:14:87:77:E1:7F:9C:CD:98:34:7B:36:7B:E0:C0:4B:67:54
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer:       /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial:       019F91DA34781022F4B3A544D2B785DC1CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number:          18CB
Signing time:             Fri 24 Jul 2026 02:00:24 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:24 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:24 +0000
Files and hashes:         1: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: B2/9hZUIZp3AwcnklfKZdA08nOa00gph8qHCdHASnTI=)
                          2: hsS_dQVQFPV5hLzgsOTPdvSM2Go.roa (hash: ATrYNNXfTceiohlPFSe9W4JtggiaqmzTnSYR0lAfwkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:34:78:10:22:f4:b3:a5:44:d2:b7:85:dc:1c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
        Validity
            Not Before: Jul 24 02:00:24 2026 GMT
            Not After : Jul 25 02:00:24 2026 GMT
        Subject: CN=f4909c148777e17f9ccd98347b367be0c04b6754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:17:11:a5:39:e2:5b:7a:91:eb:27:69:e0:
                    78:17:ae:ae:ab:62:34:56:7c:06:4b:b2:24:03:9f:
                    28:01:f7:ef:8b:8f:bd:0d:12:c9:4e:99:40:39:be:
                    eb:c6:f5:11:7c:0d:9d:4b:a8:04:38:08:9c:b3:eb:
                    55:76:c9:56:46:ce:08:6a:4a:5f:5d:4f:e9:c7:26:
                    fd:c8:af:a1:09:33:74:38:d1:13:cb:d1:36:4d:4a:
                    12:53:4e:97:47:0e:a9:10:22:b3:b6:69:ce:72:4f:
                    9d:45:54:61:5b:72:84:08:c9:9e:b9:83:56:b3:2f:
                    bc:8b:31:a5:e2:06:53:d0:58:0c:79:e0:cd:00:06:
                    19:97:50:23:71:ad:75:9c:2d:2b:ee:e0:df:98:47:
                    b4:f6:18:5f:36:6a:67:f1:ca:ad:54:1b:79:b2:bb:
                    55:5f:1f:6e:9e:5a:ba:61:0c:6c:cc:6c:31:4b:8b:
                    8c:c0:33:30:77:73:d4:e1:c0:3a:46:99:ce:1c:d9:
                    af:0e:8b:3e:d0:63:d6:a8:18:1e:1b:36:02:dc:1f:
                    fd:a3:b5:e9:7e:2f:7a:75:bb:34:07:69:46:43:88:
                    0f:b8:59:06:98:a2:0b:75:84:f1:79:57:17:c2:4f:
                    58:05:b7:59:e7:0d:8c:7a:d9:ce:00:0c:2c:ea:66:
                    dd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:90:9C:14:87:77:E1:7F:9C:CD:98:34:7B:36:7B:E0:C0:4B:67:54
            X509v3 Authority Key Identifier:
                keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1f:62:6d:7a:5a:35:1e:0e:d0:f5:75:45:3f:cb:a8:18:7b:
         6d:81:2d:f5:43:53:1b:ee:d5:6d:5c:f5:d0:ee:fe:92:c7:f7:
         2d:45:10:b6:cd:04:0d:2c:ca:da:db:7d:56:56:1c:25:32:17:
         8f:76:3a:ab:38:64:8d:df:83:8f:ad:a4:dc:14:c6:03:e8:0c:
         59:3e:2c:6a:cc:fd:18:fb:f6:f7:3d:ee:10:60:47:41:d9:24:
         60:3b:29:cf:95:63:f3:54:31:b5:d3:bb:32:55:26:ac:67:dc:
         dc:b3:56:d4:25:5b:08:92:0c:25:be:cc:85:61:be:2c:c7:e5:
         80:73:c8:e7:e0:6d:c8:0c:3a:bf:dd:00:fd:1a:7a:c4:7d:f2:
         8e:92:06:71:84:70:24:fe:27:c1:78:58:be:55:8a:17:64:a3:
         27:91:b3:78:53:08:2a:d9:5c:5d:95:ad:b4:dd:a8:a6:c5:e2:
         37:2d:ca:33:f5:0a:f1:fa:ac:b9:93:bb:81:de:b0:79:e5:16:
         9d:f8:d7:d1:4e:32:02:a8:1a:8c:a8:3c:51:fc:73:ba:e9:aa:
         47:18:d9:9b:d5:76:00:5d:98:39:d4:3a:f8:ee:45:da:e1:61:
         ee:63:93:d4:53:11:e1:04:c2:95:be:b6:b7:85:2f:71:ec:28:
         90:61:b8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:40:23 2026 by rpki-client