Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File:                     ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier:          IndsXAzrGQvAkYik6PgN7glBfO3GMdb7p6pEJr4OjCI=
Subject key identifier:   60:52:C7:91:59:4B:F3:36:43:7F:37:71:22:87:D8:7F:0A:E5:E6:0D
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer:       /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial:       019F9F5F65D166F62D5E9D6E9AFB51872B6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number:          18D2
Signing time:             Sun 26 Jul 2026 17:00:56 +0000
Manifest this update:     Sun 26 Jul 2026 17:00:56 +0000
Manifest next update:     Mon 27 Jul 2026 17:00:56 +0000
Files and hashes:         1: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: m9UWFvw7NsDED38TwxbWRziv1zTPUeCGmZOYFz/0Axw=)
                          2: hsS_dQVQFPV5hLzgsOTPdvSM2Go.roa (hash: ATrYNNXfTceiohlPFSe9W4JtggiaqmzTnSYR0lAfwkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:5f:65:d1:66:f6:2d:5e:9d:6e:9a:fb:51:87:2b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
        Validity
            Not Before: Jul 26 17:00:56 2026 GMT
            Not After : Jul 27 17:00:56 2026 GMT
        Subject: CN=6052c791594bf336437f37712287d87f0ae5e60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e2:42:1e:07:61:21:b0:33:10:9f:cc:58:e7:
                    ee:d9:0c:35:6e:14:21:92:e2:64:06:50:da:17:14:
                    ac:12:07:10:fa:e5:ba:9f:d0:ae:12:e2:50:89:46:
                    0b:a2:1e:89:57:b0:f0:cd:bd:a3:a3:99:c9:96:b6:
                    ef:c5:d9:1e:cc:53:ac:f3:88:4d:bc:56:7e:9b:7a:
                    ba:a1:d9:5a:90:9a:8c:74:21:24:c3:00:9d:28:d8:
                    9a:6d:1d:94:4a:8d:50:cd:bd:73:1e:f6:43:04:ee:
                    14:97:37:85:c7:7c:95:4d:74:c5:1b:bf:12:3e:0a:
                    31:0d:8a:c8:82:c2:cd:bd:a2:f5:30:39:24:b3:98:
                    30:a9:79:0c:0a:ce:41:c5:dd:c2:0f:ae:3c:29:14:
                    6a:13:9e:03:e3:31:37:e9:0e:27:74:0e:d0:c7:ec:
                    a2:a7:28:96:cc:2a:67:fd:e9:74:3e:bc:5e:9d:60:
                    9d:e3:7f:49:7b:eb:eb:66:3a:12:0d:fb:34:9b:07:
                    42:92:d4:8e:bc:47:ca:ab:0b:a2:66:f6:3e:06:c0:
                    53:27:5c:ce:89:26:de:b4:4c:0b:c0:20:dd:c7:63:
                    a6:58:9b:84:c1:4d:05:13:05:b3:72:9f:17:84:a6:
                    76:64:91:e3:62:e8:1c:53:48:45:79:89:c3:14:c0:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:52:C7:91:59:4B:F3:36:43:7F:37:71:22:87:D8:7F:0A:E5:E6:0D
            X509v3 Authority Key Identifier:
                keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a0:53:55:9c:d3:99:cc:0d:a2:3c:9e:8e:ed:49:59:96:dd:
         47:3f:ec:bf:6d:bf:02:e9:2a:65:7c:97:40:41:59:59:fe:03:
         63:b9:9a:0a:25:9e:5e:17:9f:80:6e:23:68:54:1d:f8:15:32:
         b6:27:fb:8e:0d:9f:94:3b:fc:08:9e:80:ec:92:e8:26:78:55:
         87:54:22:61:31:94:4b:5b:b4:9a:7d:bc:fb:c3:dd:86:0d:3a:
         15:d5:cc:9c:b3:45:fd:80:22:9f:c0:89:a6:2b:95:b9:a1:eb:
         7b:9a:9d:26:35:fc:46:32:69:4b:0d:1f:80:54:bd:e1:3c:9f:
         90:dc:40:93:fa:75:27:2f:00:8c:32:1e:de:df:0b:6e:b7:01:
         e2:ef:e8:85:40:6b:7a:6f:c3:9f:76:03:18:4a:07:f0:87:0e:
         f4:50:b1:1d:37:3c:49:80:78:2f:53:47:b0:a5:1b:18:a4:83:
         23:d7:58:60:42:12:d6:8e:e4:cf:0f:0c:df:fa:60:4c:3a:b5:
         36:87:ba:1e:d4:9c:b2:5f:55:8f:33:36:8a:4b:12:2b:8d:86:
         c5:d4:98:7d:f0:0b:91:3a:58:53:76:1f:ff:92:2d:84:5f:80:
         62:2b:31:d2:c4:4d:75:9c:a5:f8:71:ee:70:0d:b0:72:ba:7f:
         fc:65:83:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:16:30 2026 by rpki-client