Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File:                     ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier:          Kl78gieum4Dl5C4Py+DjS2iZ5JWDZEBWL4Ryo4r9ifQ=
Subject key identifier:   55:05:C6:ED:76:60:44:0C:7F:5D:36:37:F4:15:19:95:8C:08:AD:6E
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer:       /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial:       019EB7A1328D84C54CB46287456B70074FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number:          185A
Signing time:             Thu 11 Jun 2026 17:00:55 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:55 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:55 +0000
Files and hashes:         1: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: iKjdDJIeKU1AvI+pqKKEngMbyzSaGtMkTBEQjrNiAQ0=)
                          2: hsS_dQVQFPV5hLzgsOTPdvSM2Go.roa (hash: ATrYNNXfTceiohlPFSe9W4JtggiaqmzTnSYR0lAfwkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a1:32:8d:84:c5:4c:b4:62:87:45:6b:70:07:4f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
        Validity
            Not Before: Jun 11 17:00:55 2026 GMT
            Not After : Jun 12 17:00:55 2026 GMT
        Subject: CN=5505c6ed7660440c7f5d3637f41519958c08ad6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f1:a9:02:84:c0:1a:13:e3:67:a8:f5:b9:33:
                    8f:f6:84:51:2b:08:1e:52:53:4a:92:db:ca:2c:a8:
                    96:b6:10:4f:ef:98:be:ae:1f:11:0c:40:04:82:08:
                    98:27:ab:3b:da:9f:6f:75:a3:c5:ce:6a:55:d6:61:
                    85:5c:06:9f:52:ef:47:2e:1a:79:d4:cb:b3:fb:de:
                    98:d3:84:38:8d:e2:38:af:c3:7c:77:da:52:79:0f:
                    01:eb:93:8f:85:9c:6d:b2:f2:c5:13:53:e4:01:44:
                    1b:c8:46:1a:aa:f0:6f:89:73:41:b1:e8:1c:c5:6c:
                    56:2e:a1:17:02:60:75:d5:f8:d4:56:0d:08:44:4d:
                    26:16:90:05:e1:4e:b6:cd:f8:28:1b:72:b5:ea:24:
                    c1:4b:f9:8f:80:1d:ea:c2:43:29:c0:c4:5e:9d:30:
                    57:6f:27:ba:d7:3d:da:ec:e4:d2:90:3c:24:84:a6:
                    b3:94:23:92:cd:da:a8:0d:6a:b8:fc:b3:4d:e2:9b:
                    d7:63:6b:0a:af:42:bb:bd:4d:8d:db:87:c6:cd:6f:
                    7c:72:f7:6c:96:84:56:34:c9:e9:8c:13:b3:d3:93:
                    99:78:a8:ce:19:b6:7e:ce:37:fe:de:c7:08:75:93:
                    85:d6:b1:5c:c9:73:fb:d4:4a:c1:65:d5:54:9c:46:
                    c8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:05:C6:ED:76:60:44:0C:7F:5D:36:37:F4:15:19:95:8C:08:AD:6E
            X509v3 Authority Key Identifier:
                keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4b:0a:81:1c:49:0a:7e:01:b9:be:40:44:fb:27:35:e7:e2:
         de:cd:a0:39:76:e3:af:1b:fe:26:a9:47:1d:ac:3a:92:72:ed:
         9f:56:5d:50:82:0c:5a:d3:41:a1:ad:17:33:12:8e:4a:14:f2:
         af:09:05:31:b2:c0:5c:8f:1d:47:0f:d4:d1:14:77:1c:90:1d:
         d4:7e:f1:0d:c9:c1:a8:af:b5:f8:d9:d9:9d:7d:db:e6:39:7a:
         35:a8:9f:4c:a2:ce:31:33:fc:d9:2e:80:ca:56:4b:25:4d:9a:
         ae:e7:04:cd:b3:e2:f7:51:b6:40:e6:9b:32:25:31:77:52:ba:
         46:39:ec:3d:be:d9:55:57:2e:08:c6:f9:7e:46:f6:d1:b8:d9:
         47:96:ee:8a:93:96:03:8f:ed:11:e4:8b:1d:2f:d0:54:15:ec:
         61:fd:15:90:da:e7:93:cd:b4:b0:49:68:ac:ed:f9:c8:64:61:
         6d:21:7f:48:de:ab:75:25:22:b2:c7:f7:f0:c0:9e:a2:12:b0:
         f5:25:c7:41:e1:c2:bf:3b:e0:1c:95:93:2b:2c:c7:07:4b:8c:
         6f:2d:ca:cc:21:32:15:bf:bf:06:4a:91:7e:67:6a:4f:5d:ee:
         5f:c5:8f:51:6d:08:da:f3:ae:d1:e4:99:d9:06:a0:9d:4b:46:
         d0:77:ff:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:00:08 2026 by rpki-client