Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File:                     ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier:          jUxT8d3ZPDACcy95GVfOOHkKz/hVVxHi+XdotqwE3+o=
Subject key identifier:   72:14:95:EF:25:9B:15:1A:B9:E7:D3:06:27:CA:AD:B7:0C:D3:EA:C5
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer:       /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial:       01A1238AEA5963962EFC2A61F66B0B839F89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number:          199B
Signing time:             Sat 10 Oct 2026 02:01:08 +0000
Manifest this update:     Sat 10 Oct 2026 02:01:08 +0000
Manifest next update:     Sun 11 Oct 2026 02:01:08 +0000
Files and hashes:         1: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: 80v9YL8GHtYOJ5RID4lJkqDAlbYNGm+a9bCAXdDGIHc=)
                          2: hsS_dQVQFPV5hLzgsOTPdvSM2Go.roa (hash: ATrYNNXfTceiohlPFSe9W4JtggiaqmzTnSYR0lAfwkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:8a:ea:59:63:96:2e:fc:2a:61:f6:6b:0b:83:9f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
        Validity
            Not Before: Oct 10 02:01:08 2026 GMT
            Not After : Oct 11 02:01:08 2026 GMT
        Subject: CN=721495ef259b151ab9e7d30627caadb70cd3eac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:ca:0b:b9:95:8f:60:1f:8f:3e:e6:99:e1:
                    36:0d:d5:4e:27:f3:91:86:7e:9b:49:44:66:47:83:
                    f2:a8:72:73:39:2c:43:24:74:6a:72:f8:02:2e:09:
                    e2:3b:28:15:5d:76:6f:e5:89:f6:8c:79:63:3d:8e:
                    ab:9a:9f:37:31:db:bf:82:19:ef:77:b5:23:20:03:
                    a5:ef:38:20:b3:f3:8f:6c:78:68:57:9d:c2:78:5b:
                    60:d5:35:b5:c6:75:7e:6d:a0:18:4c:c6:50:07:4d:
                    ca:68:0b:5e:65:da:a7:cf:fe:2f:4e:0d:ec:20:74:
                    eb:68:bf:0f:ea:16:1b:c4:9e:d5:73:53:83:ef:56:
                    c7:87:d9:ef:9e:06:42:f6:0d:b7:3a:b6:a1:ec:43:
                    e7:10:4f:f1:54:70:f3:e6:d1:ef:84:b2:43:67:63:
                    7c:47:b8:de:2b:60:bb:00:41:4a:1f:3a:df:7a:49:
                    bb:8f:74:23:c8:82:ea:cb:5c:67:c3:9b:d2:44:d1:
                    30:8a:88:f9:14:37:ae:5f:bf:3b:d8:e1:7d:a2:15:
                    a4:8f:cb:aa:e3:a7:c8:4d:2a:81:d6:52:fa:1e:b7:
                    61:f6:e9:e1:f8:db:a0:53:e3:74:0c:79:9b:47:7e:
                    11:ac:f1:9e:f8:97:a8:95:3b:c9:dc:d6:cc:9e:7a:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:14:95:EF:25:9B:15:1A:B9:E7:D3:06:27:CA:AD:B7:0C:D3:EA:C5
            X509v3 Authority Key Identifier:
                keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:97:ca:57:f3:d2:b5:5d:3c:ac:33:ef:f1:7f:67:94:7f:10:
         b9:a9:99:61:ac:09:ab:e2:77:92:46:7f:69:77:97:3b:cc:23:
         4e:38:79:10:56:70:c3:50:f5:74:2d:8a:98:fa:b0:f4:87:81:
         ec:c4:0d:46:71:7b:9c:2d:b0:d8:bc:30:54:fd:4b:d7:ea:a3:
         fc:74:e9:d2:d6:6b:5a:cd:16:29:5e:b4:3c:11:91:2e:bf:b2:
         73:58:4b:0f:84:72:1f:51:73:ec:bf:d9:eb:77:39:73:40:42:
         90:bc:44:23:8c:31:9a:fc:f5:1a:4c:02:b0:f6:b7:6c:67:1b:
         e8:68:36:bc:2f:8e:c8:13:8f:8e:3a:84:cb:10:fe:29:63:18:
         b1:42:05:ee:ba:5c:f7:20:f9:ab:97:21:10:35:88:b1:5a:92:
         f0:ea:a8:78:11:d2:52:3d:2e:57:fc:65:68:1d:3c:91:f9:7a:
         ff:1b:97:61:bb:72:e1:db:bf:20:48:7b:8f:9c:a4:4e:45:f2:
         9c:49:cf:41:b3:59:5e:7d:8b:ed:66:b4:16:d3:5e:7d:d9:14:
         ce:43:9c:e5:d8:a8:f9:0e:d5:a1:3b:52:2e:17:a2:8b:6a:c6:
         c1:34:4c:69:41:05:b0:c1:79:7e:f7:c3:b5:81:b2:87:5e:f1:
         f9:44:e6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:32:08 2026 by rpki-client