Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File:                     DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier:          muR/LdbnTSabQGFAKAfIco7iYTZxI9pNToujrbnsTfY=
Subject key identifier:   74:A9:87:DC:7F:CF:A4:8B:3A:D9:07:E0:75:A6:FB:B2:E7:DC:59:7E
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer:       /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial:       019FA7F4C9F49198BB4FC75503FC7E193668
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 09:01:05 +0000
Manifest this update:     Tue 28 Jul 2026 09:01:05 +0000
Manifest next update:     Wed 29 Jul 2026 09:01:05 +0000
Files and hashes:         1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: 34oXALClBhvqm3tXk2lfCEUdDEKDUvVahPuevO1NR1M=)
                          2: R98-3MxUCEXE69Fz60_XSqvCP5E.roa (hash: pEgDuMo24DdcsijxgVsSGbfCOh2rEyVko0b+fdHTqnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 09:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:f4:c9:f4:91:98:bb:4f:c7:55:03:fc:7e:19:36:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
        Validity
            Not Before: Jul 28 09:01:05 2026 GMT
            Not After : Jul 29 09:01:05 2026 GMT
        Subject: CN=74a987dc7fcfa48b3ad907e075a6fbb2e7dc597e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:19:da:0f:22:27:55:ff:59:99:3c:e1:34:
                    55:15:16:11:0b:13:b5:2a:58:26:b1:08:f5:65:b9:
                    81:f7:17:c7:a9:39:b7:8d:b7:68:d6:6e:e7:fe:f0:
                    1b:dd:55:98:c7:35:c7:cf:60:d2:0c:51:8e:a4:02:
                    97:6d:cb:b8:68:8e:19:a8:07:8b:14:aa:2b:28:d9:
                    9e:86:97:a4:2b:06:10:53:b0:a2:d1:ea:8d:d2:e7:
                    83:fa:b6:a1:43:af:66:bf:fc:54:5e:be:64:d8:c6:
                    d5:b0:af:29:c0:9d:63:f1:ad:77:a2:38:26:70:f0:
                    49:2b:85:58:0a:79:25:74:45:10:85:a9:91:19:96:
                    ad:3e:ff:79:58:9e:b5:83:e8:4b:ab:b7:ab:ec:2e:
                    d0:f2:f2:3b:6c:f6:25:ce:a2:48:1b:5d:3b:28:ff:
                    c2:f5:0b:f1:17:c8:92:ca:33:ff:db:08:ff:47:34:
                    fc:03:e5:28:3c:c9:15:56:56:5a:a1:45:8a:80:4a:
                    57:ac:9e:ca:76:bd:e6:c6:77:29:bc:5c:a0:7a:e3:
                    db:01:1a:bb:41:fa:39:52:d9:40:b9:6d:62:0f:04:
                    48:a3:62:58:bf:79:62:1d:8c:50:a9:2c:00:be:26:
                    a7:63:ee:64:17:ec:64:cf:93:db:b4:e1:a0:0c:d0:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A9:87:DC:7F:CF:A4:8B:3A:D9:07:E0:75:A6:FB:B2:E7:DC:59:7E
            X509v3 Authority Key Identifier:
                keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1e:77:ea:42:13:cc:45:59:79:ac:2b:00:9b:bc:11:0a:21:
         4d:8c:2f:a3:8f:f1:8a:8c:99:2f:7a:81:92:67:17:0d:3f:21:
         1e:99:8e:45:1b:5b:d8:62:4b:3b:45:4c:38:60:5f:05:45:12:
         35:65:5f:75:68:5f:2f:ba:fd:7b:44:a5:e8:6b:20:fb:75:d0:
         ee:38:2f:95:9b:67:d8:4b:00:a5:58:ac:a7:6d:25:17:21:87:
         24:00:bc:b2:88:7c:88:22:6a:4f:74:67:bc:80:9c:75:ce:f1:
         1f:4e:0d:cb:3e:06:84:46:4c:71:87:3e:15:6d:16:62:d1:57:
         8a:80:5f:e9:aa:57:56:60:64:ba:bb:48:87:6b:13:13:a2:f1:
         81:37:cd:81:ce:e3:1b:f8:23:e6:a9:21:95:16:3f:7b:e3:bc:
         2e:83:84:c6:de:5f:21:ef:b5:35:e0:16:2e:bb:50:f8:2f:11:
         2d:b2:68:31:15:40:b0:f4:6c:c0:57:f8:08:ff:78:0c:1c:17:
         05:ab:51:33:c4:4c:66:2a:7c:27:81:a9:f3:2c:f7:b3:5d:30:
         a1:7a:cd:fc:e8:18:8b:75:c0:99:62:bf:99:82:48:1d:a7:7b:
         cf:33:2c:e8:62:6f:eb:4d:83:e1:2c:13:3a:a2:9a:10:80:c6:
         4b:db:d2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:18:18 2026 by rpki-client