Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File:                     1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier:          vQijfcR3EgXYOAwY2UId+jj4UwpgArJoussMicU2HwE=
Subject key identifier:   FB:62:03:B4:C7:D0:8E:1B:8A:A3:98:D6:19:4F:FD:4C:5C:97:8F:BE
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer:       /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial:       019FA9759DA487BD5ABED7BCE44F344816B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number:          19D2
Signing time:             Tue 28 Jul 2026 16:01:25 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:25 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:25 +0000
Files and hashes:         1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: A68qpdlK+jBhybavKbzQoeoKcHJlJy90h9ak3kjHf1A=)
                          2: gR91LIxxnbU08v57AUEvFf010vs.roa (hash: SbAN6voQ5c1qkWMDRn5E0Sl0vR5PwgTVIGlVOQ/CsHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:9d:a4:87:bd:5a:be:d7:bc:e4:4f:34:48:16:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
        Validity
            Not Before: Jul 28 16:01:25 2026 GMT
            Not After : Jul 29 16:01:25 2026 GMT
        Subject: CN=fb6203b4c7d08e1b8aa398d6194ffd4c5c978fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:be:f5:2c:2e:18:81:1e:88:1c:16:3e:2a:7a:
                    0e:ee:c5:db:05:12:e0:8d:76:f9:c6:ed:04:89:23:
                    82:56:2a:b6:a0:27:4b:75:14:f1:09:89:40:4f:71:
                    04:2b:7d:a5:9f:7e:50:6d:89:10:70:8c:f4:a0:82:
                    fb:ed:66:10:46:18:aa:2a:ac:57:54:07:70:9f:00:
                    37:3e:fe:4d:c1:f0:52:d3:89:e0:75:2f:81:36:7a:
                    84:44:77:90:58:84:23:53:1b:d2:fa:3f:c8:88:69:
                    a4:ad:0b:3a:d5:2d:f9:80:10:28:cc:58:7c:7f:79:
                    9d:fe:6c:9f:05:84:85:a9:fa:74:ac:20:01:65:a8:
                    8d:5a:b4:4c:a2:80:6c:38:ed:70:23:68:ba:f7:5f:
                    8f:85:2d:82:22:b9:7c:15:4e:19:d7:a9:d3:c2:3f:
                    35:b9:b3:e5:ed:63:18:10:3f:34:96:cd:65:ec:50:
                    fe:a4:ec:5a:a6:72:0a:42:58:60:b0:2c:fa:11:4f:
                    f6:bc:82:e6:8a:ef:1f:8c:92:d9:05:b0:07:96:c0:
                    c6:63:10:9c:ac:18:08:0e:41:ba:3d:a6:c2:59:48:
                    bd:83:b6:04:03:bd:41:75:67:be:18:dd:11:88:cb:
                    2e:0b:db:e4:a2:96:8a:32:e7:a5:29:75:d2:39:f2:
                    ab:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:62:03:B4:C7:D0:8E:1B:8A:A3:98:D6:19:4F:FD:4C:5C:97:8F:BE
            X509v3 Authority Key Identifier:
                keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1f:1a:5f:31:2f:10:c1:45:eb:d0:6e:74:8e:b8:eb:73:37:
         3e:3c:43:95:5b:71:9a:34:8d:94:35:45:f0:1e:19:81:1a:e1:
         82:0c:17:1d:db:2c:46:bb:81:9e:df:a9:7e:55:8d:7e:7e:59:
         34:f1:1c:90:1a:69:ea:8e:27:76:ea:10:d2:e9:86:87:bd:32:
         97:81:0c:70:50:e0:d6:f6:8f:ab:4e:00:80:26:ee:78:c7:9d:
         f3:08:d4:cf:bf:1b:df:19:07:d0:34:cd:c0:85:e7:f9:2f:3d:
         8c:74:2c:38:29:71:64:ed:ab:fe:33:f4:e4:35:f4:3a:b1:dd:
         da:9e:b7:0c:c5:4d:31:77:7a:1b:10:9f:17:ae:a1:70:89:71:
         b4:11:ba:a5:00:04:eb:70:50:46:30:00:9b:7d:ad:dc:dd:f3:
         ee:40:10:4b:39:5f:b2:ef:28:c4:60:1c:19:74:18:5e:98:0e:
         d1:e7:6b:ca:e4:48:d2:45:da:f2:f4:d3:98:db:75:81:8e:1b:
         60:75:a4:92:98:6a:36:05:be:c4:70:b4:69:8a:45:fc:ad:5f:
         f3:89:f8:8d:77:36:37:97:f3:0c:06:46:b4:aa:ee:50:88:d6:
         e1:8e:b8:c6:0b:ad:62:1e:a5:d8:0b:32:86:77:74:f4:2c:75:
         2d:53:56:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:00 2026 by rpki-client