Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File:                     DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier:          DgO/Az8HsmUicfy3cGyMOg61g2dfKP7mhn8eXoPbW2M=
Subject key identifier:   3D:41:E9:A3:29:F3:20:2A:64:C9:28:B2:B0:A8:A5:2A:A5:43:91:85
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer:       /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial:       01A0D538FBAC1800BDEB359336372B9E97E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number:          1A70
Signing time:             Thu 24 Sep 2026 21:01:16 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:16 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:16 +0000
Files and hashes:         1: 81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa (hash: GrHuXfs5jEjbKpmLaqruIgR2TLpQWiNwgRNbypze6fI=)
                          2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: cGrcuzCx/SIOyWo2FbqVIIMGgGZMgpzxuyJ1SvZmFHU=)
                          3: FWSByoUh7cdSjLg_0lrpDtcYJjc.roa (hash: G+tgHieIjt37VS+kuZqWIFKgYBF4R31XFVof8vXl0MM=)
                          4: LRI5ugsacRY_9SsCf8BXrAnsRXQ.roa (hash: gNfzHqAbiGuTJ5h0CdAEwVUZIQ1YjSQukm3lO1KbwXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:38:fb:ac:18:00:bd:eb:35:93:36:37:2b:9e:97:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
        Validity
            Not Before: Sep 24 21:01:16 2026 GMT
            Not After : Sep 25 21:01:16 2026 GMT
        Subject: CN=3d41e9a329f3202a64c928b2b0a8a52aa5439185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:71:b7:d8:3b:76:23:da:5c:1e:09:14:54:9a:
                    09:ef:5f:a2:f6:76:94:39:b7:e2:32:dd:94:74:a9:
                    bb:ee:df:cd:cf:c2:31:fb:9f:2f:ca:86:4d:68:02:
                    cb:93:17:0a:2b:83:67:62:b8:ce:04:a0:f5:59:0c:
                    2e:55:97:b3:ab:48:cf:be:49:68:7e:50:ac:d8:98:
                    c3:bc:34:d4:aa:24:7d:8d:a2:54:96:02:36:a7:a3:
                    bc:d8:ad:70:01:f7:72:d9:66:8c:38:b9:3d:9d:17:
                    82:fe:e7:70:4e:7e:ec:23:35:4c:31:20:e5:8c:f4:
                    da:32:47:cd:a2:ee:d6:ed:06:51:b6:1f:6b:54:d2:
                    aa:09:59:71:6d:d2:e8:24:8a:7e:33:de:84:71:aa:
                    cb:08:62:54:e6:0a:16:de:80:13:1c:a3:d5:8a:15:
                    9f:66:48:fd:d5:19:b4:2a:0a:95:17:7a:bf:d2:74:
                    56:11:72:36:03:3e:e1:65:9c:ab:b0:df:67:11:31:
                    13:6a:8b:a6:4f:24:d9:4d:35:36:98:94:b0:92:e0:
                    94:53:5e:e6:c0:4b:43:ba:eb:cf:93:bd:f8:62:6a:
                    42:38:e3:ab:46:b7:41:41:82:0e:ea:80:4c:c4:74:
                    e2:16:08:31:54:d2:04:30:ac:8b:6b:99:89:74:c9:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:41:E9:A3:29:F3:20:2A:64:C9:28:B2:B0:A8:A5:2A:A5:43:91:85
            X509v3 Authority Key Identifier:
                keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:15:f4:9a:0c:d8:c3:2c:d4:4a:a2:1c:cb:14:b1:7a:72:ef:
         71:d2:8f:95:f7:42:7c:06:e3:60:0b:bb:ac:04:eb:3a:c0:ec:
         5f:8b:19:af:3a:60:19:27:6b:b7:35:be:90:f1:6e:9c:b1:c5:
         49:69:ed:c5:73:e9:47:25:51:34:c9:5e:33:ff:77:3b:e7:0e:
         d9:14:f8:2f:d8:76:99:e6:d1:9b:f2:08:3f:01:e6:0f:eb:e0:
         01:72:88:35:1f:87:e1:81:84:04:ab:64:22:b7:81:94:ef:60:
         51:17:34:8e:ea:d0:94:89:a8:da:c2:e0:7c:54:42:13:9f:ab:
         4b:6b:83:be:fb:4b:1f:41:b3:b3:5c:eb:24:5d:f3:bb:e0:df:
         07:e1:f5:3e:94:25:fe:e7:95:9a:f4:fa:7f:f2:db:c8:bd:c3:
         1e:20:61:9a:9e:ed:3b:25:e9:33:f8:00:9c:f3:12:c2:52:47:
         33:05:3b:95:c7:12:75:ba:74:2e:d7:f6:93:14:28:33:9c:51:
         47:21:33:40:dd:80:77:59:ad:b6:e0:d3:50:38:39:78:20:04:
         23:c8:0a:db:f0:f0:b5:d8:71:ff:52:74:3b:1d:2e:09:03:26:
         bb:2f:e6:4d:59:2c:39:75:5e:7f:c3:a7:92:fc:8d:09:a9:ec:
         75:7b:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:57:05 2026 by rpki-client