Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File:                     DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier:          WgmChIdmllfGdNsCSNSjPTrsV69xKLU8jBeWVzbJxK0=
Subject key identifier:   65:14:E4:E5:9C:6D:A9:4A:A7:14:9A:B4:C1:BA:8C:C0:F5:DC:CA:BC
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer:       /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial:       019D2AA985A7161843E98BC3D7450183AB81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 15:00:45 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:45 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:45 +0000
Files and hashes:         1: 81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa (hash: GrHuXfs5jEjbKpmLaqruIgR2TLpQWiNwgRNbypze6fI=)
                          2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: dqZ3uFW28P68J46TGcGc4UenxUu4TlRiKtNq6sZVlR0=)
                          3: FWSByoUh7cdSjLg_0lrpDtcYJjc.roa (hash: G+tgHieIjt37VS+kuZqWIFKgYBF4R31XFVof8vXl0MM=)
                          4: LRI5ugsacRY_9SsCf8BXrAnsRXQ.roa (hash: gNfzHqAbiGuTJ5h0CdAEwVUZIQ1YjSQukm3lO1KbwXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:85:a7:16:18:43:e9:8b:c3:d7:45:01:83:ab:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
        Validity
            Not Before: Mar 26 15:00:45 2026 GMT
            Not After : Mar 27 15:00:45 2026 GMT
        Subject: CN=6514e4e59c6da94aa7149ab4c1ba8cc0f5dccabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:1b:8c:8a:9d:3c:e5:15:f2:f4:c8:b8:2b:
                    f3:8a:b6:af:82:ab:55:f9:f6:35:b6:73:0e:31:e4:
                    ea:99:3c:31:6f:d7:c0:05:df:8d:f3:64:2a:5e:db:
                    e3:df:73:e9:71:c3:25:e3:bd:ab:8a:3a:70:0b:26:
                    47:ea:a2:69:f4:60:86:6d:c7:c6:24:11:d4:69:72:
                    e4:49:08:c5:05:90:9a:5a:7d:9e:c6:c4:37:eb:f6:
                    cd:59:72:44:30:cf:77:64:b1:03:1d:37:b8:09:ae:
                    10:83:42:54:76:9d:58:bc:a4:32:83:e0:6c:d3:8c:
                    7a:87:a9:ac:54:d6:75:24:7c:05:c3:22:1a:7c:00:
                    a6:bf:41:e9:77:0c:52:29:a0:a9:db:c8:82:a1:eb:
                    c4:f6:dd:97:1d:fe:07:4b:cf:42:16:eb:71:58:3f:
                    ec:9f:b5:15:99:b3:ae:95:51:7a:7c:84:b6:5c:33:
                    49:0c:52:cc:8a:46:08:9c:9c:ad:b8:49:5e:25:7c:
                    64:a9:49:3c:5d:25:49:fb:80:36:36:73:97:3d:d5:
                    83:09:1a:10:5e:74:69:d1:2b:31:91:72:9b:c8:c3:
                    2a:63:36:8d:6f:fa:f3:89:3e:05:0b:a0:af:d7:63:
                    7b:29:2c:69:37:05:b5:4a:e1:56:2f:90:b3:d9:71:
                    cf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:14:E4:E5:9C:6D:A9:4A:A7:14:9A:B4:C1:BA:8C:C0:F5:DC:CA:BC
            X509v3 Authority Key Identifier:
                keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:aa:c3:ed:23:8d:68:f6:b2:b0:2d:1a:f8:16:15:a5:70:fe:
         65:c2:20:02:6e:ac:a3:4b:79:00:fb:1e:03:22:0d:35:6b:f8:
         86:87:d4:1b:d0:fc:ab:d7:89:9a:27:cb:30:2a:84:16:06:04:
         d0:3a:27:7b:0f:23:1e:e2:0b:30:f7:e1:51:43:8c:f3:08:22:
         08:b4:a8:5c:80:ed:c9:3c:30:c4:d5:be:ec:b9:71:c9:2a:85:
         67:44:a5:8e:31:85:dd:8b:af:6b:e2:59:b4:f2:3e:7b:c8:0f:
         38:f3:cb:e2:b6:d0:c4:36:bd:85:09:ac:bc:ac:ad:59:3a:1a:
         03:9c:e5:03:69:20:d9:0b:73:16:66:04:f6:81:5f:00:02:45:
         af:4d:eb:66:6d:40:8e:07:aa:7e:7e:f3:61:4b:7b:59:ad:dd:
         e4:6c:ea:ce:71:38:aa:9a:de:4f:4a:6e:4c:d0:d0:17:25:67:
         7a:cd:dc:c1:30:fb:f9:aa:4a:bf:99:0e:8e:ea:02:2a:b3:f9:
         8f:97:2c:10:7e:3e:5d:f2:6d:e2:34:88:7d:3e:20:79:14:cb:
         5f:f1:0b:15:80:9a:e6:dc:e8:f8:a7:9a:88:ff:9c:99:00:0f:
         53:04:5a:01:78:b8:4b:79:1d:e6:d2:df:86:57:02:4e:5d:7f:
         82:82:f4:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqYWnFhhD6YvD10UBg6uBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNDRkYTVjMTkwNDA5NTg2MGU4NjgxODA1NzNlZTNjODk1
YTdiNDUwHhcNMjYwMzI2MTUwMDQ1WhcNMjYwMzI3MTUwMDQ1WjAzMTEwLwYDVQQD
Eyg2NTE0ZTRlNTljNmRhOTRhYTcxNDlhYjRjMWJhOGNjMGY1ZGNjYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYAbjIqdPOUV8vTIuCvziravgqtV
+fY1tnMOMeTqmTwxb9fABd+N82QqXtvj33PpccMl472rijpwCyZH6qJp9GCGbcfG
JBHUaXLkSQjFBZCaWn2exsQ36/bNWXJEMM93ZLEDHTe4Ca4Qg0JUdp1YvKQyg+Bs
04x6h6msVNZ1JHwFwyIafACmv0HpdwxSKaCp28iCoevE9t2XHf4HS89CFutxWD/s
n7UVmbOulVF6fIS2XDNJDFLMikYInJytuEleJXxkqUk8XSVJ+4A2NnOXPdWDCRoQ
XnRp0SsxkXKbyMMqYzaNb/rziT4FC6Cv12N7KSxpNwW1SuFWL5Cz2XHPZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUU5OWcbalKpxSatMG6jMD13Mq8MB8GA1UdIwQY
MBaAFA1E2lwZBAlYYOhoGAVz7jyJWntFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iY2U1M2QtZDM5ZC00ZTIzLWFhMTct
MjdmYjU4MjJiMzJkLzEvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9iY2U1M2QtZDM5ZC00ZTIzLWFhMTctMjdmYjU4MjJiMzJk
LzEvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKrD7SON
aPaysC0a+BYVpXD+ZcIgAm6so0t5APseAyINNWv4hofUG9D8q9eJmifLMCqEFgYE
0Donew8jHuILMPfhUUOM8wgiCLSoXIDtyTwwxNW+7LlxySqFZ0SljjGF3Yuva+JZ
tPI+e8gPOPPL4rbQxDa9hQmsvKytWToaA5zlA2kg2QtzFmYE9oFfAAJFr03rZm1A
jgeqfn7zYUt7Wa3d5GzqznE4qpreT0puTNDQFyVnes3cwTD7+apKv5kOjuoCKrP5
j5csEH4+XfJt4jSIfT4geRTLX/ELFYCa5tzo+KeaiP+cmQAPUwRaAXi4S3kd5tLf
hlcCTl1/goL0sw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:17:26 2026 by rpki-client