Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File:                     DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier:          IxgLtmOF2mswwPTD/llBVl2i4XzGLl6OVNNjXQZaEh0=
Subject key identifier:   87:6A:63:CB:9B:D0:F1:5C:10:D6:48:B6:4B:62:E4:38:5A:32:22:11
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer:       /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial:       01A0016F17E6A76D8B3E7CD831B9E157E1E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number:          1015
Signing time:             Fri 14 Aug 2026 18:00:52 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:52 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:52 +0000
Files and hashes:         1: 3JUz-hq99DA3h49ngZi9cq7SaR4.roa (hash: zVymLUNjhCd9Q8uV3U+v5PPuuKn77ETfb//eDnHr8ck=)
                          2: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: UOc7QmPbuDAbdgd4V0KOjaxriZcPOdfWTR5OJVJXsPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:17:e6:a7:6d:8b:3e:7c:d8:31:b9:e1:57:e1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
        Validity
            Not Before: Aug 14 18:00:52 2026 GMT
            Not After : Aug 15 18:00:52 2026 GMT
        Subject: CN=876a63cb9bd0f15c10d648b64b62e4385a322211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:97:8f:e2:60:8b:eb:16:35:13:26:95:7f:
                    91:4d:6c:8a:9a:49:eb:82:3e:8d:a4:8c:be:62:fe:
                    f5:96:9f:de:0c:ab:5e:f2:a7:84:b4:f9:08:a2:31:
                    29:37:db:36:8f:4f:10:cc:0b:05:86:45:a1:2e:a7:
                    f9:a3:4d:e9:d3:3b:dd:91:1c:1c:9f:99:1e:40:95:
                    2b:a3:d4:b4:90:0c:3c:27:4c:8b:cd:50:70:8d:d3:
                    6c:69:f3:1c:ab:64:b6:86:84:88:e6:6b:57:ae:b2:
                    0f:d7:ec:7d:1d:7b:ab:bb:88:5d:ea:f5:d5:f4:5e:
                    89:9b:a5:18:44:76:81:30:c0:95:79:8a:c3:08:f6:
                    57:45:0c:89:b7:03:24:cd:db:84:f3:54:69:1c:cf:
                    ba:fd:c3:dd:0c:af:6b:b8:84:04:79:d2:3b:78:13:
                    b2:00:03:15:70:96:45:96:59:73:52:52:13:da:76:
                    31:4e:51:2e:57:67:fd:fb:9a:0e:00:5a:07:45:4b:
                    de:3e:02:89:79:ce:7d:4e:e7:ca:3c:26:e2:03:c5:
                    d8:04:95:a5:ab:6d:ea:dd:48:8f:ab:e1:e3:4d:59:
                    df:32:50:73:3a:3c:7a:28:fe:b3:c2:35:a6:2e:61:
                    00:73:4e:c7:d4:b9:1e:d6:4e:b7:f1:a7:83:be:1f:
                    a2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6A:63:CB:9B:D0:F1:5C:10:D6:48:B6:4B:62:E4:38:5A:32:22:11
            X509v3 Authority Key Identifier:
                keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:96:65:ab:96:c6:69:9b:43:75:68:04:4f:dd:c8:1d:59:86:
         bb:f9:8e:d2:c3:cb:bb:e7:88:65:56:88:ae:c2:ee:13:d8:cf:
         76:f9:4d:3f:7a:e5:e2:cb:af:b0:bd:17:37:33:b8:ae:64:b0:
         d6:83:fb:8f:6f:81:9f:b0:fc:d6:c5:b2:b1:46:57:99:15:4b:
         ca:ae:a1:51:12:b5:1d:e9:c9:c4:01:5d:f9:c0:19:d7:51:ca:
         ba:df:03:13:a8:cd:4d:3a:f7:41:cb:93:bd:75:5a:f4:07:c2:
         98:a6:9a:05:20:17:9a:87:97:3f:68:08:d0:17:01:a1:ff:fb:
         2d:a0:23:ff:e3:5f:f9:63:2e:5e:67:4b:36:33:90:78:06:6b:
         2f:36:0f:02:e7:6b:44:dc:02:a9:0e:51:70:54:a9:f9:b0:a3:
         3a:30:76:d0:c6:88:01:55:6a:84:01:3a:ac:69:4b:cb:69:d7:
         93:ab:c3:7d:34:0b:f5:2f:18:88:2a:83:35:ce:69:e4:c6:db:
         62:78:18:73:61:70:b9:15:2c:1b:19:08:82:ef:35:57:1a:c3:
         f8:5d:98:3c:9c:9b:72:40:8c:83:bf:78:a2:6d:57:8d:e0:3d:
         c9:1d:9f:36:96:8b:e3:64:6b:95:81:70:6a:05:7f:f4:0e:c5:
         8a:5c:ee:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:23:44 2026 by rpki-client