Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File:                     DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier:          Gix4Loe0etllIHL+o2qlW1WSZlQZR34Hd7UpPsADoYs=
Subject key identifier:   82:9C:03:DD:6C:AA:61:8F:B2:A4:B1:75:3F:29:FF:E8:D6:56:F4:A9
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer:       /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial:       019EB87C9332E787FFCA33FB812203511D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number:          1958
Signing time:             Thu 11 Jun 2026 21:00:32 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:32 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:32 +0000
Files and hashes:         1: 81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa (hash: GrHuXfs5jEjbKpmLaqruIgR2TLpQWiNwgRNbypze6fI=)
                          2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: CTomrrUmPbBfbxn7rn6httwj4vvBLD0ALBi57ja187Q=)
                          3: FWSByoUh7cdSjLg_0lrpDtcYJjc.roa (hash: G+tgHieIjt37VS+kuZqWIFKgYBF4R31XFVof8vXl0MM=)
                          4: LRI5ugsacRY_9SsCf8BXrAnsRXQ.roa (hash: gNfzHqAbiGuTJ5h0CdAEwVUZIQ1YjSQukm3lO1KbwXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:93:32:e7:87:ff:ca:33:fb:81:22:03:51:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
        Validity
            Not Before: Jun 11 21:00:32 2026 GMT
            Not After : Jun 12 21:00:32 2026 GMT
        Subject: CN=829c03dd6caa618fb2a4b1753f29ffe8d656f4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:0a:a8:68:74:10:0b:77:c2:2d:9d:7b:cf:
                    f6:be:fe:c2:0e:3b:4a:97:e1:99:fa:8c:31:7d:67:
                    55:d5:ce:c7:63:50:8b:36:65:4d:f8:fa:69:fe:b0:
                    87:a4:0c:bf:56:b7:d4:80:d8:0a:33:84:de:52:d4:
                    48:06:32:14:47:e8:c2:7d:67:34:66:37:36:e7:bd:
                    66:fa:46:73:00:d9:32:8b:e7:be:2b:85:15:2b:1b:
                    b8:47:e4:c4:6f:2f:12:a5:39:fc:14:c7:45:a8:e1:
                    26:95:6c:8a:13:19:8b:1e:64:7c:69:1f:e1:28:35:
                    da:b2:3a:e6:23:eb:78:c8:da:00:8b:70:0c:7c:f1:
                    fd:ff:ec:1c:0f:ba:88:35:6a:06:7c:b1:29:8f:64:
                    26:cc:f1:44:70:40:24:86:9b:87:49:51:d7:04:82:
                    c9:a7:b6:43:3b:68:c7:60:39:67:c3:7e:9a:89:64:
                    98:fb:02:67:bf:d4:dc:33:94:ba:ba:0b:95:54:1b:
                    bb:a9:0d:99:0e:e2:4d:3d:d6:9e:23:a1:00:a2:f6:
                    35:8f:cb:91:e2:0d:73:7e:f3:f2:89:05:2f:93:48:
                    1e:0a:eb:1b:36:5c:9c:86:d9:9a:c9:fa:a0:66:82:
                    a3:71:c4:ec:6f:7b:ea:0e:5a:a6:71:d1:5a:e5:4a:
                    8e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9C:03:DD:6C:AA:61:8F:B2:A4:B1:75:3F:29:FF:E8:D6:56:F4:A9
            X509v3 Authority Key Identifier:
                keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:eb:61:b4:c4:b8:91:06:cb:d1:61:76:ee:f4:54:c4:d3:5e:
         67:29:70:05:83:d6:56:b8:c9:c7:8f:75:96:9c:fe:1d:0c:21:
         e8:bc:84:00:69:4d:cd:e1:11:aa:60:30:8a:1b:29:97:b9:b9:
         70:41:f9:9e:46:01:95:72:66:b6:30:fa:62:04:74:07:f9:c8:
         c8:67:5f:43:58:bd:c8:1d:8c:e1:a2:3f:d1:19:5f:bc:7e:02:
         02:f4:a0:74:c1:49:93:0e:34:d3:84:20:2a:62:ab:2a:cb:21:
         94:6d:01:5c:5f:ed:ef:84:4f:3e:b4:4c:a1:de:ef:b9:11:35:
         2e:8b:7f:71:f0:5e:a4:57:14:76:c7:77:77:ad:b3:7f:19:e7:
         8f:21:66:0d:e5:8f:ff:19:0f:9c:7c:a0:a0:9c:1d:30:15:8c:
         0b:87:e3:c0:7a:25:e7:c7:ae:d9:9d:c6:12:22:51:c4:b6:32:
         c1:5c:80:1b:a5:f6:01:57:1d:bc:6e:9a:03:34:65:0d:fd:41:
         b1:9e:39:97:9f:d8:c1:b4:37:5b:4e:a1:f1:53:8b:2e:95:11:
         3d:2c:b8:06:2f:a8:2d:81:fb:3c:42:54:0c:7e:32:19:0d:a3:
         47:68:75:12:58:36:d5:e4:49:9a:90:76:34:e5:0e:73:39:8b:
         c2:6d:01:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:01:27 2026 by rpki-client