Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File:                     DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier:          hmBtPayc5zFwyKeoeu8fk7ZTKJ4PrVx4jljIXygRvwg=
Subject key identifier:   6E:C4:F1:CE:0F:BB:C9:A4:7A:79:6C:8C:19:29:17:60:62:80:87:5C
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer:       /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial:       01A08BD5B39A509439628FF3E4E48C6F0ACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number:          1A4A
Signing time:             Thu 10 Sep 2026 15:00:33 +0000
Manifest this update:     Thu 10 Sep 2026 15:00:33 +0000
Manifest next update:     Fri 11 Sep 2026 15:00:33 +0000
Files and hashes:         1: 81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa (hash: GrHuXfs5jEjbKpmLaqruIgR2TLpQWiNwgRNbypze6fI=)
                          2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: sBp0oXkJ05i68V4tOdcC37z8ZxbMP+tkVa0Ox1uQnaM=)
                          3: FWSByoUh7cdSjLg_0lrpDtcYJjc.roa (hash: G+tgHieIjt37VS+kuZqWIFKgYBF4R31XFVof8vXl0MM=)
                          4: LRI5ugsacRY_9SsCf8BXrAnsRXQ.roa (hash: gNfzHqAbiGuTJ5h0CdAEwVUZIQ1YjSQukm3lO1KbwXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d5:b3:9a:50:94:39:62:8f:f3:e4:e4:8c:6f:0a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
        Validity
            Not Before: Sep 10 15:00:33 2026 GMT
            Not After : Sep 11 15:00:33 2026 GMT
        Subject: CN=6ec4f1ce0fbbc9a47a796c8c192917606280875c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:19:b5:1f:4e:3e:f3:44:47:f9:bb:08:ee:
                    f0:e5:20:e0:0f:f5:a2:ab:b2:82:bc:67:06:c3:e7:
                    9d:1c:85:d5:3f:5b:39:5a:f6:48:90:4f:67:05:23:
                    de:fb:fa:fa:b2:1e:99:48:8f:26:6a:83:1c:fd:5f:
                    f2:9f:48:eb:46:e1:8e:18:19:0b:3c:3a:bd:b1:f5:
                    17:a2:c9:bb:f4:6d:be:ba:45:5d:bd:14:75:41:04:
                    b9:30:2d:5f:96:b8:aa:d0:8d:45:9c:50:4d:61:28:
                    0b:cd:c7:22:fe:01:46:75:17:98:fe:81:97:13:30:
                    b5:1b:c5:e7:af:f7:8a:51:6c:b4:ec:33:fe:b7:37:
                    72:83:78:59:b5:d1:01:c1:5b:ca:ba:b1:f6:d7:e4:
                    2f:9c:e3:ae:8a:23:84:af:3a:44:16:e8:8e:f7:35:
                    02:3c:80:71:e7:c2:2e:e0:65:0a:7b:1e:6a:3f:66:
                    55:26:ea:f5:55:bb:65:21:25:5b:81:b5:5b:43:da:
                    84:7a:56:f5:70:b4:39:5d:60:67:81:56:8a:a1:c2:
                    68:3d:36:7c:b7:c8:7f:d0:bf:df:d4:b5:d2:0f:70:
                    05:18:bd:12:27:79:47:eb:33:9b:c8:97:f0:20:52:
                    05:89:32:c9:c6:fd:e9:73:cd:bb:3f:ba:3d:f8:41:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C4:F1:CE:0F:BB:C9:A4:7A:79:6C:8C:19:29:17:60:62:80:87:5C
            X509v3 Authority Key Identifier:
                keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:97:58:c1:a2:37:c2:65:27:3c:17:ee:bf:da:a6:6a:a3:ea:
         08:44:62:2e:ce:16:1e:49:9f:db:19:9c:59:bc:d6:a1:a4:9f:
         e1:30:75:f5:b4:d2:a5:21:fc:12:5a:5b:83:53:29:de:21:59:
         b5:c0:d4:f1:55:f3:95:af:d5:d8:a1:b5:d0:52:20:26:2f:0b:
         24:3c:ee:62:ab:67:2a:22:0e:b5:7b:93:ef:5a:f4:1b:0c:0f:
         fe:25:66:f4:75:3a:94:1b:87:ad:46:a5:75:b7:a3:e7:2e:63:
         91:86:5c:84:1a:19:4c:2e:e9:c6:60:56:9c:42:5b:ac:37:4e:
         41:d1:5c:3d:bf:89:c6:f4:e8:36:83:18:52:15:d6:7e:ce:6e:
         b1:a3:e1:4b:1f:0d:e8:e7:2a:cf:21:25:94:c1:f0:8f:c2:e7:
         67:b5:55:8f:cd:35:ff:37:32:3d:11:a9:bd:3d:57:96:b6:00:
         c1:4b:92:b4:5d:7d:6b:83:16:84:ad:ad:c0:c6:3c:1c:48:7b:
         8e:39:b0:c6:5c:7d:5f:5d:5b:2a:78:42:d2:07:70:ef:01:e0:
         ab:20:e6:ea:11:92:c2:3c:0c:92:54:c8:30:65:5c:a0:c6:8c:
         01:17:3a:04:38:00:3f:ad:10:7a:2a:c2:e5:13:00:bf:e5:38:
         f5:a4:56:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1bOaUJQ5Yo/z5OSMbwrPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNDRkYTVjMTkwNDA5NTg2MGU4NjgxODA1NzNlZTNjODk1
YTdiNDUwHhcNMjYwOTEwMTUwMDMzWhcNMjYwOTExMTUwMDMzWjAzMTEwLwYDVQQD
Eyg2ZWM0ZjFjZTBmYmJjOWE0N2E3OTZjOGMxOTI5MTc2MDYyODA4NzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7AZtR9OPvNER/m7CO7w5SDgD/Wi
q7KCvGcGw+edHIXVP1s5WvZIkE9nBSPe+/r6sh6ZSI8maoMc/V/yn0jrRuGOGBkL
PDq9sfUXosm79G2+ukVdvRR1QQS5MC1flriq0I1FnFBNYSgLzcci/gFGdReY/oGX
EzC1G8Xnr/eKUWy07DP+tzdyg3hZtdEBwVvKurH21+QvnOOuiiOErzpEFuiO9zUC
PIBx58Iu4GUKex5qP2ZVJur1VbtlISVbgbVbQ9qEelb1cLQ5XWBngVaKocJoPTZ8
t8h/0L/f1LXSD3AFGL0SJ3lH6zObyJfwIFIFiTLJxv3pc827P7o9+EHBfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7E8c4Pu8mkenlsjBkpF2BigIdcMB8GA1UdIwQY
MBaAFA1E2lwZBAlYYOhoGAVz7jyJWntFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iY2U1M2QtZDM5ZC00ZTIzLWFhMTct
MjdmYjU4MjJiMzJkLzEvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9iY2U1M2QtZDM5ZC00ZTIzLWFhMTctMjdmYjU4MjJiMzJk
LzEvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJdYwaI3
wmUnPBfuv9qmaqPqCERiLs4WHkmf2xmcWbzWoaSf4TB19bTSpSH8Elpbg1Mp3iFZ
tcDU8VXzla/V2KG10FIgJi8LJDzuYqtnKiIOtXuT71r0GwwP/iVm9HU6lBuHrUal
dbej5y5jkYZchBoZTC7pxmBWnEJbrDdOQdFcPb+JxvToNoMYUhXWfs5usaPhSx8N
6OcqzyEllMHwj8LnZ7VVj801/zcyPRGpvT1XlrYAwUuStF19a4MWhK2twMY8HEh7
jjmwxlx9X11bKnhC0gdw7wHgqyDm6hGSwjwMklTIMGVcoMaMARc6BDgAP60QeirC
5RMAv+U49aRWnw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:08:01 2026 by rpki-client