Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File:                     DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier:          qo9dY2Pdq1hwsn8f+M8KhwgkRgJF+7uswD4nO0V5oqU=
Subject key identifier:   75:22:7F:25:6D:1E:D7:4E:D1:92:EA:80:55:12:EB:B0:B7:D0:31:5F
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer:       /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial:       019EBFC848CEF410DCF6A737B0C4D71831EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 07:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:34 +0000
Files and hashes:         1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: 0smNoJvxxu9yCVTXBLjvD9YcG3fKFbjmPwTtN1DGA3M=)
                          2: Z99ngPTLOUTyTSdHuL5UZwAD6NY.roa (hash: DZi9rhCzp49WwA1zBtpD/yG3bRcqi0eJ3S0hss0FXos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:48:ce:f4:10:dc:f6:a7:37:b0:c4:d7:18:31:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
        Validity
            Not Before: Jun 13 07:00:34 2026 GMT
            Not After : Jun 14 07:00:34 2026 GMT
        Subject: CN=75227f256d1ed74ed192ea805512ebb0b7d0315f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:69:9e:e3:2c:cf:af:ed:c8:9b:a4:02:09:03:
                    9e:df:b3:cb:ba:b5:d5:dc:98:b9:1a:a8:a4:3a:42:
                    4e:14:1a:d2:b7:6d:9a:d5:d8:4d:eb:da:dc:13:0d:
                    32:bd:13:9c:97:80:83:82:c6:c8:c6:86:10:54:e7:
                    7e:25:03:0e:3a:bc:c0:5e:1b:7b:18:04:5f:c9:b7:
                    1e:77:db:97:26:37:3a:c1:19:9a:ff:66:59:41:99:
                    cf:3d:f9:da:1e:86:23:35:30:78:a1:8c:01:70:94:
                    78:ae:30:d8:b3:99:f2:79:96:29:26:3e:85:79:a2:
                    4b:97:5d:26:17:1f:9c:d4:48:df:4c:52:c7:60:6d:
                    f3:d2:41:f3:e4:03:11:1c:bd:56:50:5f:1e:18:f7:
                    a1:79:d6:40:8e:28:78:e6:8b:d6:3a:b3:79:e8:74:
                    55:e3:30:01:c8:77:a5:cf:9b:ed:6d:e5:5d:db:14:
                    a3:a3:3a:2e:e2:16:c1:5e:37:8b:7e:85:52:34:23:
                    e2:38:9b:c7:9e:6f:c7:90:38:5e:36:99:36:1f:21:
                    16:d3:62:de:5d:fb:a8:e6:ef:34:55:78:a6:2b:21:
                    22:15:77:e8:42:bc:cd:70:72:62:5a:50:38:00:ef:
                    74:27:25:29:83:2a:f4:e5:bc:26:ee:cf:f4:d6:26:
                    89:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:22:7F:25:6D:1E:D7:4E:D1:92:EA:80:55:12:EB:B0:B7:D0:31:5F
            X509v3 Authority Key Identifier:
                keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:a4:fe:f1:5a:1d:9a:c0:fa:55:bc:20:26:3e:83:1a:93:17:
         7d:20:60:16:b1:f1:f3:4c:34:d3:cb:29:c2:cf:0f:b7:34:44:
         c1:ed:91:44:1f:03:ea:78:7f:e2:e9:86:fe:8a:e9:ae:0c:cb:
         d1:2d:9f:a7:e4:ef:f8:ce:4a:17:ac:06:3e:8f:b3:13:3c:0b:
         1b:f7:ed:51:96:30:a7:09:6a:18:c7:77:51:a4:75:f4:23:c5:
         40:73:e3:f0:b6:99:57:f3:4a:61:e1:dd:fe:a3:74:44:d2:31:
         7a:7a:90:52:87:87:78:d9:58:9f:3d:97:9f:24:57:f0:a5:df:
         dc:c4:9e:c5:a9:be:16:0b:3d:47:2f:f0:ad:76:27:62:a2:3b:
         e7:fa:8f:ac:cc:9a:09:35:e3:f4:d6:0a:4f:a7:21:5c:9a:61:
         36:a0:1c:af:95:1d:2d:d3:26:4e:60:cd:1a:8c:b7:d7:fd:e1:
         9c:f8:8a:db:ce:96:b3:66:a0:d1:14:cc:60:a9:aa:b6:86:1e:
         f0:c5:77:d3:04:58:36:16:b0:63:99:4f:18:0c:21:f8:86:ea:
         87:5b:cf:fc:f3:37:c6:7c:6a:99:29:4c:fd:49:72:25:90:42:
         21:25:5c:9c:74:75:c9:85:91:92:e6:c9:fa:be:20:d2:c2:c3:
         ac:43:ba:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:54:24 2026 by rpki-client