Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
File:                     dxToFxWNwwfu1NTG7fUaieVwPs8.mft (raw, json)
Hash identifier:          gNMCHjdKwo9bgBDoABnRH+5NnrZf4f1NYzg2kb+Ubec=
Subject key identifier:   D6:3E:C4:01:57:20:CE:E7:A4:10:C8:38:33:2A:D5:2B:92:DF:FD:35
Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
Certificate issuer:       /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Certificate serial:       019D97E1DA18012291E670FB0ED0010DFBE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
Manifest number:          1099
Signing time:             Thu 16 Apr 2026 20:00:54 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:54 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:54 +0000
Files and hashes:         1: 7XwuNf8ZI8FggCTIu3xLPPBwACo.roa (hash: W+WJkHmtpXyF1YCQ32I9zdl7SdlSiAPaPn3XEwacVdM=)
                          2: dxToFxWNwwfu1NTG7fUaieVwPs8.crl (hash: pJL7Z692NskbdTrpNI4sebxj7RH0kkC7Tg/+R0CI8Gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:da:18:01:22:91:e6:70:fb:0e:d0:01:0d:fb:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
        Validity
            Not Before: Apr 16 20:00:54 2026 GMT
            Not After : Apr 17 20:00:54 2026 GMT
        Subject: CN=d63ec4015720cee7a410c838332ad52b92dffd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:89:6c:0a:55:01:10:ce:f7:a2:e8:13:71:
                    8b:13:13:1b:bb:ee:c4:81:a7:34:5f:32:35:a7:57:
                    e5:ee:72:0d:e5:1b:68:b4:3e:62:b0:52:52:40:dd:
                    8d:16:75:d2:a9:eb:f2:64:9d:70:55:93:6f:b1:fc:
                    79:df:1c:24:25:d0:68:18:92:fd:ad:7c:7e:9b:b5:
                    0b:81:c1:ef:18:00:78:d5:29:c5:b4:22:21:c5:98:
                    da:d9:82:51:cb:cf:29:ef:9d:a4:33:da:f0:24:3f:
                    2e:ee:9c:1e:71:b6:32:36:6e:1b:cc:be:37:3d:7f:
                    51:26:45:68:f8:8b:a5:fe:a0:17:4d:a3:38:ca:98:
                    bc:84:4e:58:62:1e:7d:fe:61:e4:d6:cc:18:c6:51:
                    59:cc:c3:c5:d1:d1:38:c2:c0:b0:9e:a1:bf:6a:89:
                    35:4e:b8:6d:f8:14:3b:43:1e:f3:a3:1c:a2:ee:f6:
                    91:23:37:6f:4e:b1:dd:11:e3:67:a2:94:6e:e0:a8:
                    4e:ca:42:3f:53:c3:21:38:e4:ee:42:a8:12:0c:69:
                    2f:fe:be:9e:47:86:0f:6f:31:51:ce:a1:fa:fb:99:
                    3d:d5:ac:a5:bc:47:aa:41:63:f6:b7:b1:25:5d:05:
                    1f:7e:f9:19:21:53:54:c6:be:d4:c7:e7:ad:33:9e:
                    57:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3E:C4:01:57:20:CE:E7:A4:10:C8:38:33:2A:D5:2B:92:DF:FD:35
            X509v3 Authority Key Identifier:
                keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b3:29:f6:28:3c:1e:07:b7:e7:d9:57:94:4e:e7:31:64:8c:
         a0:f8:e4:d6:75:3c:70:5f:7b:b6:50:34:64:47:ad:3b:35:b8:
         e3:eb:90:c5:dd:fa:6e:c6:00:02:7e:8a:22:b7:eb:04:68:ab:
         ae:d6:31:e9:83:12:52:44:a6:69:05:b8:73:c3:43:af:00:fb:
         05:9e:04:3b:b0:89:85:38:82:85:8e:68:9f:61:b7:8d:7a:b5:
         e2:2a:85:57:02:4a:c9:90:0d:a8:57:de:56:78:86:4f:40:3a:
         fa:67:0f:20:a5:b9:73:69:8d:4d:20:49:d7:da:d6:5f:fc:3a:
         5e:9b:e0:e8:d2:52:32:37:0d:f9:ad:5d:88:11:0c:44:dc:de:
         d3:a1:eb:6b:2b:01:b8:0d:27:97:7c:45:e1:74:87:2a:7e:6b:
         95:22:f1:aa:f1:05:0e:b5:7c:96:ec:7a:56:36:42:1b:b7:25:
         a1:5b:b2:1d:7d:f7:2b:ef:19:e0:78:95:65:ec:ad:05:1b:95:
         be:be:d5:33:58:aa:34:88:86:2f:60:fd:b4:e8:ba:b3:e4:86:
         0b:3b:f2:40:8a:db:b2:23:7a:6f:af:c6:5b:72:3b:a8:fd:a8:
         20:88:77:b7:49:72:ff:83:45:12:10:3c:a7:ff:68:04:fd:76:
         16:b5:84:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4doYASKR5nD7DtABDfvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MTRlODE3MTU4ZGMzMDdlZWQ0ZDRjNmVkZjUxYTg5ZTU3
MDNlY2YwHhcNMjYwNDE2MjAwMDU0WhcNMjYwNDE3MjAwMDU0WjAzMTEwLwYDVQQD
EyhkNjNlYzQwMTU3MjBjZWU3YTQxMGM4MzgzMzJhZDUyYjkyZGZmZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz6JbApVARDO96LoE3GLExMbu+7E
gac0XzI1p1fl7nIN5RtotD5isFJSQN2NFnXSqevyZJ1wVZNvsfx53xwkJdBoGJL9
rXx+m7ULgcHvGAB41SnFtCIhxZja2YJRy88p752kM9rwJD8u7pwecbYyNm4bzL43
PX9RJkVo+Iul/qAXTaM4ypi8hE5YYh59/mHk1swYxlFZzMPF0dE4wsCwnqG/aok1
Trht+BQ7Qx7zoxyi7vaRIzdvTrHdEeNnopRu4KhOykI/U8MhOOTuQqgSDGkv/r6e
R4YPbzFRzqH6+5k91aylvEeqQWP2t7ElXQUffvkZIVNUxr7Ux+etM55XtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNY+xAFXIM7npBDIODMq1SuS3/01MB8GA1UdIwQY
MBaAFHcU6BcVjcMH7tTUxu31GonlcD7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQt
NjIxMDY0MWU1MmQ2LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQtNjIxMDY0MWU1MmQ2
LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7Mp9ig8
Hge359lXlE7nMWSMoPjk1nU8cF97tlA0ZEetOzW44+uQxd36bsYAAn6KIrfrBGir
rtYx6YMSUkSmaQW4c8NDrwD7BZ4EO7CJhTiChY5on2G3jXq14iqFVwJKyZANqFfe
VniGT0A6+mcPIKW5c2mNTSBJ19rWX/w6Xpvg6NJSMjcN+a1diBEMRNze06HraysB
uA0nl3xF4XSHKn5rlSLxqvEFDrV8lux6VjZCG7cloVuyHX33K+8Z4HiVZeytBRuV
vr7VM1iqNIiGL2D9tOi6s+SGCzvyQIrbsiN6b6/GW3I7qP2oIIh3t0ly/4NFEhA8
p/9oBP12FrWEiA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:43:20 2026 by rpki-client