Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File:                     DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier:          hf/mYnyaKUnuOdGl5e71foatny129lGvpcr14JEnqHw=
Subject key identifier:   F5:65:31:63:C2:D2:6F:14:4F:30:EF:4E:93:04:1F:A9:37:34:32:D9
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer:       /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial:       019FA9E2F9C4994D2634E700E9C9200D5FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 18:00:52 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:52 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:52 +0000
Files and hashes:         1: 81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa (hash: GrHuXfs5jEjbKpmLaqruIgR2TLpQWiNwgRNbypze6fI=)
                          2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: LYhmHx/9VNs14DwC4UA2GvtLMeIvrghPdwSElQ2Qo0A=)
                          3: FWSByoUh7cdSjLg_0lrpDtcYJjc.roa (hash: G+tgHieIjt37VS+kuZqWIFKgYBF4R31XFVof8vXl0MM=)
                          4: LRI5ugsacRY_9SsCf8BXrAnsRXQ.roa (hash: gNfzHqAbiGuTJ5h0CdAEwVUZIQ1YjSQukm3lO1KbwXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:f9:c4:99:4d:26:34:e7:00:e9:c9:20:0d:5f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
        Validity
            Not Before: Jul 28 18:00:52 2026 GMT
            Not After : Jul 29 18:00:52 2026 GMT
        Subject: CN=f5653163c2d26f144f30ef4e93041fa9373432d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:e6:de:9a:c3:41:a4:c7:6d:31:53:1d:56:
                    2b:c4:7a:b0:1b:33:e9:55:63:7b:3f:21:8c:65:92:
                    cf:13:0d:f4:7d:23:47:aa:0b:ac:bc:1a:87:55:13:
                    d7:57:5c:f6:a3:37:3e:e3:5e:59:76:5e:55:72:39:
                    e1:1c:48:81:07:78:db:16:2f:91:a2:df:0b:ea:96:
                    aa:c3:49:43:b2:7d:34:61:d2:43:b3:c9:0d:6e:8e:
                    3c:a4:91:b3:ad:08:cb:aa:21:0c:77:b3:3f:65:dc:
                    70:a2:a0:22:90:05:83:0c:ef:0a:40:73:6d:66:63:
                    8b:bc:c9:77:6d:f1:40:4f:2a:7b:eb:52:e4:23:1b:
                    c6:37:56:5a:7e:d2:66:d5:73:c6:bb:c9:c2:65:2a:
                    0a:df:f3:f8:84:3c:af:6f:f0:d3:6c:b4:30:41:59:
                    9d:59:14:e1:4e:fb:ff:26:e1:3b:08:41:d1:4a:2c:
                    a5:50:d6:3d:d8:80:f9:05:83:e6:64:d9:f3:19:99:
                    af:7c:91:d9:e1:7f:05:b3:b6:da:ab:e9:36:dc:37:
                    20:94:11:9e:22:c6:19:89:76:d4:8a:24:4e:06:cd:
                    9d:45:25:f9:7a:10:d2:46:69:e9:e3:e1:d6:e6:c9:
                    10:96:98:03:b1:b0:21:6b:8b:4f:87:ea:c5:34:43:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:65:31:63:C2:D2:6F:14:4F:30:EF:4E:93:04:1F:A9:37:34:32:D9
            X509v3 Authority Key Identifier:
                keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:33:f3:3e:27:90:41:6f:7c:20:07:d7:ed:1f:ba:75:7d:86:
         7b:d8:05:fb:22:d4:a8:1e:b0:80:8e:67:8f:9c:d8:c9:d8:60:
         c8:8a:66:8a:38:91:41:dd:de:83:2c:98:7b:8a:17:80:a6:ac:
         94:ce:4d:76:d1:7a:39:93:e7:86:f6:9f:6d:ed:d2:e0:52:e3:
         b5:20:04:1c:a0:15:9a:7e:1b:d8:a6:68:35:7a:01:97:58:a5:
         15:36:75:9d:93:d3:af:ea:25:f5:ed:4c:74:72:da:aa:37:dc:
         b9:5e:a2:b6:7d:5e:13:93:cf:be:dc:61:dd:20:c6:7f:74:33:
         3f:70:82:0a:85:6a:7b:9c:c7:a2:61:67:68:2a:9b:a7:89:a7:
         42:2e:32:a7:01:76:b6:11:94:5d:01:c7:f6:de:49:60:47:39:
         3f:2b:70:01:df:7d:16:f1:cd:80:a6:69:98:b1:ec:4d:f2:d2:
         1e:65:85:63:61:bb:82:f9:da:e4:49:c5:9a:1b:55:50:ac:05:
         00:3f:4c:5e:f7:64:b3:05:b0:41:f6:ea:c1:81:c1:2c:a1:f0:
         ce:cf:1a:29:57:90:13:b3:ed:54:a8:88:91:78:dc:a3:36:97:
         ea:d5:d1:02:b0:7d:9e:48:38:82:94:fb:55:af:4e:f2:80:3b:
         8f:9c:8b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:24:58 2026 by rpki-client