Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
File:                     DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json)
Hash identifier:          H/IlbaXRvZkGuxpV6TVsR4+0SP07A12g6ElNDX/qFNo=
Subject key identifier:   C7:F9:A9:28:A3:F6:45:A3:B5:3E:19:78:73:04:3A:88:53:B2:6A:36
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Certificate issuer:       /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial:       01A0C3D6C24055CE33F5973885698E9A7C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
Manifest number:          1A67
Signing time:             Mon 21 Sep 2026 12:00:26 +0000
Manifest this update:     Mon 21 Sep 2026 12:00:26 +0000
Manifest next update:     Tue 22 Sep 2026 12:00:26 +0000
Files and hashes:         1: 81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa (hash: GrHuXfs5jEjbKpmLaqruIgR2TLpQWiNwgRNbypze6fI=)
                          2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: h95nC3wXgX4fgkpW3+ncHqq6FIQ6b6fFgGQo6gdy3G4=)
                          3: FWSByoUh7cdSjLg_0lrpDtcYJjc.roa (hash: G+tgHieIjt37VS+kuZqWIFKgYBF4R31XFVof8vXl0MM=)
                          4: LRI5ugsacRY_9SsCf8BXrAnsRXQ.roa (hash: gNfzHqAbiGuTJ5h0CdAEwVUZIQ1YjSQukm3lO1KbwXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:d6:c2:40:55:ce:33:f5:97:38:85:69:8e:9a:7c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
        Validity
            Not Before: Sep 21 12:00:26 2026 GMT
            Not After : Sep 22 12:00:26 2026 GMT
        Subject: CN=c7f9a928a3f645a3b53e197873043a8853b26a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:9f:07:76:dc:e1:6d:7d:35:05:51:22:98:
                    05:69:6d:64:05:a4:ce:19:37:17:64:20:7d:34:a4:
                    a5:02:90:c4:f5:84:95:12:42:9d:c1:e7:b1:92:79:
                    52:21:8b:ca:9b:65:0e:95:4e:cd:b6:9d:5c:18:1d:
                    01:fd:99:97:c5:7d:42:41:a5:43:d1:d5:37:c0:44:
                    ad:31:48:ca:91:9f:88:17:d5:23:97:0a:77:0f:1d:
                    37:91:2d:0b:c6:c8:40:5a:b3:35:13:3f:a5:46:8f:
                    79:a0:56:b2:c6:cf:de:f0:cb:4a:28:59:79:b4:98:
                    7b:57:7e:e2:96:f9:55:1b:77:fc:99:e7:49:4a:26:
                    89:af:e1:68:54:92:d7:5b:ff:7c:6f:f0:84:5b:f2:
                    ba:3c:f2:7c:2b:f5:a0:4b:5e:a5:a5:55:39:29:b5:
                    f2:89:36:25:b0:58:7d:7d:b2:19:b3:2e:80:de:f4:
                    83:55:3b:b4:59:b1:f1:15:67:d0:4f:96:d7:72:93:
                    3e:ad:d6:3d:9b:9d:e1:16:c6:25:b7:cf:39:75:11:
                    76:95:57:6d:a2:5b:bf:0f:cc:12:39:cc:ac:42:41:
                    a4:5d:f9:8f:e3:9a:02:0b:34:fe:5e:6f:39:4c:94:
                    d2:12:b3:6b:7e:d2:aa:2a:23:12:95:e7:3f:c7:f8:
                    4a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F9:A9:28:A3:F6:45:A3:B5:3E:19:78:73:04:3A:88:53:B2:6A:36
            X509v3 Authority Key Identifier:
                keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:63:8d:46:e1:e4:87:78:d8:20:b5:b4:50:af:88:df:fd:fe:
         ec:38:8b:a7:1c:c9:f7:53:df:1a:f2:1b:3f:5b:84:94:bc:64:
         70:67:ce:30:ab:7a:0d:45:7c:1d:64:ca:ea:09:df:60:dc:b9:
         17:9c:ba:7c:76:35:5c:4d:6c:5b:86:cc:27:bc:87:3a:10:03:
         02:0b:a7:f0:25:b2:b6:6c:2f:c8:a2:de:5a:91:32:76:a8:59:
         65:2c:80:fd:c0:c9:a0:9a:cc:a2:15:b9:fd:d5:2f:e7:b1:34:
         88:d2:d1:6e:07:32:cf:af:b5:11:94:df:a0:46:e3:ae:80:e4:
         2c:24:a2:ab:f8:27:1c:43:e4:03:e9:42:ce:55:58:3b:53:33:
         92:55:0e:db:d0:35:b1:d9:63:83:37:a1:11:95:33:f5:9c:be:
         0e:92:1a:ff:86:43:8f:34:61:03:eb:b8:43:05:d3:e9:d6:85:
         5e:af:eb:4e:fd:50:a5:1c:0e:6d:cd:b3:f0:7f:a1:8d:3f:46:
         ce:56:7f:c6:82:a9:84:2e:4b:7d:17:e4:d5:ac:b7:22:83:e4:
         38:6c:4b:0d:4d:34:2d:80:57:fd:d4:8f:f9:ba:63:d6:83:ba:
         ad:5c:10:24:5e:8c:60:bf:9a:56:f7:ef:1d:00:91:d4:17:ab:
         44:2f:c0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:27:04 2026 by rpki-client