Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
File:                     DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json)
Hash identifier:          DvD+lsiZSxz/ZwM0FhIPN/Eno57nKgvDrJmvPLZ2wQY=
Subject key identifier:   C1:E8:31:D5:49:28:F8:53:75:69:63:06:4C:59:14:8C:CC:21:32:86
Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
Certificate issuer:       /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Certificate serial:       019D97E1FB89C759479ECE2B7119DAC2D528
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
Manifest number:          1379
Signing time:             Thu 16 Apr 2026 20:01:02 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:02 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:02 +0000
Files and hashes:         1: AL5mxy8CsYNcqWEtgLjCbmelqwQ.roa (hash: fdkV0rGstUR1Pzncs3bfmTmh9JkFZ1wdI7Ez0Xn02hM=)
                          2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: zJ/T02wheiUzUHK73cj4pocfjuWtJlOw2j4h+FykAcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:fb:89:c7:59:47:9e:ce:2b:71:19:da:c2:d5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
        Validity
            Not Before: Apr 16 20:01:02 2026 GMT
            Not After : Apr 17 20:01:02 2026 GMT
        Subject: CN=c1e831d54928f853756963064c59148ccc213286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:11:43:ba:9e:f3:03:d4:a5:0b:bd:1b:63:f8:
                    05:a4:95:fc:65:dd:a1:da:7f:fa:50:f4:42:a6:48:
                    ff:3d:c0:2c:ac:ef:6f:36:97:df:ab:d0:7c:64:c9:
                    39:55:0d:e5:1a:f1:b5:72:3a:48:c6:3f:38:a3:16:
                    b9:b3:72:d1:56:c3:3e:46:31:d5:2c:68:97:c0:99:
                    10:9f:30:99:5d:cf:ad:21:d8:02:d6:7c:57:24:7b:
                    07:9b:87:17:b9:ca:61:13:ec:25:bb:f5:ba:15:c1:
                    b0:03:1b:f5:80:f0:6a:3e:73:c1:d1:2b:3d:12:41:
                    85:81:7e:f4:6a:c2:26:1e:c6:3e:f6:ac:9a:91:16:
                    6c:70:35:3c:2d:1f:01:cb:a9:d8:ae:7d:a5:62:af:
                    71:c5:b9:2e:fc:6b:00:f1:03:39:53:06:ac:64:9b:
                    07:17:3c:ca:0c:6a:ae:88:b6:fa:00:b0:47:8c:64:
                    6a:f6:9f:4d:76:7d:64:88:b9:c7:cb:8c:d9:70:58:
                    cb:23:f5:c1:9c:aa:9e:cf:f9:4c:61:74:68:65:ed:
                    da:e5:f2:d2:fc:7c:86:f5:9a:45:39:61:15:cf:67:
                    7a:00:a2:9e:ab:fb:0b:c4:2d:cb:56:1f:bb:44:9a:
                    e2:ae:9a:ff:8a:f5:18:48:93:87:55:73:be:0f:57:
                    52:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E8:31:D5:49:28:F8:53:75:69:63:06:4C:59:14:8C:CC:21:32:86
            X509v3 Authority Key Identifier:
                keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:24:29:ff:27:47:7b:02:97:11:2e:d2:ec:14:7a:a7:5b:2f:
         5e:95:89:7c:14:c8:b2:55:e8:4c:a5:d1:7e:1c:b8:fb:f1:ed:
         cf:f3:2f:dd:35:96:07:74:72:9f:87:31:95:cc:60:04:7c:b8:
         d4:66:c6:7e:c9:73:91:06:00:2a:23:1f:7e:09:8a:f9:a0:06:
         d6:66:4e:35:f2:fa:da:f0:97:15:00:55:5b:20:73:13:78:fe:
         63:1c:9a:b3:69:a6:81:40:c3:fb:13:c9:ef:4d:4a:5b:2e:eb:
         c6:b3:3e:9b:78:3f:27:c5:70:b5:79:d8:11:ec:d0:d8:27:32:
         d5:89:1e:6a:19:e2:20:5b:30:75:7a:32:1a:ef:e6:0f:b1:61:
         06:24:2e:6d:ad:8e:23:fc:4d:68:7f:29:a1:c7:ff:46:77:68:
         9f:90:ba:72:78:83:3f:60:fe:96:c5:6c:57:46:9e:6e:bd:1e:
         93:76:50:5c:c3:8a:e3:db:b2:3a:0b:99:e8:56:68:07:a9:7c:
         c2:28:81:75:33:c3:23:3b:b7:f5:b5:7b:a1:b5:7d:52:4b:87:
         57:67:72:40:eb:a4:16:90:d8:8a:2a:47:10:19:4a:8a:70:2c:
         04:82:87:30:ed:e8:ca:c7:86:80:86:74:64:83:86:95:00:ec:
         c3:de:41:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:36:39 2026 by rpki-client