Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File:                     1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier:          WvjbK4u5367ptQeX8MO6KgiRxV29GqeqOjIAtbgcnCk=
Subject key identifier:   3E:EC:77:C7:D5:5A:FD:9C:25:1D:63:5C:82:4C:6D:5B:C0:F6:17:78
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer:       /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial:       0197B77C8CBA8C24328EAB65330C6C4099FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number:          0514
Signing time:             Sat 28 Jun 2025 17:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:22 +0000
Files and hashes:         1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: vFtBIud2CPvGcYoeaQaZmPJuZYavN7Kvua8/zTyEYqk=)
                          2: 8UPDPZ7zrsaGxatkNfAWZkBB7mA.roa (hash: 7oRi0Nn02wFQcMPApE5QBhxhFL6uCRyFUmgPVAE/lvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:8c:ba:8c:24:32:8e:ab:65:33:0c:6c:40:99:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
        Validity
            Not Before: Jun 28 17:01:22 2025 GMT
            Not After : Jun 29 17:01:22 2025 GMT
        Subject: CN=3eec77c7d55afd9c251d635c824c6d5bc0f61778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:cd:5b:cf:94:de:45:22:d3:bc:38:ea:4c:
                    d5:4c:f8:84:a8:59:59:76:4d:3f:5c:88:06:10:ca:
                    16:c4:6b:e7:40:cf:35:b1:c3:a3:dc:3a:4e:f6:4a:
                    9a:6e:76:93:7e:a8:48:a0:a5:bc:c1:94:cc:03:b6:
                    88:d5:78:1e:8b:fd:98:6a:de:0b:0c:30:26:f9:02:
                    1d:d3:cd:33:c2:16:21:bb:92:64:af:c6:dc:0a:f1:
                    c9:9f:6c:2e:91:19:fd:7c:98:6a:2d:ab:f4:9b:62:
                    61:0b:8b:75:9c:2c:3b:63:f0:f3:01:84:37:6d:64:
                    3b:f8:eb:d8:53:09:5c:01:78:74:b2:3c:04:88:d5:
                    ac:68:76:07:9c:db:8c:d0:c0:14:e0:b4:0c:40:71:
                    6d:bb:69:7d:d2:5f:0a:5c:0c:b7:90:3e:80:b4:3f:
                    26:ba:66:21:46:e1:30:7e:0e:b2:aa:50:73:c6:35:
                    e9:36:94:1e:70:ee:4c:37:1d:57:90:d5:c2:62:b0:
                    ca:e8:c3:2c:04:20:bb:e8:06:8c:2e:5a:db:9d:73:
                    16:84:2e:11:d4:3b:fa:a9:fb:dc:ed:00:2c:88:3e:
                    40:34:af:75:c8:9d:87:87:b6:76:34:72:19:b2:7d:
                    74:73:6f:c9:de:ad:cc:d2:4b:5a:43:30:c4:29:2d:
                    69:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EC:77:C7:D5:5A:FD:9C:25:1D:63:5C:82:4C:6D:5B:C0:F6:17:78
            X509v3 Authority Key Identifier:
                keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:56:ca:33:04:ac:ad:02:10:03:32:14:f8:87:39:49:bc:88:
         f7:b6:89:14:d7:3e:d9:63:45:a0:41:84:3b:cd:b1:bc:20:ee:
         a9:3b:bf:52:78:3f:fc:a2:0c:7b:01:74:d9:23:b2:73:7c:74:
         73:51:35:2f:10:98:49:cf:26:af:1e:7d:6e:48:f9:0d:80:08:
         f3:6a:76:f2:b7:82:17:77:06:e1:e8:97:3b:d8:20:10:6b:81:
         a1:1d:d0:0e:58:c2:70:f7:02:c6:51:36:a4:17:7d:8a:5e:2c:
         ba:6d:29:ca:82:91:ee:a9:41:4e:0a:b6:7b:33:a4:cc:f9:1f:
         71:d6:0e:cf:7a:bf:9d:94:7e:f9:fc:6c:e6:dc:9c:2c:99:5d:
         3c:1c:65:e7:70:f9:a0:86:9b:00:4e:f6:a4:7a:c3:22:ce:5c:
         7a:fb:e0:63:27:b3:ff:74:8e:4f:f5:b6:2c:d4:db:c4:cf:9b:
         30:10:58:38:de:12:40:96:26:2b:91:72:1d:90:8f:a4:32:b8:
         eb:89:25:69:33:7e:a8:65:4c:e7:67:40:ca:0e:d1:69:ac:34:
         21:9e:e1:c3:d9:8f:e4:a4:3b:9a:17:48:b8:9c:e3:47:cc:b6:
         a5:80:6b:ac:7d:df:76:2d:24:cd:9f:07:23:66:6b:0e:f0:24:
         22:91:51:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:43 2025 by rpki-client