Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File:                     1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier:          IChDyf12Di5fYBfcW1vIMVAjMMWRgeB6ii2lIHwnKu0=
Subject key identifier:   AE:40:50:1C:0B:29:FC:BF:3D:CA:10:78:18:D4:A6:F7:C5:49:20:55
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer:       /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial:       019D284D304A7E8643A6EE84766472874BEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number:          07E6
Signing time:             Thu 26 Mar 2026 04:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:40 +0000
Files and hashes:         1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: XS/a8Q75xS2uJ89zl7xbHwJAolpTV5SjKLhUXB6kXAY=)
                          2: sFLHZGEgR5B6z0uHo1Ay7Q5_vWs.roa (hash: tswRhyFVxtP5UBE+zxkH0gqlOKm86RXi8OEmfEEgHVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:30:4a:7e:86:43:a6:ee:84:76:64:72:87:4b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
        Validity
            Not Before: Mar 26 04:00:40 2026 GMT
            Not After : Mar 27 04:00:40 2026 GMT
        Subject: CN=ae40501c0b29fcbf3dca107818d4a6f7c5492055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:99:39:73:a2:30:b6:a9:08:7e:52:54:4d:53:
                    cc:dd:37:40:60:73:a3:cf:da:5a:5f:d5:19:ab:90:
                    33:8e:51:a6:98:67:da:a4:7c:a7:ae:9d:8e:75:df:
                    83:7c:4d:54:21:36:1a:ad:3c:88:7b:95:60:1a:24:
                    2e:d9:97:48:8a:e7:d9:ea:24:4c:39:4f:34:d1:f8:
                    a3:8a:7b:27:05:ed:f7:b5:26:fb:29:ef:ca:3e:50:
                    74:a0:94:46:22:cf:b6:da:99:82:0f:4c:bd:08:82:
                    0b:58:db:c2:2d:22:3e:8c:2c:f4:5a:23:b8:c7:0a:
                    e8:f6:08:61:f7:9c:ae:b4:92:f0:ce:2a:7a:a4:87:
                    af:b4:0f:67:bf:e8:52:40:38:ab:ac:56:2b:6a:06:
                    27:d8:e9:67:bc:78:d6:63:1b:d9:62:bc:15:62:09:
                    28:f8:70:29:58:20:35:bb:90:a3:1f:7a:6c:87:34:
                    54:5e:a4:ae:b4:91:bd:21:97:2c:d8:3b:43:58:c8:
                    8d:ab:7a:67:93:ff:1b:c6:22:5d:84:49:b8:63:e9:
                    b0:8c:6b:08:65:25:05:a5:59:d5:16:4e:0c:28:13:
                    28:e4:a5:b7:21:5f:49:63:03:19:7b:62:9a:c8:9b:
                    6c:48:ea:8c:fd:6d:e2:b1:3e:3b:5f:fe:e7:98:ce:
                    b8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:40:50:1C:0B:29:FC:BF:3D:CA:10:78:18:D4:A6:F7:C5:49:20:55
            X509v3 Authority Key Identifier:
                keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ac:af:d8:85:d1:ea:f6:48:2a:a0:65:00:bd:c8:91:9c:a4:
         f5:d0:80:e2:b8:f3:66:97:50:73:11:74:18:f4:bd:d5:63:6c:
         9b:97:9a:d2:ee:c3:73:27:05:ab:8a:13:1a:7e:89:9c:77:c6:
         b1:10:32:23:6f:27:0e:b6:e5:2b:f5:2e:75:06:f9:72:09:3d:
         75:bc:e1:11:4b:d6:95:84:2d:dc:c0:5e:a0:03:c9:36:43:db:
         99:93:c9:9c:c6:be:ab:26:5a:b7:51:17:dc:95:bc:70:5c:1c:
         36:a7:f0:e7:67:41:fc:b1:4c:51:c9:c3:de:63:52:c1:9a:ff:
         9a:22:62:90:a9:0d:3a:f8:7c:79:99:23:21:86:3f:83:e4:e7:
         5a:52:b5:c3:dc:4f:67:6a:74:ac:7c:37:14:1a:e0:58:6a:e2:
         30:0c:e4:0b:54:09:40:fc:d4:85:5e:87:c9:66:70:17:b5:09:
         ac:46:38:e8:95:48:e8:af:14:02:a6:1b:40:26:2f:68:1e:29:
         a0:a0:8c:dc:aa:10:12:2a:94:96:0f:89:34:23:6f:ec:c5:f8:
         4d:f0:2b:52:b2:cb:5c:ad:a3:52:fb:c4:1f:e7:a9:37:4c:3c:
         27:71:8e:33:6e:19:21:a2:3b:b8:20:af:4a:7e:d7:8f:25:69:
         cf:03:e7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:06 2026 by rpki-client