Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File:                     1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier:          jIoQc+zC09lds4GRLrsgbQ550DJsR63oaJ+MO6Xnlr0=
Subject key identifier:   FD:84:72:5B:D5:DB:75:9B:76:20:1B:4F:05:58:E0:50:9E:B9:70:43
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer:       /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial:       0199FAD82984A83760176AA1A5A6B09D5B29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number:          0640
Signing time:             Sun 19 Oct 2025 05:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:34 +0000
Files and hashes:         1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: 0hdCZ0zZZUD7HtybrjKK91r01BkBumvKbxNVlzZYDao=)
                          2: 8UPDPZ7zrsaGxatkNfAWZkBB7mA.roa (hash: 7oRi0Nn02wFQcMPApE5QBhxhFL6uCRyFUmgPVAE/lvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:29:84:a8:37:60:17:6a:a1:a5:a6:b0:9d:5b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
        Validity
            Not Before: Oct 19 05:01:34 2025 GMT
            Not After : Oct 20 05:01:34 2025 GMT
        Subject: CN=fd84725bd5db759b76201b4f0558e0509eb97043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:a8:b0:e7:34:6b:93:71:bc:a9:55:79:53:
                    4e:3e:b3:9e:ba:09:72:4f:45:e1:ef:b9:10:7f:72:
                    72:b8:94:c2:16:8a:86:ab:69:9c:9f:64:f5:0b:a0:
                    8e:43:aa:eb:2d:b6:2d:22:24:74:57:77:5c:4d:ef:
                    72:87:fb:21:e1:93:67:5e:e2:77:89:5c:eb:f4:7d:
                    74:55:96:e3:b7:22:32:c0:9d:0f:46:70:ae:43:90:
                    75:5c:56:62:ec:94:6c:b5:e6:05:51:5f:ab:d1:3e:
                    e0:d5:ce:11:b8:e5:7b:8b:ed:4c:35:b0:f0:88:af:
                    e9:0f:5a:72:ca:a2:bf:fd:39:d0:50:16:aa:73:88:
                    a5:1d:4f:33:59:2b:37:b9:2d:e4:4e:cc:1f:ad:a9:
                    53:40:89:b9:da:2b:8e:25:43:f3:3e:24:69:20:4e:
                    33:a8:54:c3:87:af:d1:9c:a9:cb:9e:8a:f4:df:48:
                    d6:45:41:3c:c8:5c:f8:84:47:34:75:df:46:f7:c2:
                    02:a5:09:73:67:1d:76:f0:48:2d:39:2b:5c:12:db:
                    89:f6:87:a2:ef:0f:a0:54:ae:a0:86:b1:83:30:2d:
                    41:c3:00:35:fa:c9:e2:21:60:03:65:bf:a2:e6:f6:
                    55:1f:70:fc:6b:ab:6c:04:33:94:07:83:af:a8:e9:
                    ea:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:84:72:5B:D5:DB:75:9B:76:20:1B:4F:05:58:E0:50:9E:B9:70:43
            X509v3 Authority Key Identifier:
                keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f2:f0:c5:3d:f7:87:73:35:38:0b:2e:de:d7:3a:cc:52:5f:
         84:3c:65:57:7d:eb:01:d0:34:9f:a0:9c:0f:51:03:f1:52:77:
         0f:f0:7c:80:e3:aa:1a:63:8e:19:f9:be:1a:73:72:e9:b8:0d:
         8b:92:b4:79:a6:1b:55:08:25:a8:4c:ac:c2:8b:ca:9b:fc:9b:
         de:b5:c2:af:c6:d4:59:8d:36:69:f2:4d:eb:59:d2:a2:81:b2:
         4b:ea:fc:28:09:b5:55:21:ca:6e:0f:e9:bd:44:e8:17:e9:79:
         59:ce:a8:ca:75:fe:8f:54:06:14:55:1a:b3:99:86:8b:54:01:
         3a:d9:8b:58:e6:e2:dc:e7:58:21:a9:78:db:ec:1f:08:0f:58:
         09:3a:6e:8c:97:73:3d:85:57:27:cc:ed:71:27:dc:1a:45:5e:
         1d:3a:fe:de:7f:4f:72:e1:93:db:98:9b:bb:38:f7:c4:f1:98:
         a3:21:a3:51:d1:2a:e2:6f:51:2b:11:00:ed:5a:63:6f:dd:77:
         3d:3e:c2:44:e7:64:6a:72:9e:23:4b:e4:8e:22:b6:70:98:01:
         4d:57:d7:c7:71:65:d5:d2:1f:16:09:8c:56:48:3b:87:80:4b:
         88:28:2d:31:2a:28:c3:70:fb:49:ea:d2:f2:cb:c3:4a:e5:1f:
         8c:c0:96:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:35 2025 by rpki-client