Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File:                     1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier:          FEeLFnAHvCCLueNIvn6yem1HrdB6oMJyav/lETOq89I=
Subject key identifier:   36:CC:9B:AD:3A:BA:DB:E5:60:80:96:21:1A:46:D8:5D:54:12:43:83
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer:       /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial:       019F905AA788D703964C369C70B4D31E3A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number:          0925
Signing time:             Thu 23 Jul 2026 19:01:27 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:27 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:27 +0000
Files and hashes:         1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: NJ7v3GZvFIshoY7k6ef09O2NF4dfQJ1psx8BBz4rtog=)
                          2: sFLHZGEgR5B6z0uHo1Ay7Q5_vWs.roa (hash: tswRhyFVxtP5UBE+zxkH0gqlOKm86RXi8OEmfEEgHVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:a7:88:d7:03:96:4c:36:9c:70:b4:d3:1e:3a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
        Validity
            Not Before: Jul 23 19:01:27 2026 GMT
            Not After : Jul 24 19:01:27 2026 GMT
        Subject: CN=36cc9bad3abadbe5608096211a46d85d54124383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:c5:26:75:c6:51:48:d0:b9:bd:eb:95:59:
                    22:aa:ec:3e:1a:04:f9:ee:2d:af:63:96:38:ec:e3:
                    4d:4c:e0:98:1a:ab:3e:d6:5e:51:12:e0:f5:e7:63:
                    72:45:45:a7:fc:fa:94:1f:b7:48:10:65:92:ef:2b:
                    9d:32:b5:b3:43:08:84:ca:1a:d8:d4:b8:5d:74:70:
                    36:39:47:fc:c8:bd:56:8d:f7:09:a5:5e:d8:e1:d2:
                    e8:e8:10:3a:1b:1a:20:66:4b:c5:ce:8a:11:88:31:
                    ed:27:ca:fb:87:3e:2c:f7:b0:51:3f:2e:91:39:c3:
                    9e:86:f5:a0:ae:69:44:1c:20:ed:0c:d3:09:8c:c9:
                    1c:11:7f:03:45:03:4f:e5:b2:2c:f1:33:a1:7b:3d:
                    f6:92:49:96:d0:ba:e5:67:db:54:cf:67:fb:17:4f:
                    d4:60:85:fd:45:b8:fd:88:87:d8:3e:f5:41:aa:dd:
                    09:56:ac:1f:ef:6e:22:22:68:8d:38:9f:d3:6f:17:
                    90:61:76:5c:ef:fb:96:d8:67:09:9c:0e:ba:48:b4:
                    c0:35:3d:83:52:47:f0:e8:ef:8a:20:3c:24:bc:22:
                    44:07:2a:59:f3:65:18:fe:46:7b:5a:19:30:6d:73:
                    6e:8d:9e:0e:3c:a5:04:8e:b6:e0:a3:a4:d1:f4:9a:
                    eb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CC:9B:AD:3A:BA:DB:E5:60:80:96:21:1A:46:D8:5D:54:12:43:83
            X509v3 Authority Key Identifier:
                keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:1e:a0:7c:b6:39:d9:8a:58:7a:19:b4:cc:f5:2e:e1:ca:1d:
         c6:64:9f:92:0b:ea:19:86:35:11:c9:2a:cf:7a:1a:4e:da:a0:
         a9:61:00:af:c9:1d:30:eb:7e:4b:3c:35:74:da:88:23:5c:08:
         c4:85:66:ca:3f:99:98:eb:b8:95:47:a6:c6:93:ae:fc:31:1a:
         41:23:66:e9:44:25:ad:dd:ef:67:4b:cf:61:69:68:97:fd:c5:
         4c:59:29:2b:d9:d4:40:4a:28:7f:f6:2f:47:6a:f5:2e:55:14:
         7b:51:28:36:47:ca:69:a5:48:7c:06:ed:8b:1e:16:02:ac:bc:
         5b:0c:96:80:b1:f3:07:9a:ce:08:21:67:4c:81:e8:bc:e3:4d:
         f1:13:e6:30:5a:d8:c3:a0:da:4c:db:b2:40:d3:7c:96:1f:92:
         6d:5d:be:d6:2d:3a:31:c5:b7:5f:e8:20:ef:4c:97:5d:4c:c4:
         62:de:a6:2d:5c:17:96:f8:30:f5:c8:b9:a1:5a:92:ed:a3:b9:
         4d:40:d0:44:b4:7d:5a:e9:a9:fe:9e:ae:94:31:a3:2c:c7:93:
         c2:25:26:5a:a4:4c:a1:79:16:55:e0:37:eb:8b:08:b5:4e:d4:
         19:c8:48:06:40:7c:36:18:c9:0a:a2:40:84:5c:4b:b0:23:4a:
         c6:7d:05:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:46 2026 by rpki-client