Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File:                     1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier:          jb8EHwuDzsfQYQMvgAjbXiz68I85GR4ZQRlztkWch9I=
Subject key identifier:   C4:E0:C1:23:46:53:67:06:8E:75:B2:BF:FC:CB:03:66:D2:68:7B:1C
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer:       /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial:       01A0024B204F3CEC69A3B808DAEFC0C4B135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number:          0960
Signing time:             Fri 14 Aug 2026 22:01:12 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:12 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:12 +0000
Files and hashes:         1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: tK/i50WhbGlVy8wbJO4bDNLD2TH53VcsxQyCb4FqlOk=)
                          2: sFLHZGEgR5B6z0uHo1Ay7Q5_vWs.roa (hash: tswRhyFVxtP5UBE+zxkH0gqlOKm86RXi8OEmfEEgHVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:20:4f:3c:ec:69:a3:b8:08:da:ef:c0:c4:b1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
        Validity
            Not Before: Aug 14 22:01:12 2026 GMT
            Not After : Aug 15 22:01:12 2026 GMT
        Subject: CN=c4e0c123465367068e75b2bffccb0366d2687b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:91:93:83:80:11:16:f3:84:1a:97:27:cd:39:
                    a5:cc:a3:3f:3d:7f:55:93:69:15:7e:8d:2d:12:72:
                    92:68:90:05:4c:9f:a6:61:4e:cd:9e:fa:a1:9b:f1:
                    2d:eb:9a:f5:a1:d0:14:06:67:6c:8d:c5:d4:82:2f:
                    70:66:ce:a2:80:cb:2e:0f:d0:c8:cf:52:e4:b6:e9:
                    c8:d7:9d:cb:b8:b7:62:bf:cc:6a:d4:95:4d:bd:0f:
                    e1:8a:12:ce:10:d2:98:82:02:22:24:a3:27:53:39:
                    9e:41:c9:15:8c:89:5c:eb:53:90:50:c9:24:b3:cd:
                    a0:cd:41:04:ee:f0:6b:40:a0:d1:21:01:bd:6d:5d:
                    5d:7f:3a:24:e1:8b:a0:50:31:0d:74:bf:c2:88:94:
                    8a:19:9a:22:0c:28:9b:fd:84:e8:50:4d:ff:65:f0:
                    f0:01:31:5a:66:c4:5f:fa:d6:83:43:05:72:50:fd:
                    02:17:98:ef:dd:b7:fb:b8:d2:89:04:20:36:b8:15:
                    18:0d:01:d8:da:ce:50:59:ad:23:37:b3:28:5c:a6:
                    e6:25:07:4f:84:6b:cd:3f:56:49:b2:cb:d3:9f:99:
                    76:a5:0a:cc:8d:ad:40:24:df:67:61:2d:43:6e:ce:
                    81:50:cf:f3:6b:5d:b2:33:4f:c5:ea:e0:7c:48:c9:
                    95:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E0:C1:23:46:53:67:06:8E:75:B2:BF:FC:CB:03:66:D2:68:7B:1C
            X509v3 Authority Key Identifier:
                keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5d:46:5c:6c:79:ab:13:4d:2c:e0:f7:88:3a:c3:cb:80:e6:
         41:7a:73:9e:84:47:e4:90:d4:84:6a:77:25:b0:37:63:ea:78:
         07:1c:39:6f:98:64:44:47:ab:e6:7c:87:ea:1e:80:1b:46:c3:
         7c:35:31:71:d4:d4:f4:f3:d4:7b:a5:e2:d3:71:b9:ab:a8:b1:
         c1:90:f4:8e:a5:d2:b9:77:16:a2:00:fb:8f:92:82:8e:c9:05:
         d2:1c:d5:94:ff:b9:69:9e:d0:ed:0f:56:cd:0c:a2:d5:9e:1d:
         71:66:b7:93:29:c4:8a:c1:2d:15:22:cf:a1:1b:95:32:5d:78:
         0c:66:b7:63:af:6e:56:10:c1:4f:92:b5:f7:f2:ab:ef:6d:32:
         31:e4:04:0c:00:67:06:0e:2b:45:0d:43:e4:17:fb:de:06:e2:
         b3:10:97:ef:e3:3b:e8:4e:47:30:e9:79:65:93:ab:67:c4:90:
         4a:72:b0:fe:d7:e7:11:db:a5:82:1b:9b:f7:24:33:af:1a:a5:
         c0:9e:96:f1:95:5c:f7:9e:f8:e1:3e:dd:e9:7c:d2:88:50:41:
         61:09:77:c7:10:14:19:23:8b:2c:ae:22:02:0f:45:2d:47:fd:
         43:ed:e1:61:e2:36:ca:f1:83:51:28:de:59:f9:c5:4c:04:bf:
         8f:25:01:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:34:08 2026 by rpki-client