Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File:                     1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier:          KdYA4qPULclu64ZaoOU58kDOVmoLKROgwL9K/kcksj8=
Subject key identifier:   BB:3B:EF:09:15:4F:C5:8C:3A:F3:68:8D:E6:DD:B3:9D:C0:4D:07:F7
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer:       /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial:       019E30E0D84CFFC35A5EBC07A64F9A1A62B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number:          086F
Signing time:             Sat 16 May 2026 13:01:42 +0000
Manifest this update:     Sat 16 May 2026 13:01:42 +0000
Manifest next update:     Sun 17 May 2026 13:01:42 +0000
Files and hashes:         1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: Qhu5vs//XPZW7ghrlDcjwdPwmxPzGKBxgKhZ/HUkKPs=)
                          2: sFLHZGEgR5B6z0uHo1Ay7Q5_vWs.roa (hash: tswRhyFVxtP5UBE+zxkH0gqlOKm86RXi8OEmfEEgHVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:d8:4c:ff:c3:5a:5e:bc:07:a6:4f:9a:1a:62:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
        Validity
            Not Before: May 16 13:01:42 2026 GMT
            Not After : May 17 13:01:42 2026 GMT
        Subject: CN=bb3bef09154fc58c3af3688de6ddb39dc04d07f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:ff:7e:58:5b:94:11:c5:b2:3b:87:1e:0f:
                    13:0f:bf:b7:e4:cc:b7:df:1b:c2:bc:87:a0:47:f1:
                    a6:41:65:95:91:2d:89:8a:5a:e9:7e:6b:5d:85:40:
                    b5:4f:c2:7c:70:91:f5:bf:9a:d7:72:1e:49:57:2e:
                    ea:ec:3a:9e:3d:9b:53:bb:ec:ae:16:5e:87:32:61:
                    37:45:17:3b:5d:46:f3:58:31:57:9e:3d:84:72:a9:
                    87:02:69:7d:66:8d:1c:d7:d8:b3:1b:5a:46:7a:17:
                    e8:b2:5b:03:c1:3c:ee:29:43:71:3a:ca:89:ad:65:
                    1a:b3:f5:a9:12:59:88:d7:20:69:d8:eb:cd:3a:97:
                    07:cb:b6:ce:bf:b2:25:b6:12:cf:2b:e7:d0:21:55:
                    40:a1:55:33:3b:56:03:c0:fd:36:3b:4c:e0:10:1d:
                    32:86:a0:9e:00:70:fa:04:d1:ba:b8:68:a0:59:91:
                    1e:3f:55:93:01:34:95:d4:11:8a:da:97:6e:10:39:
                    87:a5:08:de:bd:ec:be:dc:ba:74:d8:e3:5b:8f:d1:
                    2a:7f:52:e9:37:72:75:8d:fe:88:a4:d3:3f:8e:fb:
                    77:7d:5e:4c:5f:e5:79:8a:d9:08:3a:05:63:1e:42:
                    f9:1a:ea:bd:84:ee:12:cc:ac:48:99:2c:3d:f8:a0:
                    44:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3B:EF:09:15:4F:C5:8C:3A:F3:68:8D:E6:DD:B3:9D:C0:4D:07:F7
            X509v3 Authority Key Identifier:
                keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:00:a9:fc:19:1a:b1:77:22:49:29:5a:a5:80:64:8a:bf:5c:
         31:70:40:ae:f2:3b:6e:a7:d7:70:e6:f9:96:47:73:b2:89:ce:
         dc:3b:62:f1:2c:7d:0a:81:97:b8:13:5e:55:70:8d:a0:6d:e7:
         75:84:22:96:63:35:08:8a:f7:be:d1:a8:80:ae:65:bf:4b:77:
         5a:85:2e:32:aa:4a:28:f0:ff:ab:ef:96:b3:3c:3d:c7:17:6c:
         52:2d:22:20:09:35:1b:78:2d:b4:f2:fa:e3:80:0c:3c:34:93:
         8b:f2:3e:14:4a:55:9b:43:23:24:88:0b:ae:87:de:d2:e1:f3:
         e3:ff:b5:69:8d:cf:c9:ad:2f:37:69:3f:4a:3a:9d:de:29:1e:
         47:c0:d1:14:f6:b1:73:ae:8d:21:4b:ce:95:e3:f9:4f:aa:00:
         6b:d8:c2:1e:cc:75:81:a1:a4:85:88:33:42:cf:d4:c8:08:50:
         4c:28:06:81:71:9c:64:7d:49:6d:80:6b:9d:f8:82:7e:ce:9d:
         88:db:3c:cf:60:ff:9a:80:04:6c:8c:92:30:43:7b:1a:5c:88:
         66:28:50:cb:fc:f1:3c:05:35:8e:59:c5:d6:04:f7:ff:cd:00:
         0b:79:f7:9a:55:11:d9:2d:90:74:92:8c:a7:da:37:ed:9d:39:
         79:86:32:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:50 2026 by rpki-client