Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File:                     1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier:          V3Ygd6W5mDwgWrJoD4chyo1QKk337FKVhi3IISFYM5s=
Subject key identifier:   5E:BB:A4:26:43:3C:8D:CD:24:00:C6:4D:77:8B:2F:76:15:A8:49:B4
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer:       /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial:       019D9A3E0EE29745FA4ACBEF7069B3AF34EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number:          0821
Signing time:             Fri 17 Apr 2026 07:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:51 +0000
Files and hashes:         1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: xbGusCAzYeVGdLtEDopNAomp1XlqZFd+walxy90u/FM=)
                          2: sFLHZGEgR5B6z0uHo1Ay7Q5_vWs.roa (hash: tswRhyFVxtP5UBE+zxkH0gqlOKm86RXi8OEmfEEgHVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:0e:e2:97:45:fa:4a:cb:ef:70:69:b3:af:34:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
        Validity
            Not Before: Apr 17 07:00:51 2026 GMT
            Not After : Apr 18 07:00:51 2026 GMT
        Subject: CN=5ebba426433c8dcd2400c64d778b2f7615a849b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5c:9d:fc:47:e8:4c:c5:fa:38:ea:3a:c6:4c:
                    aa:ae:4c:fe:52:da:ce:35:5f:06:76:ce:f2:e5:d6:
                    56:48:89:4a:c9:3a:32:55:19:35:7c:0e:3f:1e:a8:
                    7a:1a:5b:29:ae:1d:9f:08:d3:ab:e9:90:72:bb:78:
                    50:f6:9d:66:44:ac:0c:4d:ea:3d:ae:c6:22:d9:c6:
                    49:69:ae:c6:9e:6c:5f:3a:bc:b7:d1:26:a3:d9:f8:
                    b4:88:96:ad:d1:6d:d2:fd:6e:c8:6c:40:0a:52:d7:
                    15:cf:ed:cc:24:97:21:ef:62:ee:87:c7:64:aa:57:
                    b2:3f:18:31:1a:6b:a8:89:0b:7e:97:71:04:68:87:
                    03:87:d7:3a:fc:5e:53:dd:ea:47:3b:4d:99:d2:c8:
                    43:dc:ca:c2:3a:26:c9:f3:2d:bc:23:b0:93:dc:be:
                    99:1f:a9:b6:bd:e3:73:2c:c9:3a:58:df:0b:ed:11:
                    ce:d9:48:db:3d:be:c8:6a:1d:57:0f:e6:71:81:f0:
                    4c:48:50:dd:d6:f4:fd:57:62:2b:85:7c:4e:46:e6:
                    2c:b2:64:32:45:69:07:1e:40:61:4b:39:69:b4:51:
                    4d:b9:94:f7:9a:65:59:22:ac:92:c6:4c:1f:0a:9c:
                    01:d9:f4:59:80:a5:1d:d1:b2:53:54:de:d2:90:07:
                    c7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BB:A4:26:43:3C:8D:CD:24:00:C6:4D:77:8B:2F:76:15:A8:49:B4
            X509v3 Authority Key Identifier:
                keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b5:0b:38:f8:29:1e:e1:04:94:5d:ee:8f:56:ab:9a:84:e3:
         04:6d:34:31:07:6d:c0:50:2b:fd:85:2e:8c:70:84:91:0d:b3:
         6c:e5:e4:8c:f5:6a:17:ae:d2:04:e8:e5:84:9c:12:95:1d:1d:
         1b:e0:bb:ac:54:50:83:a0:95:20:87:91:a9:8d:64:a4:da:33:
         5f:00:cc:b1:72:3b:b8:72:37:94:86:95:0b:ba:ab:71:b8:b3:
         9b:d8:29:60:08:ea:bd:80:a8:45:44:aa:ad:a6:8e:6a:62:2b:
         0e:74:9e:01:1f:68:f6:a8:5a:58:2a:85:0d:73:06:eb:3e:dd:
         e2:3f:83:1b:b4:5e:f9:d0:5b:7f:9b:58:38:f6:f4:0c:f4:2e:
         5d:71:4d:0c:b0:84:0a:6e:45:5a:cd:0f:34:c1:94:1b:cc:14:
         7d:5d:5f:72:fd:16:6a:9c:7c:8f:e6:28:19:94:77:bf:19:f0:
         86:fb:7b:00:2b:e6:8b:cf:d8:fd:a9:09:72:90:80:48:10:c9:
         90:6f:30:18:9c:2a:b0:00:18:a8:ef:b7:2c:a6:f1:ee:fd:66:
         62:a4:27:94:9b:95:cc:89:1a:15:76:40:5d:f0:4a:58:43:94:
         9f:0b:3c:a0:d7:3d:e7:5b:5b:42:a2:e3:a9:c5:e7:f5:1a:0b:
         3d:bb:c6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:03 2026 by rpki-client