Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File:                     1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier:          w5lvxtHjG3ZpnGIpdu4vffAUwLSAPkHFZCUqPv5A3wo=
Subject key identifier:   FA:C6:9B:90:CE:AD:E7:D7:1D:E0:D5:B9:12:B2:70:B9:9B:54:CC:01
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer:       /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial:       019771F5E69747EE731F65198D7AABB504A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number:          04F0
Signing time:             Sun 15 Jun 2025 05:00:30 +0000
Manifest this update:     Sun 15 Jun 2025 05:00:30 +0000
Manifest next update:     Mon 16 Jun 2025 05:00:30 +0000
Files and hashes:         1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: 8xO6t8mU91qT+ZrEklwyDiYFqXd6qg7a7gndZLXIK+w=)
                          2: 8UPDPZ7zrsaGxatkNfAWZkBB7mA.roa (hash: 7oRi0Nn02wFQcMPApE5QBhxhFL6uCRyFUmgPVAE/lvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f5:e6:97:47:ee:73:1f:65:19:8d:7a:ab:b5:04:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
        Validity
            Not Before: Jun 15 05:00:30 2025 GMT
            Not After : Jun 16 05:00:30 2025 GMT
        Subject: CN=fac69b90ceade7d71de0d5b912b270b99b54cc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:c1:51:c5:07:f4:83:5c:6d:91:c1:a3:bf:
                    42:78:e8:49:33:63:20:bc:3c:84:58:6a:79:0e:41:
                    53:f3:0a:4e:28:d0:b9:44:38:f4:ce:b8:b2:4c:57:
                    1c:29:46:4b:9a:f7:34:d0:d7:71:60:86:16:14:bf:
                    df:ba:d4:69:61:46:fd:bf:e4:eb:07:61:70:f0:2e:
                    dd:84:8e:4f:b8:b0:58:39:11:21:0b:2d:31:6f:57:
                    0e:4d:b2:34:d5:87:41:3c:7f:01:69:43:cb:66:cd:
                    25:29:e5:35:b7:bb:c5:1c:a2:81:83:9e:53:43:76:
                    73:00:b2:27:f3:2f:25:dc:40:d8:b5:f3:a3:dd:42:
                    c7:4f:c5:34:02:e7:8b:34:28:02:03:99:47:ca:dd:
                    75:98:0d:68:86:8b:e5:c0:49:15:9a:53:a6:11:b0:
                    aa:60:51:09:86:c9:e0:28:1e:f4:b1:34:62:2b:61:
                    a1:de:ea:5b:b3:61:65:3c:ab:56:06:94:fa:67:0a:
                    0b:d9:42:c1:45:43:17:07:61:84:c6:27:c5:5b:8b:
                    47:15:f2:6c:a3:f4:3c:fb:7f:f0:6f:a1:aa:61:4e:
                    30:a9:aa:49:14:23:33:9b:74:5c:ad:50:96:3f:d3:
                    e3:00:66:b4:53:fb:01:f6:98:87:d9:30:48:86:e2:
                    4a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C6:9B:90:CE:AD:E7:D7:1D:E0:D5:B9:12:B2:70:B9:9B:54:CC:01
            X509v3 Authority Key Identifier:
                keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fb:14:22:03:de:1d:95:59:50:63:17:ce:23:18:31:77:8c:
         99:99:a9:75:24:8c:eb:2d:6d:65:5f:1f:7e:3e:e4:19:50:b9:
         06:b4:d9:a7:9c:1d:fd:e6:94:2c:e3:49:f6:3a:17:8b:59:62:
         a1:f8:9f:7b:eb:03:9e:ec:5c:f4:e3:25:46:8a:59:8a:a1:b8:
         4a:a5:12:80:9b:d8:2b:29:19:ed:29:0e:4d:f4:ae:e9:b4:73:
         bf:19:f7:de:42:d4:ca:6c:b2:3e:fc:34:83:47:37:1a:20:ef:
         57:16:b7:95:f3:aa:95:99:a0:f3:fa:63:fa:f2:50:99:29:ff:
         f8:37:14:3c:8c:fe:72:a8:83:79:c6:1c:a2:76:fb:0c:fd:94:
         bf:c4:67:05:9f:53:fe:15:15:68:84:63:1c:0a:80:c0:57:9b:
         98:0a:76:c3:ba:a2:5e:c2:7f:54:09:96:59:b4:76:67:ea:b4:
         b3:e7:da:07:7f:ca:29:85:9b:1f:30:0e:de:f8:3e:cf:f8:c5:
         1e:87:98:ca:08:fc:ed:49:7a:da:e4:3d:a7:00:aa:24:11:2b:
         49:1e:d0:eb:a9:ef:bf:ce:7f:f2:99:33:57:99:e8:92:2a:8b:
         8d:79:2b:50:08:2c:e6:f2:b7:e4:dc:14:54:a1:29:31:1e:51:
         86:49:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:25:08 2025 by rpki-client