Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File:                     1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier:          p4eFjOtiXWq/6CXpEzV9mb6cGHUA/wyd5VL7FdpastY=
Subject key identifier:   E4:6C:34:42:B4:D3:61:04:EE:7F:1D:B9:06:9D:6D:CE:A5:D7:1D:40
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer:       /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial:       019884310BA6E72FBD2CBDA47FB96CBF7A50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number:          057E
Signing time:             Thu 07 Aug 2025 11:01:03 +0000
Manifest this update:     Thu 07 Aug 2025 11:01:03 +0000
Manifest next update:     Fri 08 Aug 2025 11:01:03 +0000
Files and hashes:         1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: w+xYIDCViWyMRTe4hUYaLCeJd8XcazWF2BYXzsXdNdM=)
                          2: 8UPDPZ7zrsaGxatkNfAWZkBB7mA.roa (hash: 7oRi0Nn02wFQcMPApE5QBhxhFL6uCRyFUmgPVAE/lvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:31:0b:a6:e7:2f:bd:2c:bd:a4:7f:b9:6c:bf:7a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
        Validity
            Not Before: Aug  7 11:01:03 2025 GMT
            Not After : Aug  8 11:01:03 2025 GMT
        Subject: CN=e46c3442b4d36104ee7f1db9069d6dcea5d71d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d0:98:4f:b7:44:0a:65:63:27:2b:cd:ac:f3:
                    2f:d2:e1:db:f3:12:8c:64:c3:0b:c8:97:9c:5a:42:
                    89:fb:36:29:43:64:0c:47:59:34:bd:8b:0e:f6:dd:
                    c9:32:16:74:f4:eb:dc:c1:98:35:c2:64:0b:db:dd:
                    7d:a4:00:98:17:8d:a5:a7:ed:fa:68:7b:f8:61:4d:
                    51:dd:ac:e7:55:4d:8a:0d:27:bf:a0:a8:fd:3d:8f:
                    fb:4e:3e:a7:1d:28:61:58:cd:0d:5f:16:62:d5:81:
                    b7:e1:d8:a1:a0:a0:b9:d5:d6:f8:fe:a3:f1:ee:6d:
                    bf:cd:d8:46:88:9f:73:b9:76:e3:6d:37:03:a5:43:
                    ac:09:39:0e:a3:82:1a:38:9a:8f:c0:78:89:d7:f0:
                    8a:1c:1b:bb:14:8f:a4:45:81:f0:07:d6:40:71:60:
                    08:95:52:42:a4:86:29:ae:29:40:97:b2:c5:2e:64:
                    98:ca:8d:e5:8d:51:0d:a9:bf:44:b6:7a:78:82:f0:
                    4a:cb:5b:58:c0:76:97:fa:6c:7e:9d:3c:d6:b1:95:
                    b8:f8:58:04:82:ab:d6:7c:46:90:08:f9:ec:b2:75:
                    1f:45:8a:d0:73:26:6c:65:4e:a6:2b:ba:1d:cb:83:
                    7d:2a:e3:f6:31:0e:cf:fa:ad:ce:af:85:08:79:80:
                    53:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6C:34:42:B4:D3:61:04:EE:7F:1D:B9:06:9D:6D:CE:A5:D7:1D:40
            X509v3 Authority Key Identifier:
                keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:fa:83:cb:01:98:9b:6e:b6:ea:04:c9:b3:6f:d4:53:4f:76:
         64:f2:05:61:9a:e0:a3:39:36:de:35:f1:28:70:68:04:d4:96:
         43:9b:9e:df:41:43:39:52:2a:1b:84:2c:5d:63:b7:7f:7e:af:
         e7:33:62:f5:91:4d:e0:aa:35:15:26:7c:f4:0a:89:f9:c4:b2:
         1a:70:cb:48:a3:82:c4:1c:33:6a:59:e1:45:4c:bb:dc:d6:40:
         c9:49:f2:46:e6:07:60:86:62:1f:f1:04:70:3b:61:99:d6:c6:
         ac:24:5a:4e:a8:16:49:27:a2:3b:e3:d1:32:da:e0:c2:20:f7:
         1b:95:f8:ea:8c:46:d7:ee:3f:70:c5:5e:6c:9b:c0:44:d0:3f:
         80:aa:bd:52:34:05:41:85:8d:ea:f9:38:1d:fa:0a:b4:4e:13:
         15:76:39:08:11:75:81:02:f0:dd:f5:f8:f8:9a:8e:45:2a:c6:
         a1:c5:27:29:77:5a:c4:09:a6:eb:fa:5d:d3:eb:14:64:e8:b8:
         dd:98:55:21:0d:75:11:a9:70:8e:4f:b5:8e:2d:7f:0b:cb:27:
         13:2e:6e:ca:ce:20:62:91:a5:b6:de:e2:20:90:66:89:07:5a:
         c6:f6:4e:0b:1d:6e:28:38:5c:55:f5:9e:db:27:72:97:1d:0e:
         01:02:35:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:15:25 2025 by rpki-client