Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File:                     1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier:          DIOOj9KNW9bwuqTm+mLfZBTc80MjvfUB+Da0osOFNKs=
Subject key identifier:   B9:8D:9D:F8:4B:27:2A:B4:B2:1D:DE:C4:55:5B:DC:F3:B0:A2:AF:59
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer:       /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial:       019EBFC87C88B1AC48FAA8DFBAA9669BE4A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number:          08B9
Signing time:             Sat 13 Jun 2026 07:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:47 +0000
Files and hashes:         1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: Wf1Kj+5oHA45idKQVeGpvL0YJiEepJ9LySgffWGvK8U=)
                          2: sFLHZGEgR5B6z0uHo1Ay7Q5_vWs.roa (hash: tswRhyFVxtP5UBE+zxkH0gqlOKm86RXi8OEmfEEgHVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:7c:88:b1:ac:48:fa:a8:df:ba:a9:66:9b:e4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
        Validity
            Not Before: Jun 13 07:00:47 2026 GMT
            Not After : Jun 14 07:00:47 2026 GMT
        Subject: CN=b98d9df84b272ab4b21ddec4555bdcf3b0a2af59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:0c:e0:ce:36:14:d6:f5:bb:a6:da:99:c7:
                    aa:6d:23:3f:9e:06:ee:c9:8c:84:9f:69:e2:22:96:
                    2f:2a:22:10:e4:07:b0:46:35:ad:01:28:03:2a:7e:
                    cf:d2:b6:c2:d5:6b:29:3b:95:7b:69:b9:36:e5:4a:
                    36:d6:50:c6:92:01:7a:4f:c4:1a:76:2c:05:fe:50:
                    9e:fb:84:37:b6:38:7e:bd:a1:65:f8:f3:25:0e:9f:
                    01:d0:83:6a:76:a0:9c:b8:88:da:6e:c8:43:37:a5:
                    32:43:f5:3f:84:7f:bd:12:91:1a:d4:61:63:0f:0c:
                    4d:35:0d:8d:20:57:1a:85:9a:51:a7:e6:b7:ff:4e:
                    d0:10:88:8f:f0:8e:cb:5c:cd:7e:51:a4:2e:95:83:
                    eb:da:cb:60:df:2f:72:54:69:97:df:81:b0:20:94:
                    ab:cc:75:83:85:77:58:fa:66:9f:27:40:72:1a:65:
                    b8:d0:f2:c8:7e:55:9b:d4:21:fc:49:83:e1:75:2a:
                    b3:f1:44:3f:8d:3d:71:ac:5f:97:90:04:80:64:35:
                    81:87:37:43:1e:74:c0:86:0d:23:8f:e4:06:9f:ee:
                    8d:84:1b:f3:24:fd:c5:0d:29:cb:d4:36:eb:b9:1a:
                    bf:61:b4:67:9b:ca:61:d3:46:13:42:a8:c9:fd:0b:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8D:9D:F8:4B:27:2A:B4:B2:1D:DE:C4:55:5B:DC:F3:B0:A2:AF:59
            X509v3 Authority Key Identifier:
                keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:27:57:07:3c:30:ac:10:9c:27:f6:24:63:60:80:cc:53:a5:
         f0:3a:99:63:a0:5c:7d:32:bb:1c:9c:3d:8d:24:5a:f7:ba:2b:
         6e:41:fe:36:2c:9c:86:4a:75:83:d0:8a:24:1a:fa:e5:6d:80:
         48:86:a3:89:85:c5:66:84:75:2c:be:37:57:36:86:1a:9f:73:
         52:3c:7b:b3:7c:ff:63:f7:46:ec:4a:66:67:bd:d5:57:09:9d:
         ae:c6:2e:ad:ec:fd:b0:57:19:e4:d7:d9:b6:b3:23:03:22:37:
         d1:eb:95:af:e5:42:e8:19:df:59:ae:17:87:c2:2b:bc:7b:84:
         87:85:8e:d8:e0:34:2b:d7:2e:6a:43:dc:81:49:ee:16:1b:98:
         b6:90:8e:fc:42:36:02:dd:af:e7:4a:0a:45:c6:19:26:0e:fe:
         4d:2e:bc:c5:1e:73:a9:56:07:f1:b7:c4:85:84:d5:db:f3:bb:
         7b:97:62:34:31:46:73:6b:0e:2b:52:8d:28:54:1e:17:fb:d1:
         7d:2f:b2:28:ab:ae:af:69:a7:2d:50:55:ec:e5:4a:1d:e0:93:
         4d:fa:61:5c:c1:b8:19:b7:eb:d4:8e:7b:8b:a2:af:6b:e3:6f:
         43:69:32:53:24:e7:8a:56:e6:d5:44:0d:84:b4:de:49:97:19:
         ed:f4:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:24:30 2026 by rpki-client