Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
File:                     OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json)
Hash identifier:          DqmKl5PJhJPZ33kz35yTYIjNp+xDKSNYeHyBsviW4DU=
Subject key identifier:   0C:AB:3C:44:B2:D1:8B:E6:DF:82:08:DC:04:AE:67:B8:60:A4:C4:16
Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
Certificate issuer:       /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Certificate serial:       019747799E5113EE4CA1DAD89F14EEF6D369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
Manifest number:          1579
Signing time:             Fri 06 Jun 2025 23:00:41 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:41 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:41 +0000
Files and hashes:         1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: EgwHIUdwHW2d3gq/XQT5oEN54Tjj/Fmg9XsCLZ4pnx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 23:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:9e:51:13:ee:4c:a1:da:d8:9f:14:ee:f6:d3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
        Validity
            Not Before: Jun  6 23:00:41 2025 GMT
            Not After : Jun  7 23:00:41 2025 GMT
        Subject: CN=0cab3c44b2d18be6df8208dc04ae67b860a4c416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ac:46:40:1c:78:be:5c:39:9d:b1:f8:7f:c1:
                    3b:6b:42:9e:1c:11:9d:2c:b5:c6:72:54:cd:0c:b8:
                    e1:05:24:72:f1:94:6a:c3:b6:2a:fc:0e:5e:16:84:
                    e9:f2:21:6b:4e:c0:de:a7:3d:13:87:a6:f0:0c:5e:
                    7c:70:d0:18:6f:ed:0b:59:3b:f8:50:fc:c4:e4:0c:
                    8f:90:c1:e4:83:d1:79:d5:ce:e5:24:4d:bc:00:3c:
                    dc:d6:57:3b:36:7d:aa:ba:13:4d:90:9a:c5:b2:dc:
                    c8:36:15:02:e5:14:77:a0:66:2d:b4:0f:57:88:c4:
                    ac:69:fa:91:15:28:c1:81:43:80:ea:73:a7:89:79:
                    a9:ac:fa:84:e7:61:ef:c5:28:4c:ea:ab:3d:9a:16:
                    fb:5f:c5:ca:74:2c:76:6f:66:32:49:5f:05:fa:a5:
                    e2:57:8f:76:f7:69:27:ab:5b:06:d3:81:d2:af:38:
                    ed:1f:76:51:85:3d:a4:00:f9:a2:a1:58:35:71:de:
                    aa:c3:73:a4:97:33:33:16:5d:6b:6f:bb:11:62:20:
                    ae:2f:10:2c:d5:31:86:c0:7c:7e:14:3b:2e:55:fb:
                    d1:2d:9d:ab:b7:3b:82:8d:00:ea:f5:5d:09:4d:df:
                    9a:60:a4:b4:7d:63:c8:d2:4b:f8:68:c8:38:be:88:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AB:3C:44:B2:D1:8B:E6:DF:82:08:DC:04:AE:67:B8:60:A4:C4:16
            X509v3 Authority Key Identifier:
                keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:4e:17:c5:55:6b:e5:b0:5e:c3:6b:aa:8a:7b:43:44:4a:1a:
         75:89:39:c8:63:af:7c:91:bf:5f:7d:c7:27:73:eb:af:54:35:
         6d:01:4d:97:3d:64:2e:68:41:bf:de:be:6d:3b:cc:de:0b:6a:
         59:e8:0b:05:13:a8:9f:36:68:18:4d:d6:d8:cd:b1:f5:e5:88:
         b3:ea:ce:ee:22:75:b9:12:bc:44:64:61:14:8d:a5:18:9f:ce:
         44:eb:61:1d:50:a9:49:7e:69:51:52:ff:81:8d:cf:63:35:da:
         1a:e6:ad:44:aa:ab:c1:75:15:c0:5e:8c:db:96:6e:8b:d6:ad:
         0a:77:81:87:19:ed:ba:a0:6b:c9:ea:84:37:0e:13:da:a9:91:
         f0:cc:e1:34:56:5d:5b:58:e7:06:7f:95:43:56:60:da:6f:57:
         c1:1d:34:01:80:0f:c8:aa:df:d4:7a:81:65:13:b4:2b:69:38:
         c8:d9:75:9c:6f:9d:31:d4:ca:03:0c:a8:c8:d4:17:a2:dd:0e:
         15:79:c8:bf:80:41:26:d8:49:6e:18:0b:31:7e:c5:14:28:27:
         92:fa:1c:79:ad:7c:ec:60:1c:8b:b5:82:61:33:88:df:b8:51:
         18:d3:b2:9a:22:64:72:d2:1d:f0:8c:d4:ad:50:52:1d:b9:de:
         1b:a4:8c:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeZ5RE+5ModrYnxTu9tNpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjQwMzBiZjIzMGJkNTZkM2ZlM2UyOWMxODg4MWJhMzJm
YWU3YTIwHhcNMjUwNjA2MjMwMDQxWhcNMjUwNjA3MjMwMDQxWjAzMTEwLwYDVQQD
EygwY2FiM2M0NGIyZDE4YmU2ZGY4MjA4ZGMwNGFlNjdiODYwYTRjNDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKxGQBx4vlw5nbH4f8E7a0KeHBGd
LLXGclTNDLjhBSRy8ZRqw7Yq/A5eFoTp8iFrTsDepz0Th6bwDF58cNAYb+0LWTv4
UPzE5AyPkMHkg9F51c7lJE28ADzc1lc7Nn2quhNNkJrFstzINhUC5RR3oGYttA9X
iMSsafqRFSjBgUOA6nOniXmprPqE52HvxShM6qs9mhb7X8XKdCx2b2YySV8F+qXi
V49292knq1sG04HSrzjtH3ZRhT2kAPmioVg1cd6qw3OklzMzFl1rb7sRYiCuLxAs
1TGGwHx+FDsuVfvRLZ2rtzuCjQDq9V0JTd+aYKS0fWPI0kv4aMg4vogh9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyrPESy0Yvm34II3ASuZ7hgpMQWMB8GA1UdIwQY
MBaAFDlkAwvyML1W0/4+KcGIgboy+ueiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dRRENfSXd2VmJUX2o0cHdZaUJ1akw2NTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xZGQyNmQtZWFlNS00ZTE5LWFjMzUt
Yzk5M2ZkZmM0YTBiLzEvT1dRRENfSXd2VmJUX2o0cHdZaUJ1akw2NTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xZGQyNmQtZWFlNS00ZTE5LWFjMzUtYzk5M2ZkZmM0YTBi
LzEvT1dRRENfSXd2VmJUX2o0cHdZaUJ1akw2NTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPk4XxVVr
5bBew2uqintDREoadYk5yGOvfJG/X33HJ3Prr1Q1bQFNlz1kLmhBv96+bTvM3gtq
WegLBROonzZoGE3W2M2x9eWIs+rO7iJ1uRK8RGRhFI2lGJ/OROthHVCpSX5pUVL/
gY3PYzXaGuatRKqrwXUVwF6M25Zui9atCneBhxntuqBryeqENw4T2qmR8MzhNFZd
W1jnBn+VQ1Zg2m9XwR00AYAPyKrf1HqBZRO0K2k4yNl1nG+dMdTKAwyoyNQXot0O
FXnIv4BBJthJbhgLMX7FFCgnkvocea187GAci7WCYTOI37hRGNOymiJkctId8IzU
rVBSHbneG6SM3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:03 2025 by rpki-client