Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
File:                     OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json)
Hash identifier:          7c4IStKZCRVt/aCn1L6z5CT1CpI/45PEHuylSZMclwI=
Subject key identifier:   E0:E1:F5:EE:08:47:7F:4A:CE:EB:94:CA:04:1C:B0:DD:4F:83:08:D1
Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
Certificate issuer:       /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Certificate serial:       0199228C32B190C312578D0C7AA43FDBBF23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 05:00:37 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:37 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:37 +0000
Files and hashes:         1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: 6unVieyblkSDuYiOPCsRcoF/LxYi8uzs4BHPfbIBgow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:32:b1:90:c3:12:57:8d:0c:7a:a4:3f:db:bf:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
        Validity
            Not Before: Sep  7 05:00:37 2025 GMT
            Not After : Sep  8 05:00:37 2025 GMT
        Subject: CN=e0e1f5ee08477f4aceeb94ca041cb0dd4f8308d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:57:b8:97:4d:e1:ff:2c:5f:3a:df:34:e3:
                    72:b7:b1:93:47:00:d6:ac:78:f4:96:9d:fb:63:af:
                    f9:16:78:85:6a:5f:62:3a:0e:1a:7d:00:95:85:90:
                    cc:dd:be:26:a5:5f:e8:8f:6a:5b:6e:5e:bf:a1:51:
                    40:04:9b:dd:d8:cf:7b:d5:19:23:c9:a2:b5:9a:41:
                    fd:f7:8d:6b:08:37:81:6e:8c:1a:bd:1d:23:5f:54:
                    4c:fa:0e:ba:4e:5d:55:2f:f7:1d:ba:68:53:0a:92:
                    20:c4:4c:8d:57:e0:84:1c:be:dc:3a:ec:ae:56:de:
                    fa:ed:b1:21:39:a7:81:45:88:84:34:ad:1c:e2:aa:
                    0b:bf:bd:7d:c6:39:b5:94:6b:5f:68:f4:4a:5c:ab:
                    e4:63:0f:20:43:98:46:c5:c3:19:44:c5:26:be:ab:
                    53:b5:82:05:6f:81:d2:ed:f6:69:06:72:cf:d8:82:
                    9d:da:28:47:bb:ec:24:9e:da:81:af:31:9f:d7:ed:
                    2b:ea:54:8b:4b:c4:c1:ba:8e:41:c4:00:61:da:53:
                    f2:9a:4a:21:57:38:3e:41:f4:ea:27:56:4b:b1:db:
                    91:03:d0:f7:e0:d3:ba:37:5c:f6:16:b7:5e:d0:b6:
                    ae:25:3c:67:0f:15:71:fa:8b:40:84:dd:f0:57:31:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E1:F5:EE:08:47:7F:4A:CE:EB:94:CA:04:1C:B0:DD:4F:83:08:D1
            X509v3 Authority Key Identifier:
                keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:26:8d:7d:03:15:6a:0f:9c:f8:c5:14:ef:25:50:c1:cc:39:
         0f:37:ba:b5:44:ab:d9:bf:76:72:79:02:9e:27:15:c3:a1:67:
         10:99:0c:0b:49:a6:68:a4:fd:a8:cf:fb:43:5c:b2:a1:fd:d9:
         6d:9f:1f:b9:bb:19:70:f5:da:e1:04:12:16:fd:12:a0:19:b9:
         d2:83:ab:71:a0:39:7d:ab:7d:3d:e4:49:3b:4c:4b:b7:87:75:
         06:dc:e6:48:97:8e:ea:b4:32:a9:19:e7:bd:54:c4:98:50:38:
         13:c0:4a:b8:4b:ee:a8:90:9c:59:f3:fa:42:d3:38:08:04:72:
         7d:f3:08:bb:58:e0:14:33:fa:ce:a3:e7:04:9e:8a:ed:45:5a:
         fc:b5:f3:59:5b:92:d5:1d:04:e7:1d:6c:81:9e:d9:bb:34:fc:
         92:d4:61:dc:8a:19:23:ab:85:0b:4b:0c:d8:38:93:ef:be:e6:
         ae:cc:c8:32:18:b8:a7:11:05:0a:7a:e7:4f:e8:a5:54:60:92:
         18:8f:64:38:20:1a:2e:3e:a6:5e:da:d6:a7:d1:5f:e7:f0:59:
         09:a3:5f:18:00:88:b4:c9:ae:f3:bc:16:a4:af:bb:c7:ff:ed:
         dd:d7:ef:c6:10:3e:03:7f:47:b4:ab:e0:67:c2:24:61:3c:67:
         0d:60:5d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:27 2025 by rpki-client