Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
File:                     OwmORe9LtdGNvIbFoTX1fry-AF0.mft (raw, json)
Hash identifier:          sf0//mY1Qu0zk75f5jXPGkyl8UDcRnSDGGL3TVNAIcI=
Subject key identifier:   F4:A2:78:B4:52:08:6C:27:DE:E9:C6:6C:AC:92:98:8C:88:BA:9C:95
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Certificate issuer:       /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial:       01973CBEC443499549D461FF6983D3434CBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
Manifest number:          0BCE
Signing time:             Wed 04 Jun 2025 21:00:24 +0000
Manifest this update:     Wed 04 Jun 2025 21:00:24 +0000
Manifest next update:     Thu 05 Jun 2025 21:00:24 +0000
Files and hashes:         1: 0CU8gK0M0FreSaI70cF5ooIUWnA.roa (hash: 3AhvcPwm/9eRzoLDWBdCRrt2ESsUhmDJGeKMEdO3cAk=)
                          2: 7U36SlZapyeDS2Ak1ibKjOwXw_k.roa (hash: 8qxvJp9rWWP4iXTSuHjrQKYQTm/Cdbn1SdddAUifY+g=)
                          3: EhaRoUANwPr-dXqPA4rnsTVne60.roa (hash: gVnPC4//yzL2951hRjYzs0OxJc3ttq+ni7WR/2qnlFw=)
                          4: GbOTYXVRE4nGIgwOQA6zBXlj2Xo.roa (hash: encqJVvBdRm6B6vTFCshfVj5JBcWptS0eKrTwjTdeJk=)
                          5: HyPgpAuvMsNI5L6SLPPAdnBnPdo.roa (hash: EVOBxrtD9ibYF2I1shFMN6eNa05ZrbHe+uhDMKiGbNk=)
                          6: IvvEQkJx_YQuA7WDKcWTwA6sjeM.roa (hash: TYlXh7A49R6hcyPJlA/asJPKwJrsxKdwQselHHTfu5Q=)
                          7: L9Fk346-JSHBf5lZ_ZJf-LMZGWU.roa (hash: DN183lb8EchI0WiaHaTT8jaz5o7gqV8yjOyNWGuBl80=)
                          8: OwmORe9LtdGNvIbFoTX1fry-AF0.crl (hash: Bq+OBV3yfvAh98z4sTm3gTdduNO4k4jaHzSDT1uUZfA=)
                          9: S714ou8hYqjvmFB4nmghIWDuzT8.roa (hash: /BUpwNlFfWECuzcvwXarqFvS3D6dRZwllAWqKckM2JU=)
                          10: SlDcuXgMtJBGo8YlgFJf41C4kAo.roa (hash: SG0BWCyRtxyo4M02OYtmA2zjOWnb5KfeZ0pEnDDi914=)
                          11: VBH_4eoSU74aXKgq55ZO0jMs8Dw.roa (hash: E1Myyi1I6BpmBFqc6zUEpm//yhSvLRQUHEKEogTTqz0=)
                          12: VjGUvPYUWgp-0uedFQJC98v6fEo.roa (hash: jGCrku5NTRGndH4tqMN86FEJPJ73k9kCLkdTKB2wH5A=)
                          13: Z-Ur6Re147f49wwXtBgxnUTtQco.roa (hash: 6jMXEqLaJpiU5oHiEpHv2AWSooBvq9dmOPpZl+dAG7k=)
                          14: aFqGzzPnvGg6PPai6cgdL5YWXWI.roa (hash: a/LIbVs5CKwdoXoUSNeyQY9w3ja6VjMgxqtVYMhCu2E=)
                          15: acYGK8CkxHHJymKvZsvAwTZx534.roa (hash: Bz3iDYD/7IlVHGKnWBEBXkjBCuMDicbNAd5XevNE9Dk=)
                          16: atuyYpoVRKQHnFtgDV3FM-vFLxM.roa (hash: qXfV8yAI5tXvkScsLElC1FZo67Cs+dJHRWE3vQl62to=)
                          17: q2sdLUq8oTKjFXabTIHjNujteO4.roa (hash: DmdPmf4rfc5GBaM+wuurYH2BFaBH9ELo6PMdUoe2Fiw=)
                          18: sTodJGVa8zYAQXUyHcKityrKMhw.roa (hash: OCjCckKNvmiaHxZzqtZ4rx+ccV72o773purW+SW4YeI=)
                          19: tzK7bQadc-X5ERcHUFRyrLjFAic.roa (hash: pH5a6hVvwpFpvLEU3OQ9naeDuYIybxvVLAzccWIRqYM=)
                          20: xymeMR66aDWDmDhIlx2JEKPGuQ4.roa (hash: FDOGD9cmw7d0tSGevYfgks8MljnMa/gRurSZQ7spuUQ=)
                          21: yGG8haOhseC4wLjAMMMPhHZTXjA.roa (hash: lNJuGf7SRWFqIxTMR/qz5nkSoM2R54KFa9KdvNjHl+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3c:be:c4:43:49:95:49:d4:61:ff:69:83:d3:43:4c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
        Validity
            Not Before: Jun  4 21:00:24 2025 GMT
            Not After : Jun  5 21:00:24 2025 GMT
        Subject: CN=f4a278b452086c27dee9c66cac92988c88ba9c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:32:5f:a2:2c:f2:ce:02:9c:74:a8:8d:59:90:
                    e7:02:75:61:dd:fa:6d:b3:cf:27:95:d9:6a:a3:d0:
                    0f:84:78:b9:96:a0:3a:c7:eb:c7:25:7e:c5:8d:34:
                    0c:a2:11:c1:12:86:dc:16:dd:71:e8:cf:df:a2:52:
                    59:b4:01:2a:67:34:c4:83:86:97:e1:1e:a4:5e:e7:
                    f7:7a:e0:0e:a7:7c:93:11:08:39:ca:17:b3:cb:eb:
                    49:25:66:b3:9e:1e:f7:ba:a8:27:da:5d:ad:33:c1:
                    fc:f6:a6:1e:78:62:87:b2:e2:c0:09:8d:8b:de:a0:
                    98:87:5d:7a:77:aa:43:6a:cc:0c:f1:2e:6f:1d:ae:
                    23:dc:4e:dc:1b:ce:92:dd:b4:83:81:ed:41:f0:a4:
                    e4:57:a1:58:fa:23:07:26:9f:33:6b:4b:2b:11:18:
                    c7:57:3a:31:88:f8:c1:ba:0b:e9:57:0a:73:45:17:
                    4e:b7:b2:7a:10:b4:b1:50:d8:bd:f1:26:f0:14:9a:
                    6f:c6:74:0e:53:6c:0f:ee:68:b4:ee:31:0f:87:1f:
                    06:4b:03:2c:9c:59:98:cd:7b:e1:89:88:cb:30:2f:
                    bb:99:5d:08:0b:58:da:f6:ab:b2:7d:d1:05:3e:70:
                    35:7f:b4:9a:dc:cc:2e:35:5b:27:d3:17:df:5a:ed:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A2:78:B4:52:08:6C:27:DE:E9:C6:6C:AC:92:98:8C:88:BA:9C:95
            X509v3 Authority Key Identifier:
                keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:8f:01:70:f2:f1:74:7a:37:2c:c1:5f:de:cb:1e:65:f1:d6:
         a1:e7:ed:da:54:8e:3b:ce:97:8b:3e:1c:cc:63:b7:13:70:77:
         5b:90:84:c6:d7:1c:ef:44:19:37:d3:92:ca:4b:0f:48:93:05:
         1a:aa:00:7c:9a:ec:3e:74:b6:b7:b8:11:49:59:c4:96:5c:17:
         14:26:5d:e1:a1:2c:9b:00:fa:dd:9a:bc:2b:56:f8:79:85:fd:
         b9:74:f6:95:b3:7d:33:4a:88:65:61:05:1d:8e:25:38:0d:3d:
         0a:0b:76:60:c6:20:0a:95:87:9a:a4:a0:86:f1:a9:d3:16:1f:
         9f:1a:0b:e4:ed:63:0c:c9:26:06:18:57:1b:2d:ea:6c:d6:5e:
         b3:66:c8:28:71:9b:77:be:56:7c:7e:49:ef:64:49:19:cf:86:
         e2:54:8f:a4:e7:9d:28:8c:c4:08:df:05:77:65:ad:37:2e:27:
         d9:ad:54:67:6a:20:9d:e3:49:b1:d2:2e:aa:9c:dd:9b:51:b1:
         01:36:0b:64:11:a2:33:83:5c:ec:c5:0a:3c:19:43:ce:85:da:
         e1:46:8f:4c:6a:ee:b4:bb:2f:67:0a:28:95:40:c9:b3:24:41:
         90:67:0f:dc:ee:d6:73:23:42:e6:42:a4:77:e3:8a:3e:16:54:
         ba:67:2e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 00:01:09 2025 by rpki-client