Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
File:                     OwmORe9LtdGNvIbFoTX1fry-AF0.mft (raw, json)
Hash identifier:          U//r2JoI2MC2AMf55/2IoP7b1QIFV0Mnq9/K/jUZExU=
Subject key identifier:   83:2B:3A:7A:9E:02:00:15:02:53:90:67:FF:75:E3:9C:A1:87:97:48
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Certificate issuer:       /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial:       019CD5D1EEDDC8803AF3E0E7A90DB0907C67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
Manifest number:          0EDC
Signing time:             Tue 10 Mar 2026 03:37:11 +0000
Manifest this update:     Tue 10 Mar 2026 03:37:11 +0000
Manifest next update:     Wed 11 Mar 2026 03:37:11 +0000
Files and hashes:         1: 1de8pjWZdbZ222YYe2GXtR0jHsA.roa (hash: nh2vUuTt0Og2aMiOlGOrS+L6/mjzmIQi3XaIf1H65RY=)
                          2: 72rogKEUs1fjFAjfM7Cy9UHe_kw.roa (hash: Z8ZWpoeVc5I33UXwalFKXVV5S6etbriIYRPgHvGgfKI=)
                          3: 7WH7MNjgKQECpcfeO5Kiimb7Df0.roa (hash: Jicb2Ne1P8KiYy+rp1J4QMe3h0nRexvVyWXvg4N4jbE=)
                          4: 9JzB_fLsIZkzxzin2R8Wl5zsThg.roa (hash: zo4ZNsXVTAK6EOsgV3BJxS3TB/kgAKw2MtLEp37xiy8=)
                          5: Ir68V4nnZXMcM6su4E53Z2sPiPY.roa (hash: lSuOvFNbw/w4QoIfL4Sy9erXzeD0fPgJM5VGjdoFZuQ=)
                          6: JVHz_wFOaKlGa58bai3EZCkfl4o.roa (hash: Y2zjYlZsQWvQMF2i9AMdA74KrKWztyg082FTOrRHXB8=)
                          7: M--TDwBebYUuyU8m_hJhv6lANn0.roa (hash: ng0FfscKlU2HqCySpQvVoxWawyYxW3g+qpkRloBHnkM=)
                          8: MltfaSDzKKivi1ba6fyL603ZViA.roa (hash: o/h5nKm2TLBULoQARQH8ZnVSg+ceTA0UZkwLaI/sNkY=)
                          9: N-uiDNmlj-02AauCQ_PvQPuaJrk.roa (hash: VKFp1l/5SkMQ7lkE3I8UcdbYaWtuE8aRelno0nES6Qo=)
                          10: OwmORe9LtdGNvIbFoTX1fry-AF0.crl (hash: YClSq0YMioalyTrfdByqo2FZH/qpizi17RUfY+MW6oI=)
                          11: TRYASeew79G5zn73E_j8Aa7JY-4.roa (hash: A844v0atomupwaPDxBuN0WbPBoix8FPtluT4rtEa/Ek=)
                          12: XIqvmqOdi_1zuzz2kKUxoCjwnVU.roa (hash: aMJOD4Mp/WfwOzWMvVMOZcZY7T1v0Kzr3ZB6XKJtt8o=)
                          13: YhEfS85SYBMPKRthi3IBpgKLVMM.roa (hash: GHyyiR6rzvrtE1D+fKHBtSmJRDZFZe0bkqf0kjPYJfQ=)
                          14: _BB0ZdbUeeGFKqBB6D8keNkJhmM.roa (hash: T/kG9iPqWLLw7hdfMQ7fu7gcEyRzV3wIoGwtmsPPr8s=)
                          15: dRduPk6jL2FbB0-s8ry1uL0Q-eo.roa (hash: lfjBFM+1U9k216beb8eucrAzFXFmpoPSWELuxMZ26Pc=)
                          16: k6-nBaulYfEOor49zlFj5eqWqf0.roa (hash: lOORiIv+Z9qnEfNyp2jcr7RZz1lUKEk6RF5zemJB2ZA=)
                          17: lJKm_LqFIVtk8fG-fe1_yBQ6EHo.roa (hash: 5zV7j1uxdw2hrQqRjN6UaXy8pRasBHhvGZI+Khd0zVU=)
                          18: lSUGE_d_qT6-86LK03VWiCsMsbM.roa (hash: 7WobUs7M0Xn7OFwQ+ogGC49nWaSQqiEzFFsE29+lB2c=)
                          19: nrEO1LwODrFmSevli7_t9F7GPZ4.roa (hash: Zoj1yWH/o3nIYH7s5SfUXzlnm7ibfpx4Jw+0Ke350ZM=)
                          20: wzaWKuWu-WRyiy1xaW8adXMAD-s.roa (hash: vBfeRQR1FGJpPp6ROuodYQCro+s8nwVJ8cu8pfKhj8c=)
                          21: yTZqlhAkkerpe2L4CyUvh9Svaqs.roa (hash: hMnmd7o1av9aOhsK5OjFywbUYNzo9xYVVgQ8qsY2PHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Mar 2026 03:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d5:d1:ee:dd:c8:80:3a:f3:e0:e7:a9:0d:b0:90:7c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
        Validity
            Not Before: Mar 10 03:37:11 2026 GMT
            Not After : Mar 11 03:37:11 2026 GMT
        Subject: CN=832b3a7a9e02001502539067ff75e39ca1879748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:cb:0d:4b:3c:51:c8:51:b7:be:49:94:94:
                    90:e9:16:e1:9b:5b:9d:92:fd:34:4b:5c:d7:4d:05:
                    d3:25:45:64:5f:7d:f3:f3:40:6a:62:55:ee:29:ae:
                    22:4a:c6:d6:bc:05:4b:67:b1:2c:cb:b2:f3:69:12:
                    00:a0:95:72:fe:5e:77:8c:98:0f:f1:c3:1d:e1:2c:
                    7a:d0:87:2f:34:d1:6a:59:bd:ec:1f:58:f3:7b:5b:
                    79:67:e8:66:8c:83:21:47:1e:cc:2e:11:61:40:d4:
                    50:6a:6c:68:c9:74:ff:0c:ad:b7:b3:18:1a:95:26:
                    88:0b:a4:af:31:4c:e0:e6:74:5b:12:eb:09:fd:98:
                    1c:42:25:c4:34:b8:4e:1a:e5:48:83:e3:19:a5:7d:
                    8a:36:69:8c:34:ae:b5:52:48:31:06:22:55:f6:8d:
                    19:1c:d9:79:eb:d7:5a:d4:0b:68:37:2f:90:46:20:
                    5c:57:ce:5e:74:df:8d:7e:98:6c:70:ae:8f:28:0a:
                    6d:e2:5d:55:28:13:7d:2f:52:18:ef:30:1e:a7:d2:
                    e3:03:c1:c2:0f:30:bc:f6:5e:91:9d:a8:49:21:a2:
                    86:94:75:2c:4d:0f:6b:d1:89:98:92:24:5a:03:66:
                    88:cc:55:db:3e:a6:40:3b:1b:64:84:ec:df:7a:08:
                    90:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2B:3A:7A:9E:02:00:15:02:53:90:67:FF:75:E3:9C:A1:87:97:48
            X509v3 Authority Key Identifier:
                keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b1:f3:65:94:62:08:97:67:77:51:fe:35:4d:e3:91:71:ed:
         af:2a:79:39:b4:b9:33:2c:4a:12:b2:0b:18:6e:b0:f8:52:cf:
         f6:94:9f:ff:7f:dc:aa:98:fe:6a:87:ea:68:0a:93:d1:c3:b6:
         53:37:a4:44:c0:4d:d1:4d:1e:33:67:56:4c:80:79:8a:a8:3b:
         2e:2d:ff:d9:49:88:e0:c7:4b:9a:04:81:27:bb:a1:25:26:c5:
         b3:92:82:0f:8c:51:a4:23:b7:7c:3a:34:1c:b6:e3:ea:0c:cc:
         04:a4:1a:9d:6f:6d:39:5e:04:36:a5:0d:ab:24:fe:b1:97:82:
         ba:c9:ce:ce:f4:fb:a1:34:42:d5:68:33:3c:13:2d:88:6f:09:
         3c:d2:85:85:41:47:47:bd:95:b3:16:30:b0:98:eb:a8:fc:60:
         49:88:ae:7b:73:d8:98:c5:3b:a2:6a:0e:db:87:9b:0d:9e:98:
         45:9a:0a:d4:cb:e0:a9:04:bc:2d:37:c1:84:62:ae:8d:8a:31:
         ef:dd:74:75:a8:5c:5b:ed:98:15:c8:45:25:a8:78:88:c9:d5:
         95:3c:ec:dd:02:1c:2f:8c:0f:d2:08:e6:0c:b7:12:59:52:0a:
         9c:c9:68:56:92:d8:a5:19:73:d7:c5:51:87:39:b3:d8:5f:44:
         8c:4b:01:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 11:21:18 2026 by rpki-client