Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File:                     ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier:          QeaBrtGgfNcczqLcQaRNVd050o+lGe0uTl4IqG+L5UU=
Subject key identifier:   82:CF:03:F0:79:1A:10:7D:BF:CB:47:1F:96:8C:EA:A6:20:00:D5:AC
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer:       /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial:       019768BC257B065298085D7F35511084B690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number:          158C
Signing time:             Fri 13 Jun 2025 10:00:50 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:50 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:50 +0000
Files and hashes:         1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=)
                          2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: 67fxzPl+syryys9hlcUl2kKDBXicEVXBZ8gt6/qe/fw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:25:7b:06:52:98:08:5d:7f:35:51:10:84:b6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
        Validity
            Not Before: Jun 13 10:00:50 2025 GMT
            Not After : Jun 14 10:00:50 2025 GMT
        Subject: CN=82cf03f0791a107dbfcb471f968ceaa62000d5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:ce:3c:db:57:61:4e:6b:34:7e:7d:6e:7a:
                    71:05:50:aa:d9:c2:d5:d9:f6:40:2f:30:f2:53:52:
                    5f:44:a9:ad:72:ca:c8:b4:81:55:54:0f:f2:f6:91:
                    ae:ed:b0:fe:8e:c4:de:f5:a8:e2:6a:9f:76:74:c1:
                    ea:9f:76:9f:52:2b:fb:26:f9:9c:9f:7c:d4:71:23:
                    02:22:2a:d3:9f:fd:52:a5:c2:80:00:1a:d8:bb:c5:
                    9e:14:01:ea:0b:fd:e7:65:47:02:ab:72:62:39:a0:
                    1b:24:ba:3b:bf:dc:ef:3c:0b:9d:b9:55:f3:6f:eb:
                    1e:ef:06:5a:2f:88:8c:a9:f5:fb:44:3d:25:1f:ed:
                    ca:d5:aa:d6:e6:3b:b7:b4:5a:17:16:9f:74:6e:40:
                    33:74:a6:34:1b:8b:00:a7:69:8f:65:1b:d0:a6:e9:
                    da:ff:1c:9a:6f:c9:d6:94:5d:bc:0f:43:bc:16:e9:
                    e3:53:92:f9:eb:38:ef:25:e1:ce:d8:e2:3e:85:67:
                    90:cc:d6:52:c7:4d:11:a3:1b:b4:95:3e:28:95:0a:
                    11:e4:71:df:83:33:2b:3e:82:b7:86:90:95:68:06:
                    b3:36:9a:ac:90:25:03:68:b1:b8:87:6a:c7:de:b7:
                    c4:03:30:3f:0c:9f:bb:cf:3a:3f:d3:fa:5d:3a:f3:
                    50:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CF:03:F0:79:1A:10:7D:BF:CB:47:1F:96:8C:EA:A6:20:00:D5:AC
            X509v3 Authority Key Identifier:
                keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e0:1d:40:99:16:57:08:f4:93:9d:94:c6:f2:42:06:6b:83:
         17:86:12:9a:5e:59:77:33:1a:7f:c6:cf:35:40:2a:81:4e:99:
         c3:1d:f6:81:13:e9:79:78:3a:67:45:4d:b1:0e:5c:23:25:f2:
         b3:8b:f5:ff:1f:fd:55:f1:65:2e:f3:45:ba:ef:b6:cf:8e:1f:
         d3:ce:47:c5:d3:60:e8:25:5b:f2:32:50:48:5d:cd:7f:c4:24:
         fb:b6:e5:db:b0:c4:cb:67:fa:7e:9b:2b:3a:7a:03:26:95:8b:
         67:30:37:13:46:5b:d3:7b:bd:be:bf:16:e9:9b:f5:ee:51:3d:
         b4:f3:2e:1c:ef:6c:7f:d3:11:9a:48:99:b9:78:d4:ff:ea:0b:
         06:16:f2:52:85:a0:41:9a:6a:51:e8:09:6b:6e:5d:2c:65:58:
         b3:2f:e7:ef:5a:10:df:e5:78:12:9e:da:fe:33:d4:79:52:29:
         6e:15:3b:55:a8:18:3d:46:6b:f0:b0:47:73:93:4a:f8:a8:a0:
         88:23:f7:86:5e:51:96:2c:2c:8c:30:dc:f8:33:21:cc:96:b2:
         c6:84:53:b2:32:a3:bf:f3:0d:9d:9d:ae:c7:4f:ed:67:91:d1:
         f7:d6:d7:48:b0:09:99:cc:07:70:ed:17:8a:0d:1a:a1:14:13:
         57:12:5b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:57:56 2025 by rpki-client