Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File:                     ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier:          KqkhHh/YwoaA/96Hx/vQK6Oh1ulCHnA7hgIUmKO+eGw=
Subject key identifier:   F5:FA:22:46:B6:A9:21:99:59:04:BF:A4:49:DC:4B:49:D3:05:7E:58
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer:       /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial:       01976102D224A14A2917FFCB0D47A73B8721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number:          1588
Signing time:             Wed 11 Jun 2025 22:01:04 +0000
Manifest this update:     Wed 11 Jun 2025 22:01:04 +0000
Manifest next update:     Thu 12 Jun 2025 22:01:04 +0000
Files and hashes:         1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=)
                          2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: haTJMFzCaa7xG14ckcxgCgFmcqvrq79+pU3jTquTzeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:02:d2:24:a1:4a:29:17:ff:cb:0d:47:a7:3b:87:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
        Validity
            Not Before: Jun 11 22:01:04 2025 GMT
            Not After : Jun 12 22:01:04 2025 GMT
        Subject: CN=f5fa2246b6a921995904bfa449dc4b49d3057e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:44:6d:da:6b:09:7f:c4:9c:17:96:58:7d:c9:
                    80:57:1a:28:de:ca:e3:ff:f4:71:57:05:35:e5:99:
                    43:63:09:37:a8:77:c0:80:eb:76:fa:5b:63:4e:0c:
                    b3:dd:6a:0c:2a:c2:9a:2e:a1:66:5e:79:68:b9:94:
                    41:4a:aa:a8:b4:18:8b:0a:33:e6:b5:e6:7f:60:bf:
                    bf:ef:53:52:b7:41:c2:0f:a0:fe:50:15:73:4e:38:
                    61:0c:ac:c8:a7:4e:26:d7:8c:c9:db:0f:44:cd:bc:
                    35:b3:5a:56:ee:ea:75:ef:85:a8:df:e4:47:74:35:
                    ed:63:83:91:4f:ec:04:65:ca:61:c4:d9:30:f8:34:
                    d4:f9:4d:4a:1d:1a:bd:95:00:ac:55:4c:aa:48:7d:
                    de:0c:6a:76:3e:fd:b9:30:f5:03:21:c7:19:a3:04:
                    7a:01:e9:12:02:f0:aa:44:d0:5b:16:7b:a7:a9:29:
                    9b:12:51:6e:ea:af:a2:4c:6b:dc:d3:b8:7f:91:1a:
                    ba:d9:b1:36:5b:8d:ed:19:14:71:05:aa:0a:cf:63:
                    9d:e3:34:b1:c4:30:35:62:d9:82:68:34:10:94:ed:
                    63:f0:04:f0:c8:78:12:68:43:49:54:52:4f:60:6d:
                    dd:b6:0e:b3:20:41:a1:6e:16:e1:d1:8b:d3:29:6b:
                    f9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FA:22:46:B6:A9:21:99:59:04:BF:A4:49:DC:4B:49:D3:05:7E:58
            X509v3 Authority Key Identifier:
                keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:46:08:61:3f:89:b0:a8:2b:63:66:26:cc:e9:f6:f1:b0:c5:
         1c:fd:d3:41:d6:16:78:ce:87:5c:1e:42:96:6a:e1:c4:a9:7f:
         53:06:78:22:77:a9:fc:aa:eb:4e:00:9b:11:3c:d2:3d:39:6f:
         be:dd:b4:bf:af:21:8a:ad:09:b5:7f:dd:11:59:70:ae:35:f6:
         56:f0:7f:6d:46:39:4d:31:e4:bb:e6:86:08:88:fb:71:1b:a9:
         11:c4:df:6f:bd:75:d4:48:9f:24:c5:fe:23:1d:2c:d1:67:55:
         3b:c2:cb:e3:d6:b3:df:d8:9b:a4:88:e4:f1:3d:9c:8c:5f:ca:
         f7:52:8d:20:bc:3b:12:c9:e9:e3:ec:9a:ce:cf:99:7e:ab:e2:
         46:9e:08:9a:84:53:d0:9e:54:92:f8:6c:3d:85:b8:e2:15:2e:
         76:62:63:bb:ae:1e:fa:1d:e9:9a:a4:1b:76:f6:97:71:07:3c:
         f4:ba:1a:50:98:ed:b4:fd:90:eb:a3:d9:ed:fe:51:1d:d6:2a:
         2c:c8:cd:9d:0d:d3:7d:c2:61:b8:9f:77:48:4b:0a:a7:dc:39:
         15:88:a2:91:f4:ce:64:a1:d0:8d:3e:eb:51:33:ef:9f:75:a3:
         bc:6b:3f:6e:3c:a3:68:8a:1f:98:ba:13:3a:0f:0d:60:1c:54:
         69:f5:b6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 03:48:40 2025 by rpki-client