Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File:                     ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier:          2MP4Wpv/pVFAp6EPMyYPqUVVlTZZd8rOjP2sDdm7pmI=
Subject key identifier:   44:9D:21:59:61:A6:ED:65:1F:EE:E0:D0:7B:8D:26:3D:40:96:84:E0
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer:       /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial:       01975F13DA3DC82621AB1C56B602499269CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number:          1587
Signing time:             Wed 11 Jun 2025 13:00:25 +0000
Manifest this update:     Wed 11 Jun 2025 13:00:25 +0000
Manifest next update:     Thu 12 Jun 2025 13:00:25 +0000
Files and hashes:         1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=)
                          2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: lmjBCpG5di6FmswZlMolc1iRcCg7usUCqKZnGOHqXrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:13:da:3d:c8:26:21:ab:1c:56:b6:02:49:92:69:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
        Validity
            Not Before: Jun 11 13:00:25 2025 GMT
            Not After : Jun 12 13:00:25 2025 GMT
        Subject: CN=449d215961a6ed651feee0d07b8d263d409684e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8a:d4:8b:9e:53:e3:79:f1:1b:b3:5d:a6:6e:
                    0a:6c:cd:87:e7:7e:d2:aa:99:13:47:0f:28:b6:9f:
                    9d:43:f3:6e:d3:16:49:1b:58:bd:b7:b1:00:d6:d7:
                    c6:73:38:34:f9:33:32:fc:4c:d8:7a:ec:ab:2a:9c:
                    14:b2:8e:a8:b9:00:6d:97:45:cf:f9:a3:f0:99:c2:
                    e5:2d:d5:47:22:8b:37:c8:6c:a6:87:09:3d:cd:f5:
                    ab:ad:48:ce:dc:f3:a1:25:eb:fa:2e:4d:16:76:38:
                    f1:4a:ae:cf:b1:7e:e6:bd:7f:cf:1d:4e:59:03:33:
                    29:29:4f:c6:bd:9c:7d:92:51:21:5d:85:6c:92:e1:
                    b9:c3:b7:37:ca:92:7b:31:1c:e9:c3:1d:90:70:42:
                    2d:41:7e:22:b8:0b:97:9a:20:04:37:74:b8:45:f6:
                    ba:20:6d:5d:ee:b3:36:c7:0c:a2:fa:eb:07:22:32:
                    03:d3:0c:97:b8:a3:37:85:0b:be:8a:0c:cc:db:c8:
                    71:a1:03:21:be:7c:4e:ae:61:a2:f1:08:84:ca:c7:
                    e2:21:08:b3:22:1b:65:fc:b3:13:fe:2f:b2:82:e5:
                    00:18:82:9d:1b:a0:de:f4:bf:98:23:74:4d:74:d3:
                    d9:9d:94:c5:bb:9c:97:3a:57:e4:62:5c:0f:b7:25:
                    15:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9D:21:59:61:A6:ED:65:1F:EE:E0:D0:7B:8D:26:3D:40:96:84:E0
            X509v3 Authority Key Identifier:
                keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:30:83:76:ac:1b:1b:62:84:36:99:dd:73:e1:6c:96:2f:f7:
         69:8b:40:1f:31:82:aa:42:22:45:b0:69:6c:64:ef:02:d3:88:
         ac:de:8c:61:dd:19:36:e1:a8:ee:ac:5e:6f:54:4d:c1:ff:5f:
         31:c3:3b:76:74:ef:2e:5d:a7:0e:4b:cc:97:af:5d:94:ba:b4:
         b8:58:38:71:3d:a9:68:93:1d:6f:d8:d8:de:1b:1c:ef:3b:32:
         4e:d4:5d:fe:bf:46:47:eb:de:b7:3c:d4:68:a3:56:63:74:44:
         21:a7:da:17:99:bc:8a:ff:26:81:36:e7:e7:6d:8a:88:05:87:
         fe:3e:e9:0a:33:ab:2d:21:c3:91:59:f2:17:9b:7f:53:03:3d:
         c7:64:c6:f1:f0:1e:33:db:45:23:d8:4a:06:33:08:7d:3e:fa:
         4a:2d:30:71:a1:15:12:fc:c6:df:49:a9:e4:30:b0:69:9b:ed:
         a2:6e:c5:4d:43:b3:10:72:91:b7:3a:93:39:c4:a7:ce:94:c0:
         ca:32:ae:a7:83:ec:96:d9:fa:83:f9:9a:96:ad:e7:a0:d7:f3:
         64:b4:0c:56:6e:55:b0:bd:2f:0a:6f:1f:f2:55:ef:e1:a6:9c:
         be:5a:d4:e6:22:29:d1:f9:90:27:96:83:cd:7b:70:52:a0:45:
         61:5b:b5:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfE9o9yCYhqxxWtgJJkmnLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMGY2ZmI2ZjVjODBjYTRhNjAzODI3Yzk2YjNiZGY2MGFk
NTYzYWEwHhcNMjUwNjExMTMwMDI1WhcNMjUwNjEyMTMwMDI1WjAzMTEwLwYDVQQD
Eyg0NDlkMjE1OTYxYTZlZDY1MWZlZWUwZDA3YjhkMjYzZDQwOTY4NGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4rUi55T43nxG7Ndpm4KbM2H537S
qpkTRw8otp+dQ/Nu0xZJG1i9t7EA1tfGczg0+TMy/EzYeuyrKpwUso6ouQBtl0XP
+aPwmcLlLdVHIos3yGymhwk9zfWrrUjO3POhJev6Lk0WdjjxSq7PsX7mvX/PHU5Z
AzMpKU/GvZx9klEhXYVskuG5w7c3ypJ7MRzpwx2QcEItQX4iuAuXmiAEN3S4Rfa6
IG1d7rM2xwyi+usHIjID0wyXuKM3hQu+igzM28hxoQMhvnxOrmGi8QiEysfiIQiz
Ihtl/LMT/i+yguUAGIKdG6De9L+YI3RNdNPZnZTFu5yXOlfkYlwPtyUVYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESdIVlhpu1lH+7g0HuNJj1AloTgMB8GA1UdIwQY
MBaAFKMPb7b1yAykpgOCfJazvfYK1WOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kN2U2NjgtZjA3ZS00MzhiLTlmYTgt
ODBhYjc3OWVlZDEwLzEvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kN2U2NjgtZjA3ZS00MzhiLTlmYTgtODBhYjc3OWVlZDEw
LzEvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzCDdqwb
G2KENpndc+Fsli/3aYtAHzGCqkIiRbBpbGTvAtOIrN6MYd0ZNuGo7qxeb1RNwf9f
McM7dnTvLl2nDkvMl69dlLq0uFg4cT2paJMdb9jY3hsc7zsyTtRd/r9GR+vetzzU
aKNWY3REIafaF5m8iv8mgTbn522KiAWH/j7pCjOrLSHDkVnyF5t/UwM9x2TG8fAe
M9tFI9hKBjMIfT76Si0wcaEVEvzG30mp5DCwaZvtom7FTUOzEHKRtzqTOcSnzpTA
yjKup4Psltn6g/malq3noNfzZLQMVm5VsL0vCm8f8lXv4aacvlrU5iIp0fmQJ5aD
zXtwUqBFYVu1mw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:52:34 2025 by rpki-client