Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
File:                     OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft (raw, json)
Hash identifier:          6Xua/g24r5AHEdQ7OlZJoUP+uCpwJKVg5sI3BdlaD8c=
Subject key identifier:   C5:42:25:F3:1B:C2:E6:D9:65:43:E5:95:FD:BD:50:02:3E:45:91:A2
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Certificate issuer:       /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial:       019921E7AA404434D1D8E941705EC703D05C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
Manifest number:          06E5
Signing time:             Sun 07 Sep 2025 02:00:54 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:54 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:54 +0000
Files and hashes:         1: ECy4hcsZKRfHoRJrX40zL9VgZlM.roa (hash: TIqTReRQQT5DAw+Fnvsbl2Gazl66yiKwPvTFj1mKh8s=)
                          2: OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl (hash: sTlTZZuuHkQPeNlMK55pLVFKj0HDUaZeqxWpjbHPpxs=)
                          3: b-pP2DvAvhNxFYiGst38p6kSpEw.roa (hash: OWrgzbHkSLo7aQ27PmujOGuFd28cotewB1lFGD+BaKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:aa:40:44:34:d1:d8:e9:41:70:5e:c7:03:d0:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
        Validity
            Not Before: Sep  7 02:00:54 2025 GMT
            Not After : Sep  8 02:00:54 2025 GMT
        Subject: CN=c54225f31bc2e6d96543e595fdbd50023e4591a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4d:84:c3:4d:95:c0:be:b7:92:e8:db:67:e9:
                    a6:04:5d:0f:e9:91:a8:4b:11:d4:9c:5f:17:b7:10:
                    1d:a0:82:fe:7b:ec:17:21:ec:9c:15:37:af:7d:d9:
                    88:95:89:59:8c:e7:a1:c3:65:a6:d5:00:a4:63:a2:
                    f5:48:75:6c:32:57:71:61:62:63:d6:0f:79:a9:6a:
                    f9:97:2e:7a:d6:15:e8:17:9a:91:25:14:13:a7:f8:
                    1c:ab:12:e4:67:79:7b:c7:dc:94:a6:5c:ae:9f:7c:
                    11:98:b1:a8:57:b0:af:b4:2a:ad:03:1d:f1:f3:a4:
                    68:b1:03:8f:96:96:51:a1:4b:df:e3:e5:fd:82:2b:
                    df:dc:3d:03:e1:91:59:8e:16:a5:14:c7:0a:99:0e:
                    e2:8c:48:28:57:3d:9d:9e:ac:15:f6:b3:b9:76:4c:
                    7c:5b:ae:da:76:92:e8:24:ff:12:bf:0e:7e:73:56:
                    32:88:b0:0b:e6:83:5f:1d:f9:98:f3:fd:51:53:9f:
                    eb:02:dd:b3:06:44:8b:6e:e3:45:a1:77:d4:f7:93:
                    21:2f:e8:38:be:79:43:ee:5b:fe:5f:85:39:9e:42:
                    b6:69:8d:34:eb:ea:c0:d2:29:96:44:7f:03:44:2c:
                    97:bc:19:ce:74:e2:b3:59:31:9e:f4:a6:1d:88:d5:
                    99:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:42:25:F3:1B:C2:E6:D9:65:43:E5:95:FD:BD:50:02:3E:45:91:A2
            X509v3 Authority Key Identifier:
                keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:11:40:55:28:1a:c0:c0:8a:a4:09:da:60:45:8d:85:a2:b8:
         3a:44:b3:68:e3:26:18:21:1b:ae:0e:8a:e8:9c:38:a6:7e:c1:
         c6:c7:13:8e:91:ab:cf:38:a8:b6:ed:91:4c:2e:e9:d9:0b:ce:
         79:34:a5:28:50:cf:90:28:8f:6a:17:d9:5b:06:2b:b4:db:2e:
         8a:30:93:d0:c5:0b:c6:af:3e:e0:26:5e:2b:6f:b6:0b:29:10:
         b2:06:e1:b6:59:d6:2f:33:8e:30:97:0c:1e:b8:80:95:6b:23:
         dc:d1:21:a0:83:c7:61:da:54:76:6e:a8:0d:ea:7d:6d:5b:0a:
         f8:d1:43:40:5e:85:c9:0c:83:64:18:a3:c7:11:6e:60:4a:cc:
         e8:98:ce:d7:ac:bf:ab:44:aa:18:b8:c9:4a:2b:ed:00:9c:8e:
         cb:69:97:89:52:1a:0d:8f:42:4e:26:ff:ea:cb:ed:0c:67:85:
         78:86:bd:e4:6c:6f:6f:55:ba:ff:cf:ff:cf:ef:dc:e5:e7:e7:
         b9:a3:3f:29:c2:76:6d:4d:d9:3f:53:48:c7:61:f5:ae:ab:c7:
         d3:b5:43:69:7e:75:5d:16:94:fd:11:5a:26:97:77:cb:09:15:
         f7:03:a2:a4:ca:b2:c2:a5:d0:d3:28:66:0a:0d:56:0e:a7:2e:
         5a:e5:20:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh56pARDTR2OlBcF7HA9BcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGJmMThkNmJiZGIzM2RhODJmZTYxYTI4NjI0YmE3MmUy
MzUwNDAwHhcNMjUwOTA3MDIwMDU0WhcNMjUwOTA4MDIwMDU0WjAzMTEwLwYDVQQD
EyhjNTQyMjVmMzFiYzJlNmQ5NjU0M2U1OTVmZGJkNTAwMjNlNDU5MWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k2Ew02VwL63kujbZ+mmBF0P6ZGo
SxHUnF8XtxAdoIL+e+wXIeycFTevfdmIlYlZjOehw2Wm1QCkY6L1SHVsMldxYWJj
1g95qWr5ly561hXoF5qRJRQTp/gcqxLkZ3l7x9yUplyun3wRmLGoV7CvtCqtAx3x
86RosQOPlpZRoUvf4+X9givf3D0D4ZFZjhalFMcKmQ7ijEgoVz2dnqwV9rO5dkx8
W67adpLoJP8Svw5+c1YyiLAL5oNfHfmY8/1RU5/rAt2zBkSLbuNFoXfU95MhL+g4
vnlD7lv+X4U5nkK2aY006+rA0imWRH8DRCyXvBnOdOKzWTGe9KYdiNWZVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVCJfMbwubZZUPllf29UAI+RZGiMB8GA1UdIwQY
MBaAFDsL8Y1rvbM9qC/mGihiS6cuI1BAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2Yjgt
ZDQ5OTE2YjVmMmI0LzEvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2YjgtZDQ5OTE2YjVmMmI0
LzEvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRFAVSga
wMCKpAnaYEWNhaK4OkSzaOMmGCEbrg6K6Jw4pn7BxscTjpGrzziotu2RTC7p2QvO
eTSlKFDPkCiPahfZWwYrtNsuijCT0MULxq8+4CZeK2+2CykQsgbhtlnWLzOOMJcM
HriAlWsj3NEhoIPHYdpUdm6oDep9bVsK+NFDQF6FyQyDZBijxxFuYErM6JjO16y/
q0SqGLjJSivtAJyOy2mXiVIaDY9CTib/6svtDGeFeIa95Gxvb1W6/8//z+/c5efn
uaM/KcJ2bU3ZP1NIx2H1rqvH07VDaX51XRaU/RFaJpd3ywkV9wOipMqywqXQ0yhm
Cg1WDqcuWuUg2Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:26 2025 by rpki-client