Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
File:                     OA-TW80EhiXnAVXPLMKCniwgcqY.mft (raw, json)
Hash identifier:          T69BpYCNpn0YctrAbwTXxb7DwKUQ7+r5nqkhxTIWLtE=
Subject key identifier:   18:0C:4C:51:62:C6:6B:51:30:A0:EB:47:1F:A9:25:79:A0:11:A6:49
Authority key identifier: 38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
Certificate issuer:       /CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Certificate serial:       01975F4B2CD708FFCD12D968BB0E47E709D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
Manifest number:          026D
Signing time:             Wed 11 Jun 2025 14:00:51 +0000
Manifest this update:     Wed 11 Jun 2025 14:00:51 +0000
Manifest next update:     Thu 12 Jun 2025 14:00:51 +0000
Files and hashes:         1: OA-TW80EhiXnAVXPLMKCniwgcqY.crl (hash: 9fsDnK8qedaSS8AyejAT2UMzrRKEXjkUosmB+/jFhRg=)
                          2: Q5qSxQZ6AuTJXsJJ-9RRWDA26wA.roa (hash: 64WIeN1+JBWLPlD+mMTcZ54izCFjiXRNJWE/ls/16OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:4b:2c:d7:08:ff:cd:12:d9:68:bb:0e:47:e7:09:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380f935bcd048625e70155cf2cc2829e2c2072a6
        Validity
            Not Before: Jun 11 14:00:51 2025 GMT
            Not After : Jun 12 14:00:51 2025 GMT
        Subject: CN=180c4c5162c66b5130a0eb471fa92579a011a649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:b2:e0:a5:57:f8:7c:49:47:7e:e1:75:1f:
                    f2:b8:96:d9:64:e1:20:af:8f:7b:c0:75:5d:3c:7e:
                    ac:99:c0:28:32:a0:64:07:90:4f:ed:bf:64:44:e2:
                    df:55:e8:51:db:a5:32:5e:14:0e:63:a0:d3:94:37:
                    bd:90:af:3c:01:ec:85:1b:25:17:fc:5f:21:43:c5:
                    aa:aa:e3:45:c9:b0:38:2a:93:b8:df:dc:58:f5:fc:
                    00:a6:ad:61:8a:25:d4:db:5f:c6:44:16:86:10:e4:
                    ad:07:53:00:07:b1:2e:07:0f:87:35:3d:c0:65:9e:
                    49:60:ff:5d:70:54:43:e3:00:f7:27:27:34:a1:ce:
                    12:b3:2e:6c:04:bb:bd:7b:3e:c2:02:54:f7:a3:76:
                    4a:aa:de:4e:e1:94:fd:96:c5:02:6d:d7:5f:32:63:
                    9f:f1:44:0e:19:05:24:90:2a:62:3d:97:bb:bd:39:
                    92:39:96:2f:b9:15:d2:6a:25:11:71:7d:28:db:de:
                    ce:54:e4:7e:31:fe:c8:aa:c9:2d:2a:8a:4f:23:4e:
                    43:08:2f:6a:8c:ef:36:71:e4:35:f2:a6:3a:0e:d3:
                    cc:76:6b:00:2a:63:09:52:dc:22:c0:45:de:c0:4f:
                    27:69:b7:15:d5:63:d8:0f:66:24:2b:8f:53:01:ba:
                    b8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0C:4C:51:62:C6:6B:51:30:A0:EB:47:1F:A9:25:79:A0:11:A6:49
            X509v3 Authority Key Identifier:
                keyid:38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:50:97:65:f2:c0:06:6a:b6:bc:1c:c1:c6:2c:84:78:ad:dd:
         c0:57:05:be:cf:e2:df:9e:0c:41:29:b2:62:d3:15:db:c7:e2:
         41:e3:81:16:ea:85:3a:59:32:1e:16:97:6f:3e:45:7d:da:96:
         08:ba:a4:42:07:67:eb:82:f1:bd:55:c7:f1:b8:60:aa:07:42:
         2b:30:f3:e9:28:1b:a2:ea:3b:07:fc:a0:0c:e5:fc:04:1f:c6:
         91:5f:13:ee:e7:f0:b0:0d:40:35:eb:43:8a:88:44:3b:25:68:
         69:ee:25:0e:12:69:b5:67:0e:4f:3a:3c:3c:4c:24:03:a2:dc:
         40:ab:7f:10:7c:34:a8:8e:62:ba:85:1f:44:2d:23:10:0e:b2:
         0e:7a:6f:08:c9:45:83:d7:80:d2:b5:43:3a:d4:39:8b:54:6a:
         55:96:d9:6d:84:98:75:e7:dd:7d:d5:c6:59:23:17:ab:34:00:
         40:a0:09:1d:a5:90:35:92:05:ca:f7:5e:28:7c:83:d6:18:b2:
         ba:9a:ea:d3:a1:da:a5:13:3d:8e:47:41:ce:c5:1d:39:66:eb:
         f0:de:5f:04:0f:29:52:28:bb:65:f5:67:ab:9c:ea:82:a8:06:
         e4:d0:d5:90:87:05:af:8c:ef:58:15:6b:2e:69:3a:b7:85:c3:
         44:c5:9e:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfSyzXCP/NEtlouw5H5wnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGY5MzViY2QwNDg2MjVlNzAxNTVjZjJjYzI4MjllMmMy
MDcyYTYwHhcNMjUwNjExMTQwMDUxWhcNMjUwNjEyMTQwMDUxWjAzMTEwLwYDVQQD
EygxODBjNGM1MTYyYzY2YjUxMzBhMGViNDcxZmE5MjU3OWEwMTFhNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmCy4KVX+HxJR37hdR/yuJbZZOEg
r497wHVdPH6smcAoMqBkB5BP7b9kROLfVehR26UyXhQOY6DTlDe9kK88AeyFGyUX
/F8hQ8WqquNFybA4KpO439xY9fwApq1hiiXU21/GRBaGEOStB1MAB7EuBw+HNT3A
ZZ5JYP9dcFRD4wD3Jyc0oc4Ssy5sBLu9ez7CAlT3o3ZKqt5O4ZT9lsUCbddfMmOf
8UQOGQUkkCpiPZe7vTmSOZYvuRXSaiURcX0o297OVOR+Mf7IqsktKopPI05DCC9q
jO82ceQ18qY6DtPMdmsAKmMJUtwiwEXewE8nabcV1WPYD2YkK49TAbq4eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgMTFFixmtRMKDrRx+pJXmgEaZJMB8GA1UdIwQY
MBaAFDgPk1vNBIYl5wFVzyzCgp4sIHKmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0EtVFc4MEVoaVhuQVZYUExNS0NuaXdnY3FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yMjc0NGEtODU4OC00MjkwLWIyM2Mt
NmMwNzcxZjI1Mzk2LzEvT0EtVFc4MEVoaVhuQVZYUExNS0NuaXdnY3FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yMjc0NGEtODU4OC00MjkwLWIyM2MtNmMwNzcxZjI1Mzk2
LzEvT0EtVFc4MEVoaVhuQVZYUExNS0NuaXdnY3FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVCXZfLA
Bmq2vBzBxiyEeK3dwFcFvs/i354MQSmyYtMV28fiQeOBFuqFOlkyHhaXbz5FfdqW
CLqkQgdn64LxvVXH8bhgqgdCKzDz6Sgbouo7B/ygDOX8BB/GkV8T7ufwsA1ANetD
iohEOyVoae4lDhJptWcOTzo8PEwkA6LcQKt/EHw0qI5iuoUfRC0jEA6yDnpvCMlF
g9eA0rVDOtQ5i1RqVZbZbYSYdefdfdXGWSMXqzQAQKAJHaWQNZIFyvdeKHyD1hiy
uprq06HapRM9jkdBzsUdOWbr8N5fBA8pUii7ZfVnq5zqgqgG5NDVkIcFr4zvWBVr
Lmk6t4XDRMWebg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 00:21:30 2025 by rpki-client