Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
File:                     OuvyLoZEQlX994owxMsLLZHlt1c.mft (raw, json)
Hash identifier:          +AuFh9SOhV/KcBQ/6t8z6XLlUjv6BcA+Da7LCUu89Ro=
Subject key identifier:   35:D3:DA:AA:33:A0:59:FA:5E:0B:49:CB:27:99:8A:46:62:51:22:F7
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Certificate issuer:       /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial:       01988166F12ED0769EF089C0C13049923971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
Manifest number:          15B0
Signing time:             Wed 06 Aug 2025 22:01:03 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:03 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:03 +0000
Files and hashes:         1: OuvyLoZEQlX994owxMsLLZHlt1c.crl (hash: nTsAv4mJKljDiWaRfjMEXxzcwQo6ZcuP5XMFohSTSD4=)
                          2: XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa (hash: c3SifmbdW15nfuTRwIPceqNmWNmz6mVEc9pu384Gaco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:f1:2e:d0:76:9e:f0:89:c0:c1:30:49:92:39:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
        Validity
            Not Before: Aug  6 22:01:03 2025 GMT
            Not After : Aug  7 22:01:03 2025 GMT
        Subject: CN=35d3daaa33a059fa5e0b49cb27998a46625122f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:71:89:a6:39:a0:15:b8:1d:f4:6f:fe:97:
                    96:f9:04:60:ab:05:8f:e7:59:74:73:ee:b5:a0:3d:
                    58:6d:ad:84:91:39:fa:2c:23:f9:57:79:56:3c:ef:
                    7c:b9:f2:a7:30:43:07:20:0d:51:da:21:b5:61:3d:
                    07:fa:a3:c9:b5:ce:5a:06:8f:75:98:e4:7b:30:1e:
                    8c:0f:28:8d:ab:18:ae:e7:03:f4:91:0e:84:19:36:
                    8f:77:26:a0:b1:57:f6:24:0d:2f:0c:84:26:99:1c:
                    9a:ec:9f:5e:4e:d1:e0:98:22:c5:02:f6:15:f1:fc:
                    4e:be:a3:63:5b:d4:bd:e3:77:fa:80:de:dc:f2:ab:
                    6e:4e:be:1f:dc:8c:fa:31:4f:b4:22:56:c4:d2:94:
                    fa:b7:55:0e:7e:a9:59:ac:00:26:6e:d4:c0:60:a2:
                    22:a9:33:d9:51:d7:19:33:61:9c:fb:e4:35:3f:e5:
                    ec:52:02:58:50:8a:d7:05:cf:0e:f9:f6:7c:fb:e5:
                    c0:41:5e:fd:6d:2a:01:4a:5c:af:dc:33:fd:b5:76:
                    1c:34:e0:8a:51:34:6c:23:96:02:5b:f1:73:59:aa:
                    eb:c1:8e:47:8f:b0:b5:ff:0c:83:9a:df:0a:6e:12:
                    9b:6c:21:6b:78:e5:db:f9:1e:4b:fd:6c:dd:15:3e:
                    29:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D3:DA:AA:33:A0:59:FA:5E:0B:49:CB:27:99:8A:46:62:51:22:F7
            X509v3 Authority Key Identifier:
                keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:53:f1:39:d6:ee:29:a0:9c:f6:cb:db:57:e8:b9:0b:ab:47:
         30:54:ee:68:9a:95:42:bb:e7:a0:b5:40:9c:66:ff:db:19:2c:
         b8:f7:81:5d:85:1e:85:a0:c8:f2:8f:7f:10:e1:ff:2c:14:69:
         f0:29:c8:62:e9:2d:02:da:8c:5e:7d:2a:3b:ce:c0:56:64:00:
         1e:f2:5d:c5:cc:77:df:16:7a:6c:ae:ce:91:60:94:68:73:47:
         d5:72:1b:12:a0:95:fd:df:5e:c2:92:ee:64:88:10:cb:3d:18:
         88:b4:f9:c2:3e:7b:b9:80:7a:89:68:29:a2:2d:72:0e:07:ef:
         7a:18:30:42:45:39:f7:c4:6a:57:2f:c7:0f:f0:b7:84:39:dd:
         78:af:c7:ad:93:2b:23:d9:d5:bd:a7:51:25:0f:ad:ff:aa:25:
         40:d5:60:e5:a7:ec:ea:b0:df:6b:6f:64:f9:26:39:d3:e7:5d:
         7e:b6:1d:56:13:95:7b:90:48:8b:d2:aa:49:4a:3f:fc:9f:54:
         91:10:27:2e:67:cb:cc:d9:6b:eb:8d:93:76:a4:39:69:10:21:
         6f:41:62:e9:34:f6:31:67:60:20:b2:d5:d2:49:fa:55:9f:af:
         7d:13:6a:c8:64:35:86:8e:97:c6:d5:7a:94:30:60:38:9c:ba:
         ba:ee:4b:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZvEu0Hae8InAwTBJkjlxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWJmMjJlODY0NDQyNTVmZGY3OGEzMGM0Y2IwYjJkOTFl
NWI3NTcwHhcNMjUwODA2MjIwMTAzWhcNMjUwODA3MjIwMTAzWjAzMTEwLwYDVQQD
EygzNWQzZGFhYTMzYTA1OWZhNWUwYjQ5Y2IyNzk5OGE0NjYyNTEyMmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWNxiaY5oBW4HfRv/peW+QRgqwWP
51l0c+61oD1Yba2EkTn6LCP5V3lWPO98ufKnMEMHIA1R2iG1YT0H+qPJtc5aBo91
mOR7MB6MDyiNqxiu5wP0kQ6EGTaPdyagsVf2JA0vDIQmmRya7J9eTtHgmCLFAvYV
8fxOvqNjW9S943f6gN7c8qtuTr4f3Iz6MU+0IlbE0pT6t1UOfqlZrAAmbtTAYKIi
qTPZUdcZM2Gc++Q1P+XsUgJYUIrXBc8O+fZ8++XAQV79bSoBSlyv3DP9tXYcNOCK
UTRsI5YCW/FzWarrwY5Hj7C1/wyDmt8KbhKbbCFreOXb+R5L/WzdFT4pQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXT2qozoFn6XgtJyyeZikZiUSL3MB8GA1UdIwQY
MBaAFDrr8i6GREJV/feKMMTLCy2R5bdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3V2eUxvWkVRbFg5OTRvd3hNc0xMWkhsdDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQt
MDE1MGM5NGY5NDBkLzEvT3V2eUxvWkVRbFg5OTRvd3hNc0xMWkhsdDFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQtMDE1MGM5NGY5NDBk
LzEvT3V2eUxvWkVRbFg5OTRvd3hNc0xMWkhsdDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1PxOdbu
KaCc9svbV+i5C6tHMFTuaJqVQrvnoLVAnGb/2xksuPeBXYUehaDI8o9/EOH/LBRp
8CnIYuktAtqMXn0qO87AVmQAHvJdxcx33xZ6bK7OkWCUaHNH1XIbEqCV/d9ewpLu
ZIgQyz0YiLT5wj57uYB6iWgpoi1yDgfvehgwQkU598RqVy/HD/C3hDndeK/HrZMr
I9nVvadRJQ+t/6olQNVg5afs6rDfa29k+SY50+ddfrYdVhOVe5BIi9KqSUo//J9U
kRAnLmfLzNlr642TdqQ5aRAhb0Fi6TT2MWdgILLV0kn6VZ+vfRNqyGQ1ho6XxtV6
lDBgOJy6uu5LtQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:13:48 2025 by rpki-client