Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File:                     ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier:          4PwQLsfVcSqU8jxH+sg4fOMNDRNnmr1uRdBE37ivhyk=
Subject key identifier:   FE:15:15:13:7A:55:78:4B:B0:E6:FC:2B:E6:C2:43:3A:FD:7E:0F:F8
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer:       /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial:       01988C57F21C63855AF0390966F1423BD7C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number:          1623
Signing time:             Sat 09 Aug 2025 01:00:30 +0000
Manifest this update:     Sat 09 Aug 2025 01:00:30 +0000
Manifest next update:     Sun 10 Aug 2025 01:00:30 +0000
Files and hashes:         1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=)
                          2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: nolQFV6M39SO0jR8NSM1JiPTjRWciJfe5GIA6TbLLOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:57:f2:1c:63:85:5a:f0:39:09:66:f1:42:3b:d7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
        Validity
            Not Before: Aug  9 01:00:30 2025 GMT
            Not After : Aug 10 01:00:30 2025 GMT
        Subject: CN=fe1515137a55784bb0e6fc2be6c2433afd7e0ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:7b:99:25:2b:4e:be:a7:84:2e:51:e7:53:
                    a8:4f:65:3b:9f:1d:cc:36:c5:7a:ce:5a:5a:4e:74:
                    e9:35:cd:f0:c5:2b:f5:5c:e1:78:c2:45:14:52:92:
                    a3:4c:30:cf:7b:39:de:1b:7e:bd:12:96:43:b9:a7:
                    b1:00:7f:26:25:e5:b1:5b:6a:cb:bc:5b:17:a7:05:
                    2f:08:49:f2:ca:46:2f:12:ef:cc:8a:2d:34:72:64:
                    e7:45:8c:96:08:a6:e7:ed:aa:69:a0:e7:8b:10:fd:
                    b6:7a:bd:d4:dc:1a:9e:66:a4:6d:42:a1:3d:64:02:
                    0a:1f:5d:fc:6b:f2:06:4f:5f:d9:8f:e1:6e:c1:6a:
                    66:23:97:9b:d7:5f:16:f5:a8:1d:e2:4a:b6:48:9d:
                    04:b4:c9:98:28:05:fd:10:b9:3e:f7:d7:a5:77:01:
                    a3:7a:3e:ae:3a:87:ef:c0:7c:b5:8c:ad:8c:e3:df:
                    22:b2:5a:84:70:95:46:92:6d:60:29:8e:40:cc:db:
                    58:5e:d6:32:6e:80:43:0c:64:3f:70:46:41:4b:33:
                    df:ef:3c:dd:7c:8a:ae:21:4d:27:5d:5a:1f:c1:a2:
                    af:45:f1:4b:04:a9:e2:0a:39:c0:7b:91:4c:ff:cb:
                    69:a0:ba:67:78:a3:6e:79:95:74:77:25:27:9c:e6:
                    e7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:15:15:13:7A:55:78:4B:B0:E6:FC:2B:E6:C2:43:3A:FD:7E:0F:F8
            X509v3 Authority Key Identifier:
                keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:2a:5b:24:0f:6e:89:7f:7f:9a:22:2c:ba:7b:4b:18:de:11:
         d2:be:4b:3e:f0:a5:0c:8c:b5:70:79:ca:76:bd:70:62:8c:50:
         92:3d:5e:a1:58:20:89:cb:ec:d4:71:fd:b6:2c:6f:d2:46:b8:
         31:b9:cc:41:d4:c5:88:39:44:13:1c:e0:6e:06:00:a2:0d:ef:
         e5:73:e0:a1:2b:83:1f:70:5b:9b:b8:f9:84:72:7b:09:f5:65:
         54:61:57:8e:30:a0:da:8b:6b:66:22:8f:b6:f4:ca:91:65:9f:
         7b:ea:8c:71:53:c2:11:7e:23:0d:05:40:f9:de:76:fd:20:49:
         13:ae:bb:33:95:db:25:43:b5:6a:ab:c0:22:83:7e:30:56:9e:
         3f:1b:7a:da:67:11:09:8e:06:31:0a:75:b3:56:3e:5a:c5:8c:
         40:53:57:ed:39:8e:81:76:54:2e:ce:61:0b:03:c4:0e:3b:dc:
         9d:64:4d:22:ab:da:a5:e8:73:4c:c1:25:ce:16:91:60:dd:94:
         55:7a:a9:5f:a4:cd:51:e4:dd:49:d5:61:f1:36:07:c1:88:b9:
         11:75:9d:cb:08:4d:d6:c6:93:f0:b8:65:30:2e:df:65:15:7e:
         f6:73:33:34:02:e5:ba:dd:e0:49:fd:70:08:8d:7c:74:e3:f0:
         8f:22:3e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:54 2025 by rpki-client