Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
File:                     OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json)
Hash identifier:          NVYWr07zfjXFiWzElBLBzm9u4SF3KsyOz6wyVg1wIfo=
Subject key identifier:   4F:E8:71:96:7F:AB:BE:5B:7D:9E:4B:3D:AA:CC:7C:11:F1:28:52:A8
Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
Certificate issuer:       /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Certificate serial:       0197B77C41A0303A9C392EE97B2648523608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 17:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:03 +0000
Files and hashes:         1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: FE1d5pkYWrv+B+ZRkKy5ThxpIhD9UNQUro/RQ6kk5pQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:41:a0:30:3a:9c:39:2e:e9:7b:26:48:52:36:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
        Validity
            Not Before: Jun 28 17:01:03 2025 GMT
            Not After : Jun 29 17:01:03 2025 GMT
        Subject: CN=4fe871967fabbe5b7d9e4b3daacc7c11f12852a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1a:6d:23:90:b8:75:83:7e:d6:53:be:ef:5c:
                    14:15:09:af:f4:e9:1f:84:e5:23:40:82:80:ec:e2:
                    ba:5b:3b:0b:6c:35:92:5c:8f:e8:76:cd:7c:d5:97:
                    a3:e5:ce:79:83:19:7f:98:6e:fc:a0:8a:02:5d:d6:
                    dc:7a:6b:e3:84:b9:26:b4:9f:6e:12:7a:38:86:82:
                    c6:ee:bd:14:c3:9e:4d:f2:29:33:1b:7f:98:b4:d0:
                    f7:ad:2c:2d:60:18:e0:50:ac:0e:f3:63:57:d8:51:
                    46:ef:4e:b3:b9:78:73:a9:37:a0:b4:23:3b:1f:ef:
                    d3:43:b4:3b:8c:fe:b5:3b:5a:70:9e:06:a6:8f:b1:
                    47:c7:ed:69:b7:2e:15:0c:97:13:74:0e:b5:f9:55:
                    0b:98:5e:4f:86:4e:e0:7d:ce:78:27:f3:c8:89:ab:
                    1a:04:43:89:69:65:00:97:96:53:85:55:4d:81:cf:
                    74:2a:ab:21:38:4b:1c:69:ee:35:c9:b6:ce:78:58:
                    1b:d7:d9:f0:32:79:1a:91:2a:b2:99:63:d6:64:76:
                    55:f0:44:9d:67:18:f6:33:bd:52:73:1c:c6:31:c4:
                    4f:0d:52:b0:c4:bf:81:3d:cf:a8:a3:e6:81:98:8d:
                    97:ed:3c:6f:e5:82:b9:2a:fd:b3:8d:15:c6:57:78:
                    77:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E8:71:96:7F:AB:BE:5B:7D:9E:4B:3D:AA:CC:7C:11:F1:28:52:A8
            X509v3 Authority Key Identifier:
                keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1a:d1:c7:14:3f:f0:4b:c1:e3:71:1b:aa:16:97:32:b9:4b:
         92:78:fe:22:47:b6:1d:70:4d:46:ff:59:bf:cc:be:9f:bf:c5:
         da:b8:74:e1:36:e4:12:2a:20:2e:ff:67:a1:28:50:d7:39:dd:
         df:7b:93:c0:61:e9:5e:f0:94:eb:20:33:5f:34:ca:49:5e:ce:
         a5:4b:2f:99:a8:a8:09:14:34:fe:0c:e5:d7:84:a9:0f:0a:a7:
         ce:0d:1a:e8:f4:e8:8a:41:cb:9c:7b:69:6e:ae:9f:23:cf:9b:
         dc:64:03:ad:64:71:eb:1d:c5:97:02:0f:41:2d:c0:57:52:e0:
         a6:d8:a8:74:60:70:5e:08:0c:35:8e:1c:dd:1e:af:e1:83:62:
         78:47:36:51:1f:e1:4e:15:59:49:84:15:47:a0:f3:1b:3b:a1:
         6a:d2:49:b9:b2:40:ee:83:3a:75:bd:44:6b:b9:3d:73:68:25:
         65:57:7a:fd:d3:5b:86:02:ba:82:f1:0e:77:ec:2d:6e:eb:7b:
         15:f2:ec:f1:cb:4e:62:f6:15:9a:47:b5:12:05:33:68:6e:2c:
         eb:3f:c6:13:1b:11:d0:79:e4:e5:ab:b1:9a:9c:d5:d2:a3:2b:
         a3:92:af:6a:87:1f:99:ab:65:78:dd:53:e0:a1:cd:27:9b:f0:
         48:99:49:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:36 2025 by rpki-client