Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
File:                     owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft (raw, json)
Hash identifier:          6QJJdNKzrgELK3AOWiWUieS0h5G6+yhiADmBU9sWtz0=
Subject key identifier:   F0:6A:27:34:E8:8D:B2:39:59:D4:B0:40:70:40:9B:62:E4:3A:D7:7D
Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Certificate issuer:       /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Certificate serial:       0197B77C592963C9ACE29EED3C49CB4A5775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
Manifest number:          0751
Signing time:             Sat 28 Jun 2025 17:01:09 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:09 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:09 +0000
Files and hashes:         1: 75LK0aL52naimh1x42NbpBoOy-w.roa (hash: +e/KEGbv2gq7/ZZoiVRRifw/ABGsD3UfOMxXZbs5gMo=)
                          2: owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl (hash: ftJqCKYnou1UFCbmWUOvsu2D+1VZOZYa3RXYWdbkyuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:59:29:63:c9:ac:e2:9e:ed:3c:49:cb:4a:57:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
        Validity
            Not Before: Jun 28 17:01:09 2025 GMT
            Not After : Jun 29 17:01:09 2025 GMT
        Subject: CN=f06a2734e88db23959d4b04070409b62e43ad77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:38:ca:45:46:be:06:a0:0f:06:5a:66:a8:
                    38:ee:2f:8e:ac:be:75:d6:a3:4f:b4:2e:28:c7:02:
                    29:35:a1:ea:f3:c4:ea:3e:d5:bb:0e:62:9a:43:0a:
                    3e:82:46:0b:79:e1:76:ee:48:f6:25:60:fa:d0:5f:
                    69:b6:bc:18:07:4c:df:80:cf:e1:04:21:2d:44:f1:
                    89:7c:40:d7:bb:ea:f3:0d:1f:ca:62:7f:cd:ac:5c:
                    26:e8:1b:88:62:ab:41:62:53:2d:14:e2:77:be:a2:
                    40:47:6f:97:eb:e5:78:75:04:1f:80:47:25:aa:98:
                    02:a8:f1:c0:f3:09:f9:89:dc:1f:c0:29:e8:40:cb:
                    4c:f4:b6:0e:01:d1:93:f3:9c:e9:77:1e:05:fa:2b:
                    da:f7:6c:d7:0e:cb:db:28:16:04:8b:11:7c:99:b9:
                    9b:a0:7f:b6:20:a7:ea:c4:97:a7:49:a3:a4:58:70:
                    31:3d:a7:da:11:6b:e1:4d:02:c9:80:ac:60:11:9c:
                    74:12:4a:03:37:df:f3:f9:87:bd:a4:1e:6a:82:2e:
                    c2:eb:2a:80:f8:40:40:39:44:9e:e8:af:7b:73:e3:
                    a5:05:46:0d:90:5a:83:90:f0:63:ac:e6:57:a7:8c:
                    2e:c4:22:ce:dc:a1:73:50:e9:14:df:a9:99:d7:0a:
                    a4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6A:27:34:E8:8D:B2:39:59:D4:B0:40:70:40:9B:62:E4:3A:D7:7D
            X509v3 Authority Key Identifier:
                keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c9:ee:d8:0a:18:b1:30:25:4f:c2:78:01:47:3f:1d:7a:cd:
         47:e5:f3:0b:a1:54:a2:d6:67:86:93:b8:13:04:36:97:ce:ab:
         2e:80:94:a3:cf:2e:88:75:31:a5:f7:63:a3:bc:32:4f:99:52:
         5b:12:ff:9f:54:73:1c:be:e7:af:ed:e8:fe:d7:c7:5f:d6:78:
         76:69:89:84:0a:3d:b1:21:3b:3a:5e:9f:2d:2b:02:bb:c0:41:
         9a:d4:4c:c2:6c:ac:ea:35:70:4a:01:69:74:4d:b2:2e:81:9b:
         1b:21:18:4c:d9:b1:bd:5b:e4:01:45:8b:e2:8d:1e:0f:fa:d8:
         28:b4:27:02:bb:ff:76:d1:78:00:b7:80:30:f0:f6:43:e7:08:
         2b:62:cf:d1:a5:cd:2d:39:70:24:76:93:79:ab:46:2e:48:05:
         d8:15:11:4e:d1:d6:96:38:7c:f0:97:fa:d1:63:57:1a:1e:29:
         c0:9a:9a:c6:3b:8e:6e:83:7f:ee:46:ae:92:46:70:21:db:dd:
         55:76:b7:6c:3e:26:4a:dd:91:dd:c5:82:98:76:81:d8:71:74:
         8f:f5:ab:d6:9f:d7:13:ef:5f:30:d1:22:6d:d4:00:ba:82:64:
         a8:be:00:f7:52:90:3e:88:9d:25:87:4d:a0:6d:25:6d:62:3f:
         27:85:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:48 2025 by rpki-client