Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
File:                     OwmORe9LtdGNvIbFoTX1fry-AF0.mft (raw, json)
Hash identifier:          bD6JDN20rp+mzZiRQ9UsiC/jNV5mkr69riASuYUmfbY=
Subject key identifier:   44:92:C4:A4:05:39:69:70:1B:F4:38:F6:D1:FA:75:8A:84:18:76:5E
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Certificate issuer:       /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial:       0198D583E045139FE603C4C71D9A6CA74336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
Manifest number:          0CAC
Signing time:             Sat 23 Aug 2025 06:00:46 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:46 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:46 +0000
Files and hashes:         1: 0CU8gK0M0FreSaI70cF5ooIUWnA.roa (hash: 3AhvcPwm/9eRzoLDWBdCRrt2ESsUhmDJGeKMEdO3cAk=)
                          2: 0ESHx6o_bEDdbe3bS47z5AA9_2A.roa (hash: FBbhXK+wtLEWtxbxvTb522xPc5/xwLbqkikaE9rGgWA=)
                          3: 1-nVBMclHTDps1NSLbwKMKR1iiTs.roa (hash: 4AkcTj0fNGL65T6WanUrryLYpvk8ooyp6N8RAfw9n+c=)
                          4: GbOTYXVRE4nGIgwOQA6zBXlj2Xo.roa (hash: encqJVvBdRm6B6vTFCshfVj5JBcWptS0eKrTwjTdeJk=)
                          5: HyPgpAuvMsNI5L6SLPPAdnBnPdo.roa (hash: EVOBxrtD9ibYF2I1shFMN6eNa05ZrbHe+uhDMKiGbNk=)
                          6: IvvEQkJx_YQuA7WDKcWTwA6sjeM.roa (hash: TYlXh7A49R6hcyPJlA/asJPKwJrsxKdwQselHHTfu5Q=)
                          7: JY5i8EzBZBxEJHFfrehIcHiV5Ro.roa (hash: fb4DYVb7xf+ej8L7lVMYzB+36KaoNm7ycChtN8C1vqA=)
                          8: OwmORe9LtdGNvIbFoTX1fry-AF0.crl (hash: sFoAB9uigwN3D/tSnTfYZKVCHckcLcFL1NMDX9oFx4E=)
                          9: S714ou8hYqjvmFB4nmghIWDuzT8.roa (hash: /BUpwNlFfWECuzcvwXarqFvS3D6dRZwllAWqKckM2JU=)
                          10: Sa2A7xExTELpPMSIQECLbOLbVbY.roa (hash: lUb2znphtJClDLO7Y7A5OYR7OMkhnaQN6ugZEy2cIuI=)
                          11: SlDcuXgMtJBGo8YlgFJf41C4kAo.roa (hash: SG0BWCyRtxyo4M02OYtmA2zjOWnb5KfeZ0pEnDDi914=)
                          12: VjGUvPYUWgp-0uedFQJC98v6fEo.roa (hash: jGCrku5NTRGndH4tqMN86FEJPJ73k9kCLkdTKB2wH5A=)
                          13: Z-Ur6Re147f49wwXtBgxnUTtQco.roa (hash: 6jMXEqLaJpiU5oHiEpHv2AWSooBvq9dmOPpZl+dAG7k=)
                          14: ZXvQgtCwdZFH33GeNkjgldbwU0g.roa (hash: WG+LLLlTTipnD9xWrIvYnomhJk4LiYNkyxpSwcuckf4=)
                          15: ZhUy_k5L6JItWU-BH4wSnhWOWaY.roa (hash: XFy75Oxpy6qH/wjYftX9sq3Nnb+mwb1qdkhuxGw1xN8=)
                          16: aFqGzzPnvGg6PPai6cgdL5YWXWI.roa (hash: a/LIbVs5CKwdoXoUSNeyQY9w3ja6VjMgxqtVYMhCu2E=)
                          17: at6Njp_LSdm-6vSZZn0Y2wUTW9w.roa (hash: /L/XMnqbV49Tm12Uts9p2wICgYYXmFtgyFTFjXCqUzc=)
                          18: atuyYpoVRKQHnFtgDV3FM-vFLxM.roa (hash: qXfV8yAI5tXvkScsLElC1FZo67Cs+dJHRWE3vQl62to=)
                          19: ediJMJBzETBra22Tko9jnlFnOYA.roa (hash: oCcIPCoFUy+fyzOqy+mhQqpOzf2wz/N+TlISESEMNNs=)
                          20: q2sdLUq8oTKjFXabTIHjNujteO4.roa (hash: DmdPmf4rfc5GBaM+wuurYH2BFaBH9ELo6PMdUoe2Fiw=)
                          21: tzK7bQadc-X5ERcHUFRyrLjFAic.roa (hash: pH5a6hVvwpFpvLEU3OQ9naeDuYIybxvVLAzccWIRqYM=)
                          22: xymeMR66aDWDmDhIlx2JEKPGuQ4.roa (hash: FDOGD9cmw7d0tSGevYfgks8MljnMa/gRurSZQ7spuUQ=)
                          23: yGG8haOhseC4wLjAMMMPhHZTXjA.roa (hash: lNJuGf7SRWFqIxTMR/qz5nkSoM2R54KFa9KdvNjHl+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:e0:45:13:9f:e6:03:c4:c7:1d:9a:6c:a7:43:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
        Validity
            Not Before: Aug 23 06:00:46 2025 GMT
            Not After : Aug 24 06:00:46 2025 GMT
        Subject: CN=4492c4a4053969701bf438f6d1fa758a8418765e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:b8:a3:49:ef:83:f3:06:2b:bc:6c:41:30:
                    03:ef:37:02:96:54:22:c2:a0:81:5f:bb:68:3d:94:
                    f6:9a:18:6d:a7:6c:d8:18:f1:77:65:ed:88:a5:d9:
                    cd:d1:0b:7b:ca:01:b9:02:27:46:2b:e8:69:a0:57:
                    35:66:fd:19:96:02:44:36:f6:50:f9:15:3a:57:48:
                    e8:9e:4b:df:d0:8c:49:f6:a7:03:81:78:97:69:8b:
                    b2:1a:17:3b:fb:39:bc:a1:bc:d3:fd:81:1a:b8:26:
                    b8:3c:a1:66:73:88:8e:f8:ab:e5:9c:c3:d8:74:cd:
                    e5:a6:cf:ed:9f:38:c1:d9:e2:d4:4e:14:ae:39:a3:
                    96:6e:60:54:ef:69:e5:f7:b3:66:81:0c:04:7b:14:
                    5f:55:01:57:fb:d1:a0:8a:b9:d6:d5:fb:76:54:b1:
                    f5:d2:2a:33:43:11:06:df:0a:c5:b2:4e:74:b4:42:
                    54:9f:4d:69:1c:15:31:eb:44:44:58:13:30:9e:57:
                    a6:be:8a:88:43:41:04:93:33:64:20:10:7d:27:63:
                    de:7f:13:2c:7d:fc:1e:bd:96:10:a1:8e:5a:52:46:
                    86:f4:1f:ac:df:38:7e:85:23:4c:e2:ff:bc:c3:ca:
                    bb:29:c7:5d:3f:40:21:f9:0a:1f:77:1c:d1:41:e3:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:92:C4:A4:05:39:69:70:1B:F4:38:F6:D1:FA:75:8A:84:18:76:5E
            X509v3 Authority Key Identifier:
                keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a2:dc:f2:31:e6:f6:8e:d3:ae:e4:02:e7:71:76:a8:df:42:
         80:b6:62:0b:28:6d:5b:38:e0:97:61:77:98:82:03:54:26:77:
         cb:9f:45:cf:9f:d0:98:63:3d:95:29:35:71:2c:eb:e0:2d:3d:
         88:f2:25:a5:25:8a:6c:6b:59:db:41:e7:54:ef:5c:3d:a7:d4:
         23:80:8d:77:e0:9e:8a:38:38:33:c7:de:9b:9e:e6:a8:cc:19:
         0f:8d:15:ec:d8:6d:0d:2f:5d:7e:2f:0d:36:1a:34:f5:42:69:
         57:9f:75:fc:86:67:60:4b:54:3d:dd:df:de:87:88:c2:a4:65:
         29:65:01:d7:3c:2d:db:4d:fc:5c:39:87:45:d4:b5:54:f7:69:
         09:f2:df:db:be:02:92:14:45:b2:9e:17:04:f0:73:97:c4:fd:
         8c:a5:dc:f3:d4:c1:00:03:01:89:ca:9c:89:a8:14:a2:44:59:
         e0:f1:3d:3e:24:d8:e4:04:ee:04:b9:67:bc:0b:50:2d:93:9c:
         77:a2:c5:31:06:30:2c:3d:05:db:93:39:6a:e7:6b:3f:d3:d7:
         33:d2:58:e3:12:6c:1e:06:4d:f7:37:91:86:4a:7e:de:3b:54:
         dd:bb:34:6b:89:26:62:e8:48:08:ce:9c:57:04:93:68:73:57:
         ae:47:79:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg+BFE5/mA8THHZpsp0M2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjUwODIzMDYwMDQ2WhcNMjUwODI0MDYwMDQ2WjAzMTEwLwYDVQQD
Eyg0NDkyYzRhNDA1Mzk2OTcwMWJmNDM4ZjZkMWZhNzU4YTg0MTg3NjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqly4o0nvg/MGK7xsQTAD7zcCllQi
wqCBX7toPZT2mhhtp2zYGPF3Ze2IpdnN0Qt7ygG5AidGK+hpoFc1Zv0ZlgJENvZQ
+RU6V0jonkvf0IxJ9qcDgXiXaYuyGhc7+zm8obzT/YEauCa4PKFmc4iO+KvlnMPY
dM3lps/tnzjB2eLUThSuOaOWbmBU72nl97NmgQwEexRfVQFX+9GgirnW1ft2VLH1
0iozQxEG3wrFsk50tEJUn01pHBUx60REWBMwnlemvoqIQ0EEkzNkIBB9J2PefxMs
ffwevZYQoY5aUkaG9B+s3zh+hSNM4v+8w8q7KcddP0Ah+QofdxzRQePt1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESSxKQFOWlwG/Q49tH6dYqEGHZeMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMaLc8jHm
9o7TruQC53F2qN9CgLZiCyhtWzjgl2F3mIIDVCZ3y59Fz5/QmGM9lSk1cSzr4C09
iPIlpSWKbGtZ20HnVO9cPafUI4CNd+Ceijg4M8fem57mqMwZD40V7NhtDS9dfi8N
Nho09UJpV591/IZnYEtUPd3f3oeIwqRlKWUB1zwt2038XDmHRdS1VPdpCfLf274C
khRFsp4XBPBzl8T9jKXc89TBAAMBicqciagUokRZ4PE9PiTY5ATuBLlnvAtQLZOc
d6LFMQYwLD0F25M5audrP9PXM9JY4xJsHgZN9zeRhkp+3jtU3bs0a4kmYuhICM6c
VwSTaHNXrkd5Fg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:59:52 2025 by rpki-client