Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File:                     OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier:          TEHzWbNjzcwQw1w/GaWWkEvewCI77oISrKGkqNt7le4=
Subject key identifier:   B1:71:B4:9E:32:F1:BA:1C:2F:B6:DA:F2:2B:15:E7:78:5B:2C:99:F7
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer:       /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial:       0197B6A101D1E0EEEDCAC61F8A048C29F299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number:          052B
Signing time:             Sat 28 Jun 2025 13:01:34 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:34 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:34 +0000
Files and hashes:         1: BsLLTJoL5Z4HGp4lHrRp2sggxy8.roa (hash: KOPhzfVSci9RxNPGk2QlpxdIKfmzye/4QJQFoBktHeg=)
                          2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: bzDhbW/vb5yC5YMEhK+SdQw1Y/4mojo2awEs5qfaKsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:01:d1:e0:ee:ed:ca:c6:1f:8a:04:8c:29:f2:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
        Validity
            Not Before: Jun 28 13:01:34 2025 GMT
            Not After : Jun 29 13:01:34 2025 GMT
        Subject: CN=b171b49e32f1ba1c2fb6daf22b15e7785b2c99f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6b:c6:2f:59:55:bc:38:cd:4f:85:74:0e:e9:
                    22:32:7e:cf:a2:b5:ed:f7:05:aa:bd:38:4a:78:6f:
                    d3:a5:32:99:3a:9c:76:88:23:9b:71:35:53:de:82:
                    e9:9d:58:50:7e:f5:b1:a2:7f:10:c9:5f:85:43:48:
                    93:48:68:20:19:85:a8:1f:dd:56:47:66:87:53:fd:
                    a4:81:ea:22:a2:6f:78:ac:a7:82:5a:71:ac:1d:cf:
                    05:13:7e:fa:7f:d7:e0:74:39:5c:2b:8c:a5:f5:31:
                    16:64:f3:b8:b7:2f:1f:0a:55:bc:57:67:ef:49:42:
                    23:b5:32:53:5d:d1:1e:19:b0:64:43:7b:13:57:89:
                    af:3c:ed:30:eb:46:5a:d7:90:08:9f:0f:02:09:a3:
                    f5:ec:01:77:34:cf:a2:dc:c4:5c:d7:e2:7d:2a:4d:
                    a0:68:3e:c4:4b:d2:24:74:bf:64:39:a4:c2:58:22:
                    7b:b1:20:0e:97:ce:eb:dc:91:85:d9:98:9e:0a:63:
                    de:8d:48:79:7e:25:c0:c8:4c:47:83:f5:4f:6b:3b:
                    6c:79:a4:36:2f:33:cf:07:58:fe:bf:e4:ee:fe:b9:
                    a2:88:cb:25:60:7d:93:83:f1:cc:9e:8f:91:0c:b2:
                    e7:da:48:cd:15:72:7a:b9:f5:12:b9:58:02:49:be:
                    19:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:71:B4:9E:32:F1:BA:1C:2F:B6:DA:F2:2B:15:E7:78:5B:2C:99:F7
            X509v3 Authority Key Identifier:
                keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a2:d9:1d:15:b0:e5:02:ba:29:10:de:18:10:6a:01:ba:cc:
         f8:8d:4d:25:93:69:d7:93:8b:a8:2d:77:e5:12:03:5e:bd:30:
         5c:cc:2d:7d:db:e4:0c:b2:78:bb:19:5d:f3:81:5c:11:e1:2b:
         20:0c:ab:1c:b5:95:80:5e:db:aa:fc:82:e9:82:3d:4b:6c:6a:
         0f:c1:b3:69:e0:44:17:5b:00:49:24:1d:72:e2:5f:72:8d:d6:
         90:a7:71:f9:bb:76:a5:d5:16:8b:fb:78:42:72:f8:a3:2a:f4:
         35:df:35:e8:66:5e:61:bb:1b:89:21:f2:5a:11:61:a6:cb:16:
         7b:aa:d5:ba:e6:d6:8b:3c:57:f6:30:fa:df:46:56:d8:ef:6e:
         01:25:7b:23:23:dc:8c:04:06:62:29:7d:48:08:f2:48:b9:e5:
         57:df:97:33:90:57:e8:9a:1f:7c:ec:18:3a:0b:02:4b:d9:3f:
         a6:d1:24:1e:cb:31:67:21:4e:2e:e9:d4:28:78:43:ff:b2:cb:
         0d:f8:8f:38:1b:ff:92:90:87:98:58:50:72:b7:be:e7:34:da:
         4a:f5:5a:4e:d4:57:ad:68:eb:f0:e5:88:07:f2:09:81:25:22:
         2b:58:2b:07:30:49:55:4c:f8:cc:85:6d:83:d8:62:87:d7:ec:
         3a:50:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:25 2025 by rpki-client