Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File:                     OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier:          z7hhNxMC2rp3YIIgobwNhzXF230GOPxluNC9hG9CMP8=
Subject key identifier:   B9:FD:A8:39:13:00:6A:E5:26:59:30:55:CF:C4:39:6D:4C:07:8F:E7
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer:       /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial:       0198D65FFD77DDE05CE8AD1A94BD2CFBEB26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number:          05C0
Signing time:             Sat 23 Aug 2025 10:01:11 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:11 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:11 +0000
Files and hashes:         1: BsLLTJoL5Z4HGp4lHrRp2sggxy8.roa (hash: KOPhzfVSci9RxNPGk2QlpxdIKfmzye/4QJQFoBktHeg=)
                          2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: 1tHaoDu/m9BkK0DbZfE12wvZL3AiYUHsUL0OEqzJxUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:fd:77:dd:e0:5c:e8:ad:1a:94:bd:2c:fb:eb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
        Validity
            Not Before: Aug 23 10:01:11 2025 GMT
            Not After : Aug 24 10:01:11 2025 GMT
        Subject: CN=b9fda83913006ae526593055cfc4396d4c078fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:2a:02:27:fe:10:9b:2b:5f:ae:d7:f2:16:
                    ca:b3:ed:4d:30:bd:9a:b6:05:ce:c0:d9:62:cf:c1:
                    ef:18:91:17:8b:27:0f:df:e7:0f:60:b7:56:5c:2e:
                    89:84:c6:a4:a8:5d:10:5f:0f:c5:9a:f1:a5:f4:a0:
                    d4:99:e6:46:fe:d6:d2:b4:1d:e2:fd:c4:12:7c:5e:
                    22:b4:2a:8a:42:ae:f9:db:e3:29:c6:9c:b9:2b:79:
                    7b:65:d6:aa:40:bb:2b:d7:8a:9f:69:77:56:ec:43:
                    7c:e8:58:48:f1:d7:9b:17:31:2e:08:3d:c9:ac:3d:
                    a4:92:82:7c:23:d7:72:82:8f:b3:6a:24:b1:11:34:
                    bf:2e:b1:5f:2f:3c:9f:9b:25:0e:c9:fa:6c:59:c2:
                    fd:f9:45:65:fe:b4:d8:54:9b:b4:24:88:25:e0:a4:
                    05:44:e5:d2:1b:c2:2d:1c:ce:a9:95:99:45:40:bb:
                    22:8a:66:5b:e9:45:6a:13:a4:41:f6:7f:a7:ad:c7:
                    58:65:4e:0d:0e:b2:8f:15:a3:c5:d6:b8:30:f8:77:
                    10:5d:3b:24:5d:a2:5e:a0:20:93:cc:e8:19:dd:00:
                    10:24:c6:29:f7:7d:fb:49:fb:e3:43:83:fc:62:8b:
                    ad:e8:a2:96:a8:1a:b5:22:5a:4a:6f:34:11:73:ad:
                    85:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FD:A8:39:13:00:6A:E5:26:59:30:55:CF:C4:39:6D:4C:07:8F:E7
            X509v3 Authority Key Identifier:
                keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2e:2b:a5:74:ce:83:07:6d:fe:a7:af:7b:51:ea:80:2c:e3:
         22:08:c7:bb:5b:8f:03:6c:e7:ed:11:1e:b0:4e:dd:b0:dc:01:
         26:b3:f7:63:c1:55:c5:48:f3:7c:48:c4:b0:85:f0:61:6d:91:
         de:b8:a8:6a:59:43:4b:94:2e:0c:9a:c5:dc:b5:03:73:57:ca:
         66:2a:ba:7d:ae:59:22:bf:f6:8e:2a:1a:d9:b5:81:5c:6a:51:
         23:fc:dc:35:96:73:ec:d1:0f:f9:b3:0e:c5:16:85:4f:8e:3d:
         76:8c:43:55:2e:ff:fc:58:0c:28:30:39:71:e3:89:58:06:8c:
         e2:af:65:0c:26:10:b9:15:f9:f2:29:f3:90:20:65:25:52:55:
         a7:bf:f7:15:0e:72:26:be:1d:5f:da:7e:a3:ea:44:34:6c:20:
         76:16:13:c7:69:63:e4:44:f8:67:6f:fe:1a:b9:71:c5:9a:67:
         ae:e2:82:71:e1:96:61:27:18:da:e3:a1:73:bc:6b:f6:ca:3d:
         67:55:9d:17:78:7b:af:87:11:cc:4e:24:51:93:c9:98:60:5b:
         03:c8:06:a4:d2:b4:2c:fa:18:d7:a8:8a:a7:03:58:89:23:d9:
         b8:f2:1f:0e:5b:b3:b3:74:cc:24:8d:6b:5e:75:ba:e8:32:12:
         c6:99:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:00 2025 by rpki-client