Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File:                     mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier:          /RrWUgugSuOzRyQRgbiNpIbayiUdmZfO4036pjzVXOg=
Subject key identifier:   4F:98:AA:B9:24:61:D1:EB:A8:5E:56:80:7A:B9:22:D0:1D:94:4E:4A
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer:       /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial:       0197B96A5B374BE952ADBC562F66E3FB3A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number:          02AE
Signing time:             Sun 29 Jun 2025 02:00:44 +0000
Manifest this update:     Sun 29 Jun 2025 02:00:44 +0000
Manifest next update:     Mon 30 Jun 2025 02:00:44 +0000
Files and hashes:         1: FDxX9SBwi6ZE3MJeOvg7kb7kK38.roa (hash: bwymb63cONmt/c+6ZDVkw7Ek8DpIFx336RD8V0Gt1oQ=)
                          2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: /cobdngO1p718SHp93frlAk6Pbdao2nr+gUyPq2G8+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:5b:37:4b:e9:52:ad:bc:56:2f:66:e3:fb:3a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
        Validity
            Not Before: Jun 29 02:00:44 2025 GMT
            Not After : Jun 30 02:00:44 2025 GMT
        Subject: CN=4f98aab92461d1eba85e56807ab922d01d944e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:99:5d:89:0f:ab:f8:8e:3b:bb:b8:63:0b:60:
                    df:91:6b:44:53:77:32:02:06:75:45:77:6f:55:67:
                    5b:16:d0:de:51:97:03:e0:74:f3:2e:ab:37:7e:d3:
                    1d:7a:4b:bf:b0:75:48:93:8a:9f:a0:c6:88:e5:9c:
                    96:36:a7:a3:06:33:1d:f9:65:68:0a:d6:20:32:a7:
                    83:9e:d3:86:ea:47:f5:91:bf:a9:45:d9:02:ba:bf:
                    4a:79:0c:93:c4:4d:7f:e2:08:71:f8:29:85:e0:aa:
                    08:62:dc:bd:86:c4:cf:e3:76:9c:07:eb:45:07:79:
                    a0:c6:85:bd:4b:f0:19:77:7c:b7:cb:0f:f0:da:8b:
                    64:58:bf:d1:8c:8d:86:c7:99:c4:ec:1a:92:26:e4:
                    5b:a4:9e:78:c6:c0:93:a5:68:16:d2:b4:79:60:a7:
                    d1:0e:25:0d:e4:96:5c:cf:84:45:29:13:57:ce:6f:
                    67:de:37:37:f7:8d:cd:a3:57:8f:55:42:bb:68:50:
                    de:f2:80:04:f1:cc:4d:89:9f:8d:03:24:bd:bd:f6:
                    0a:70:0c:9d:c2:a9:ce:a4:7d:1a:5e:86:0a:95:83:
                    00:d6:0a:5d:a7:48:7a:65:da:01:61:29:81:a4:ad:
                    0a:f3:f3:ef:57:a6:8d:1e:cc:dc:9e:18:06:f5:41:
                    db:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:98:AA:B9:24:61:D1:EB:A8:5E:56:80:7A:B9:22:D0:1D:94:4E:4A
            X509v3 Authority Key Identifier:
                keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6b:8a:e7:e1:a3:67:bf:77:b7:1b:65:f0:39:8b:40:b0:7f:
         9f:77:5f:b5:b9:c2:7a:04:74:3f:ec:7e:c9:92:3b:fa:d3:d3:
         59:0e:75:e6:7c:34:2c:4a:f6:f7:25:5c:4c:b2:12:4e:70:fb:
         52:b9:97:41:1d:04:41:5f:67:e4:12:18:2d:ea:62:c2:41:e5:
         f0:56:0b:5c:b4:36:67:bf:18:d3:d7:53:1f:e8:52:2d:c4:48:
         73:c1:9c:17:89:86:f6:1e:7d:ee:06:99:00:64:37:52:dd:45:
         5e:9b:0e:80:8d:56:00:ca:9a:35:bd:07:ed:ab:3f:e6:14:62:
         76:75:5e:f2:85:3a:70:b4:27:ef:f4:af:42:fe:48:04:18:ea:
         a3:be:39:39:a7:bc:f5:f0:0c:12:dc:fc:5d:9f:ba:67:29:ae:
         a4:28:0b:3e:4f:dd:e2:a3:93:7d:3d:46:8c:3b:92:37:3e:c5:
         1d:59:be:ae:dc:10:8c:9b:98:49:1c:45:fe:75:3c:69:78:96:
         f2:d8:43:58:de:e2:b2:bd:ca:83:f3:a6:09:d2:38:eb:98:18:
         4c:c1:78:4f:a6:38:7d:2e:67:c4:c8:e6:20:5f:25:c3:98:10:
         10:9a:8f:51:c2:2f:cb:32:22:60:9c:bd:10:8f:14:c3:82:f2:
         d9:46:2e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:34:03 2025 by rpki-client