Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
File:                     N50QO5Uwccqp4aiXOAiQQJbnk9g.mft (raw, json)
Hash identifier:          cGLrR62QHrm8/MABLJAY1jXZmWGkjsj8A3WuM75X/CY=
Subject key identifier:   BC:68:E3:33:A0:7C:2B:39:AA:3B:E5:BA:8D:68:3D:CB:11:F9:D1:34
Authority key identifier: 37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
Certificate issuer:       /CN=379d103b953071caa9e1a8973808904096e793d8
Certificate serial:       01976F2C05612B96BD3102FDD77354C662B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
Manifest number:          0861
Signing time:             Sat 14 Jun 2025 16:00:45 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:45 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:45 +0000
Files and hashes:         1: J2OkX8bApJPiRItiujPnBGrsZY4.roa (hash: i7nPB++63HS9z1hezyAi0vnytbZFG8+Xg2xHv015LZ0=)
                          2: N50QO5Uwccqp4aiXOAiQQJbnk9g.crl (hash: 9om9UJErWBKJFB73HQIdn919LTLwhEhdAkJgyb59Eh0=)
                          3: Ol1gwf97KN8C2okTQgFoNBJAj_Y.roa (hash: nOhD6696K5uFNmSeTl0PuDWrBC3Uu0s0j0X6YVs7JlM=)
                          4: UKgpB89XWxDrwt2wvJCexcV0Vro.roa (hash: EhxlZRaFnaHWTa4h+4XITRoT+tWzmXi1bhPwvQrMspw=)
                          5: owDo-dE90Q4aVz9Otyrxfp0jJuU.roa (hash: R3FfKqa+CBkhoX3AH8SVbam9fEJqpTMt1H0aKWJw/DM=)
                          6: siGNpjOukqtq61iEt69vPKECUBY.roa (hash: KGLP98dU7eIP8APR/O7z5omV59hwh3Vy+VU74c3Ej2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:05:61:2b:96:bd:31:02:fd:d7:73:54:c6:62:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379d103b953071caa9e1a8973808904096e793d8
        Validity
            Not Before: Jun 14 16:00:45 2025 GMT
            Not After : Jun 15 16:00:45 2025 GMT
        Subject: CN=bc68e333a07c2b39aa3be5ba8d683dcb11f9d134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:0b:47:0b:17:f4:c7:da:cf:25:a7:ae:21:
                    ec:e8:dc:83:41:2f:c8:e2:0b:b6:37:6a:8f:26:c4:
                    bf:90:67:82:d8:e7:06:8b:c2:79:ec:2c:38:19:c5:
                    31:de:63:7d:9e:f2:b9:41:b6:26:90:7b:97:16:dc:
                    3e:7a:6a:67:08:b3:16:7f:38:69:10:d5:6a:81:08:
                    e0:3b:a2:c5:57:b2:a4:1a:c3:c5:a0:60:00:17:3c:
                    7f:18:a3:9d:bb:1a:03:c5:50:bd:bc:81:53:1c:b6:
                    8a:b0:03:9c:ed:58:c7:6d:04:7a:b2:49:97:27:43:
                    25:0d:a7:fa:04:38:71:1e:38:a6:23:f4:ec:63:ed:
                    3b:f1:3a:bd:ab:40:d0:3f:bd:26:1a:7a:32:18:14:
                    fe:c2:47:78:66:0a:54:b8:3c:63:a2:ee:a3:b1:9c:
                    9e:e0:6c:db:4b:33:6b:76:72:cf:22:58:0c:20:7d:
                    75:7d:f6:05:fd:92:8d:b8:be:0e:74:50:9b:58:60:
                    4b:5b:53:4b:4e:9e:e5:5e:7e:5e:0c:17:c8:59:87:
                    20:98:aa:70:e8:f3:b4:b8:41:4c:bf:7c:79:66:8d:
                    a7:d8:27:6f:3c:b9:8d:15:fb:a2:67:21:19:63:42:
                    32:be:0a:db:72:40:68:06:59:8f:60:28:ee:bc:0f:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:68:E3:33:A0:7C:2B:39:AA:3B:E5:BA:8D:68:3D:CB:11:F9:D1:34
            X509v3 Authority Key Identifier:
                keyid:37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:5b:48:77:bb:2c:94:31:3a:9b:4a:78:9a:5d:01:20:8c:94:
         09:33:ab:a8:b1:1c:d1:98:a2:7b:8e:b9:d3:88:0c:75:d3:93:
         a9:91:78:a8:10:22:ea:0b:41:82:57:02:43:55:85:3b:97:a7:
         29:c9:7d:bf:4b:35:b0:61:ac:ea:19:4d:9a:4c:c7:70:e9:15:
         15:10:54:ec:bf:28:94:2f:08:eb:21:bc:c2:8e:75:a5:2e:ad:
         80:9f:34:8f:fa:8f:4f:b8:49:60:67:64:a5:b3:b6:c8:1f:d2:
         04:7e:1e:87:68:b1:14:56:a7:a6:15:b6:98:81:4f:2f:42:ec:
         81:db:16:9e:a7:73:a7:e0:22:08:2f:15:37:82:a9:d1:ab:7f:
         94:51:6e:bd:02:d6:33:f5:87:6e:df:4b:a6:c3:17:d1:8e:13:
         64:92:61:cc:ca:f4:b2:c4:78:82:d4:6a:40:6b:0a:21:b4:1f:
         05:7e:5a:06:c0:e9:02:71:b6:47:74:b0:c9:75:e6:79:b9:ed:
         ef:99:f8:c9:13:c5:bd:04:81:58:0f:75:eb:f6:13:22:7a:5c:
         24:7b:98:34:1d:55:af:fd:27:8a:da:2f:35:6f:9d:a8:42:2a:
         cb:de:0c:45:a6:34:62:6e:ab:d7:bf:6d:80:6d:4e:5d:90:2b:
         f0:c1:88:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:14:21 2025 by rpki-client