Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
File:                     N50QO5Uwccqp4aiXOAiQQJbnk9g.mft (raw, json)
Hash identifier:          9Jod/P1ezRk7hwlPW1gls/HthDOl0la57f+guEFuz3A=
Subject key identifier:   F0:60:42:B2:08:1D:25:89:25:BA:FC:A2:AE:69:27:06:53:A5:EC:0A
Authority key identifier: 37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
Certificate issuer:       /CN=379d103b953071caa9e1a8973808904096e793d8
Certificate serial:       019A49601933FE3BFED3CAFDD598734411A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
Manifest number:          09DC
Signing time:             Mon 03 Nov 2025 11:00:25 +0000
Manifest this update:     Mon 03 Nov 2025 11:00:25 +0000
Manifest next update:     Tue 04 Nov 2025 11:00:25 +0000
Files and hashes:         1: J2OkX8bApJPiRItiujPnBGrsZY4.roa (hash: i7nPB++63HS9z1hezyAi0vnytbZFG8+Xg2xHv015LZ0=)
                          2: N50QO5Uwccqp4aiXOAiQQJbnk9g.crl (hash: MkmH2EcprO/cJaxkp63gW3OP2jqpyyYa7Zn29AhtY+E=)
                          3: Ol1gwf97KN8C2okTQgFoNBJAj_Y.roa (hash: nOhD6696K5uFNmSeTl0PuDWrBC3Uu0s0j0X6YVs7JlM=)
                          4: UKgpB89XWxDrwt2wvJCexcV0Vro.roa (hash: EhxlZRaFnaHWTa4h+4XITRoT+tWzmXi1bhPwvQrMspw=)
                          5: a8iyIDpnvnbxbTS2n1VDZieJ_9E.roa (hash: 8Zfyg7ufLSgxjTlxOposyYi/HNbgCO7Wpg4AzvBTpFY=)
                          6: owDo-dE90Q4aVz9Otyrxfp0jJuU.roa (hash: R3FfKqa+CBkhoX3AH8SVbam9fEJqpTMt1H0aKWJw/DM=)
                          7: siGNpjOukqtq61iEt69vPKECUBY.roa (hash: KGLP98dU7eIP8APR/O7z5omV59hwh3Vy+VU74c3Ej2U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:49:60:19:33:fe:3b:fe:d3:ca:fd:d5:98:73:44:11:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379d103b953071caa9e1a8973808904096e793d8
        Validity
            Not Before: Nov  3 11:00:25 2025 GMT
            Not After : Nov  4 11:00:25 2025 GMT
        Subject: CN=f06042b2081d258925bafca2ae69270653a5ec0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:1d:a2:de:d4:a9:fa:03:0c:60:48:36:ba:
                    33:2c:ca:63:a6:78:cc:24:ef:b2:66:63:30:91:8a:
                    44:5b:6b:66:5c:8a:0d:79:de:db:df:a2:73:b9:f2:
                    c3:36:ef:ae:cb:f3:6c:4a:47:43:d0:79:b8:f1:75:
                    81:65:39:54:78:ea:9e:da:c7:c3:97:a9:fb:7a:93:
                    c6:c8:a0:dc:72:94:57:f9:2e:d1:71:69:04:33:8f:
                    1c:bf:26:b6:5e:7e:60:cf:21:d6:95:2a:36:68:b8:
                    fb:f4:7c:13:e0:59:8e:92:90:3d:c3:45:22:b0:1c:
                    44:ce:c8:46:66:0f:6a:bc:72:9a:6d:48:22:d0:48:
                    80:27:35:1c:c6:99:d5:b2:ab:c7:24:fb:f0:0d:84:
                    53:c0:4a:19:74:45:5f:56:ab:9b:60:14:57:2a:f7:
                    35:e2:d5:4c:22:c9:b0:8d:dc:c0:97:55:d5:f1:34:
                    f6:aa:f9:b6:df:07:fe:78:87:0d:21:cb:a4:6a:52:
                    1b:05:43:cc:ab:28:3b:6d:d4:94:62:4a:32:79:f6:
                    6b:c5:2b:40:dc:f8:b1:ac:70:94:c6:e7:34:5a:7b:
                    53:6d:de:f8:c3:89:6c:d8:54:5f:bc:d7:95:be:3d:
                    d5:52:81:c7:69:f9:f6:1d:e1:79:dd:9c:c2:24:d5:
                    c4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:60:42:B2:08:1D:25:89:25:BA:FC:A2:AE:69:27:06:53:A5:EC:0A
            X509v3 Authority Key Identifier:
                keyid:37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f0:ac:74:23:10:68:87:9a:2f:fa:b8:34:c6:ab:b3:28:33:
         a0:b8:41:82:26:51:81:14:92:c1:c0:e5:9d:fc:e3:1a:3d:56:
         91:5c:87:59:21:bb:de:c9:5f:06:a1:2b:d0:62:b3:1a:1c:3b:
         05:81:a1:d1:88:88:34:cb:4e:06:c8:54:e6:b4:5f:0c:51:48:
         a9:0e:67:91:fa:0c:ac:a3:f3:66:4a:59:bb:7a:c3:05:4f:d2:
         ad:85:2d:d3:8b:2d:ee:e5:3d:d4:59:ac:82:00:de:c8:2f:0e:
         9c:e7:03:93:02:a5:9c:20:d4:7d:f4:3e:4b:0e:e6:b8:b4:81:
         67:48:e0:19:62:10:1e:40:c7:c6:1e:be:f5:9f:69:14:5e:06:
         55:1c:16:a8:4c:49:dd:bc:ed:c5:c5:e9:70:6c:51:cb:11:f1:
         7d:c9:0d:8f:bc:67:34:4d:37:1d:2c:6f:76:2e:78:3f:ca:1a:
         59:b0:dc:9b:e1:97:b0:84:46:69:ac:cf:ca:cf:f7:c1:b0:db:
         9d:9f:fa:bd:dc:5e:0e:85:5b:ae:d2:1b:fe:96:8e:b5:30:ad:
         a8:c5:95:60:cd:b1:5c:6f:1b:c3:d9:32:d5:ec:eb:48:e6:87:
         e8:b6:4c:31:7d:cc:cf:13:ee:4c:46:17:cb:37:d9:e8:cc:c8:
         15:77:a7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:27 2025 by rpki-client