Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
File:                     om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json)
Hash identifier:          D5Wmv6tizlUcjT93QpG1lyDD9zE54eNf7HNltT0xyoM=
Subject key identifier:   9B:E2:6E:BA:4F:8A:EB:0E:21:40:9F:15:3C:33:08:B3:75:F2:E5:07
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Certificate issuer:       /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial:       01976BF44F8FDEFEAA1D7DECA7C072E78B1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
Manifest number:          1521
Signing time:             Sat 14 Jun 2025 01:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 01:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 01:01:02 +0000
Files and hashes:         1: GTYzwhiUq_J5h32d88k5dHS-pBI.roa (hash: DRh7rLYfY68cEV1ylr9M82OojbgdOB+T4zEG9BafNT4=)
                          2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: a7+fSQDO20FkQD6Bvx/rH52x8a3kmUGp5D+7bZT91nA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:4f:8f:de:fe:aa:1d:7d:ec:a7:c0:72:e7:8b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
        Validity
            Not Before: Jun 14 01:01:02 2025 GMT
            Not After : Jun 15 01:01:02 2025 GMT
        Subject: CN=9be26eba4f8aeb0e21409f153c3308b375f2e507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:b7:fc:bd:13:68:66:07:f7:04:03:c9:00:
                    d2:11:9b:b5:12:79:16:8b:fb:e2:4f:14:1f:52:e2:
                    e8:08:37:55:55:72:4e:eb:66:ea:e6:61:12:94:94:
                    ca:2d:00:d8:66:44:ae:1d:5b:cf:c3:8f:1b:50:bf:
                    07:3a:5d:92:73:40:f5:d3:cc:af:20:8a:6e:c2:9a:
                    43:d1:42:0a:ee:8f:40:ea:8c:a5:ff:1c:51:4d:d2:
                    50:07:6d:a6:7a:04:f8:fc:02:2f:b7:a9:6e:32:16:
                    99:85:47:02:1d:09:99:80:10:d8:4c:9c:bf:a2:e0:
                    80:4f:b5:b8:5f:2e:01:7c:3f:79:e3:12:2e:ba:8a:
                    17:53:ac:10:a9:f8:ec:37:f5:b4:eb:b0:88:37:f3:
                    02:6d:f4:66:38:c9:7c:e6:74:de:45:f2:7a:82:b1:
                    25:97:32:63:b3:5c:0a:53:00:99:8a:0e:6d:61:c8:
                    c1:3b:63:09:a2:52:06:86:2c:6f:0a:b0:33:a7:17:
                    f2:51:37:d7:05:b9:40:db:77:97:34:8f:e5:9b:05:
                    fb:37:c6:c6:67:1f:4e:2d:4d:fb:2f:4c:96:99:30:
                    bf:12:e0:3c:7a:d8:d1:62:7d:22:3e:90:bb:52:2b:
                    87:df:5e:07:2a:86:49:f9:76:51:46:3d:58:9f:71:
                    0f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E2:6E:BA:4F:8A:EB:0E:21:40:9F:15:3C:33:08:B3:75:F2:E5:07
            X509v3 Authority Key Identifier:
                keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ac:62:b7:cb:b1:ce:22:f0:82:84:45:0f:15:db:5f:f4:59:
         e8:5f:e3:b1:9e:60:49:92:7b:21:48:ac:9f:c6:1b:0f:5c:d8:
         b0:7a:7b:b4:dd:b9:51:67:c9:6e:c1:96:38:49:a3:15:c9:71:
         06:e9:c7:41:6f:57:40:e3:ce:47:20:0c:bc:e5:1e:df:41:e4:
         a3:0c:79:c5:18:0b:c1:a8:17:1e:72:81:40:e5:6b:73:15:5c:
         3e:25:9b:f1:07:a3:c7:21:17:aa:3b:cb:4a:6a:31:05:92:bf:
         61:52:e5:52:03:40:a4:b9:c4:67:fa:c3:59:90:7a:09:0f:08:
         0d:30:b2:ae:a8:ba:b5:83:80:45:43:2c:fd:38:5b:c5:c0:c3:
         e4:b3:ab:f4:4e:c7:85:75:56:0f:25:b4:5a:fa:34:a6:ab:e6:
         51:80:90:3e:21:42:f9:1c:89:93:da:be:7f:41:4b:07:f4:1f:
         95:d8:f7:5c:4c:4c:19:6b:86:9d:2b:73:d9:e9:b1:af:0c:8f:
         b1:04:44:1e:1d:fa:5f:4b:1f:c3:28:62:ba:0f:74:5d:30:17:
         2f:e7:c5:9f:d2:17:b3:23:68:e2:d0:37:e0:b6:0d:41:5a:bd:
         4a:9b:96:d7:bc:f5:86:cd:08:10:2a:c3:84:47:46:63:50:1a:
         72:f1:db:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr9E+P3v6qHX3sp8By54sfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNmZhN2VlMzBhZGEzNWFiMWZjMDRmMzQwZmVkZjY0N2E5
ZjgxNjIwHhcNMjUwNjE0MDEwMTAyWhcNMjUwNjE1MDEwMTAyWjAzMTEwLwYDVQQD
Eyg5YmUyNmViYTRmOGFlYjBlMjE0MDlmMTUzYzMzMDhiMzc1ZjJlNTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwm3/L0TaGYH9wQDyQDSEZu1EnkW
i/viTxQfUuLoCDdVVXJO62bq5mESlJTKLQDYZkSuHVvPw48bUL8HOl2Sc0D108yv
IIpuwppD0UIK7o9A6oyl/xxRTdJQB22megT4/AIvt6luMhaZhUcCHQmZgBDYTJy/
ouCAT7W4Xy4BfD954xIuuooXU6wQqfjsN/W067CIN/MCbfRmOMl85nTeRfJ6grEl
lzJjs1wKUwCZig5tYcjBO2MJolIGhixvCrAzpxfyUTfXBblA23eXNI/lmwX7N8bG
Zx9OLU37L0yWmTC/EuA8etjRYn0iPpC7UiuH314HKoZJ+XZRRj1Yn3EPLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvibrpPiusOIUCfFTwzCLN18uUHMB8GA1UdIwQY
MBaAFKJvp+4wraNasfwE80D+32R6n4FiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iODdhMGQtY2M0Yy00ODI1LWE3ZTQt
ZTkyNGNlNWE3NWIzLzEvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iODdhMGQtY2M0Yy00ODI1LWE3ZTQtZTkyNGNlNWE3NWIz
LzEvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKxit8ux
ziLwgoRFDxXbX/RZ6F/jsZ5gSZJ7IUisn8YbD1zYsHp7tN25UWfJbsGWOEmjFclx
BunHQW9XQOPORyAMvOUe30Hkowx5xRgLwagXHnKBQOVrcxVcPiWb8QejxyEXqjvL
SmoxBZK/YVLlUgNApLnEZ/rDWZB6CQ8IDTCyrqi6tYOARUMs/ThbxcDD5LOr9E7H
hXVWDyW0Wvo0pqvmUYCQPiFC+RyJk9q+f0FLB/Qfldj3XExMGWuGnStz2emxrwyP
sQREHh36X0sfwyhiug90XTAXL+fFn9IXsyNo4tA34LYNQVq9SpuW17z1hs0IECrD
hEdGY1AacvHbWg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:45 2025 by rpki-client