Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
File:                     obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json)
Hash identifier:          ck9ItHl+DJvWbbLHFNT4og5Rm+quKsFH8Eye64rYR4w=
Subject key identifier:   50:C7:91:8F:21:E7:FB:BF:54:63:02:6F:15:93:40:FB:C6:3E:70:52
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Certificate issuer:       /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial:       01988F5958631EC4AA3842905EC151E6D2E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
Manifest number:          0BC0
Signing time:             Sat 09 Aug 2025 15:00:53 +0000
Manifest this update:     Sat 09 Aug 2025 15:00:53 +0000
Manifest next update:     Sun 10 Aug 2025 15:00:53 +0000
Files and hashes:         1: 72WUZg4a8Mn3wM6qcS6lKaFMvy4.roa (hash: J12B/L+u1x8UjkZE3gEtXs8elHp+K5+c+2ncMirPn90=)
                          2: GvxdNTfKZ8cK6T0E1lcMYR0-Eug.roa (hash: mWN38f7I4P8OFBnEBE5XW/rXhM8WqbQ5XVGNq6kRS/Y=)
                          3: HoVqlvj2DjGVdZLOvKg3TFq5rLM.roa (hash: WucuWrLb+R81SwXSHnAbfiXE85yoaiYHwxSfh36VGn0=)
                          4: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: MZmLb0O7nDLCYZqUpK+8QWjJqoLz6bL3fLEbDOsIWpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:59:58:63:1e:c4:aa:38:42:90:5e:c1:51:e6:d2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
        Validity
            Not Before: Aug  9 15:00:53 2025 GMT
            Not After : Aug 10 15:00:53 2025 GMT
        Subject: CN=50c7918f21e7fbbf5463026f159340fbc63e7052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f9:89:d6:cc:69:59:59:4a:c2:4b:ba:ff:ee:
                    83:35:7d:ae:43:1f:af:f0:fe:1a:00:f5:d6:89:b9:
                    11:b8:9d:58:c2:2a:fe:d6:62:7e:03:9f:da:d2:ea:
                    f8:dc:6e:56:08:c3:6b:de:50:ec:28:0d:e0:db:a2:
                    61:a0:28:32:d7:49:ca:0a:7a:f4:65:48:ba:e8:6e:
                    0f:ca:a1:91:22:f4:ca:db:ba:ba:b3:40:1e:92:d2:
                    c2:e4:74:72:ab:3d:65:5b:5a:01:3a:f0:91:35:fa:
                    fc:a2:1c:fb:9e:e4:4b:ed:52:55:5f:d6:01:54:85:
                    db:3a:08:b1:72:99:f2:5d:17:86:4c:30:b0:e4:aa:
                    4e:8d:36:22:d8:c5:73:7f:35:75:a4:1b:c2:2f:10:
                    47:ce:3d:d2:a2:36:fe:f9:91:b7:9a:a9:1c:67:49:
                    7e:68:78:73:3f:9b:68:cd:20:05:ec:a7:38:59:e0:
                    81:40:36:c4:e5:dd:e9:47:7a:8b:bd:8d:a1:94:83:
                    c1:bc:fb:12:39:05:46:31:de:32:c6:60:ef:a3:b8:
                    23:3e:25:32:aa:98:e8:3d:58:c3:22:a1:6d:f3:fa:
                    08:d2:3a:e1:5c:de:39:8a:a9:a3:46:f0:7a:51:bf:
                    1c:5e:bd:86:0f:45:e8:5f:54:52:ac:b3:72:b0:d5:
                    db:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C7:91:8F:21:E7:FB:BF:54:63:02:6F:15:93:40:FB:C6:3E:70:52
            X509v3 Authority Key Identifier:
                keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:10:ed:e8:04:ac:56:14:21:9b:d0:39:3e:0e:78:37:c1:0d:
         34:79:95:85:b6:95:5a:05:62:51:3a:76:af:d6:51:99:89:43:
         22:5c:1c:69:bb:40:2d:83:fc:56:15:d3:85:7b:7e:2b:8f:5e:
         e7:ca:ae:83:4a:b0:92:c6:21:1d:08:f7:13:c1:43:42:6c:4a:
         43:05:03:89:cc:8c:95:20:2d:f3:72:6f:94:74:0d:11:12:02:
         2a:bd:87:3d:63:52:39:87:3f:f3:82:32:d2:79:98:69:af:85:
         23:67:a4:0d:48:85:fe:0a:ed:f3:44:0b:55:b9:e2:7a:e5:d8:
         85:c8:3b:21:58:77:ca:ff:08:02:3d:b4:ca:c1:17:b4:d2:a2:
         6a:e7:cf:42:e0:87:ea:fc:7f:8b:0f:fa:55:c4:37:58:80:4f:
         6b:bd:34:54:71:c0:dc:74:f2:43:41:da:db:c7:57:85:9a:11:
         25:81:71:d5:8e:5e:2c:86:f4:a5:d8:45:85:4e:83:f1:32:d6:
         84:b2:26:e1:58:f4:b0:aa:cb:79:25:a9:7f:d4:19:e6:8d:15:
         ff:fc:56:bb:28:dc:56:e5:09:66:5b:51:dc:93:ff:8f:f0:79:
         8b:63:48:10:c7:31:cd:8a:73:70:60:76:76:bb:3e:d4:ff:b8:
         7d:c2:ad:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:10:33 2025 by rpki-client