Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          FBVC2Tn3m8ckeD7vETga1fffPbYNmQYOeX/HlS0bvk8=
Subject key identifier:   35:DD:E6:A5:01:12:4E:7E:78:C3:F1:70:A3:F1:FA:00:26:65:A5:02
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       01976F2C83F2586CEC32CB901911A75D4EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          060C
Signing time:             Sat 14 Jun 2025 16:01:17 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:17 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:17 +0000
Files and hashes:         1: A52HcjjVvjURrnqIKzVJffIr5pg.roa (hash: 0khgPx2sOeKgtKjIWQMCspv9EOJEwLPaIfkqJUfbIZI=)
                          2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: zNTwfWYM6JHKgaj8LdToOE46zHUHix3IaSn76Mf+zZs=)
                          3: hbbnLuZpD5go-VUHqMX6cwP0VYE.roa (hash: nw4SsVKZtCMAF0Lk44Bca7n8JsrQ2D2s1YmNiP6JfI0=)
                          4: m07MDAfpyBy-79ZtRPrjp1nHgUM.roa (hash: nt5wNRLp/3eGdwl0jwqVp6q4VVV8Q+vzoY7sROczSbU=)
                          5: teZ2j_hniWXjQJK5Wyibz3szGe4.roa (hash: AAisqmOnDvymL41tgHnrdsHw2NsaGEhx42Vrfhr3Fe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:83:f2:58:6c:ec:32:cb:90:19:11:a7:5d:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Jun 14 16:01:17 2025 GMT
            Not After : Jun 15 16:01:17 2025 GMT
        Subject: CN=35dde6a501124e7e78c3f170a3f1fa002665a502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:f4:78:80:0f:d1:0b:30:a9:2e:80:b6:8a:
                    70:e0:97:3a:0d:f5:b1:a8:f7:68:40:4a:0a:52:80:
                    f2:bd:65:f2:e5:81:0f:f8:f8:c1:47:a6:f6:d6:ed:
                    68:b2:59:b0:69:e0:ee:ea:00:a9:61:bd:74:3b:9c:
                    d1:92:71:55:fe:51:b9:68:87:78:b7:92:6f:13:c8:
                    a4:4a:ff:c6:b0:1e:05:d3:7b:cc:6e:ea:fa:ff:89:
                    7f:83:74:26:00:28:06:3f:9c:a5:2f:26:d1:37:94:
                    35:e5:a8:cb:ab:e4:36:b2:af:d5:c7:1e:2a:d6:c3:
                    87:06:3e:15:95:64:e4:0b:ce:68:ea:82:af:7c:8f:
                    bb:ba:d6:67:5d:be:64:19:a6:59:5f:c3:9f:d8:c4:
                    51:81:c7:ab:6c:ec:63:92:a9:d7:a9:24:7e:13:a2:
                    68:e4:81:67:66:46:72:5a:8d:d8:23:06:ea:21:7d:
                    7e:8f:cc:78:35:57:10:a0:e4:e6:c8:ae:13:34:f1:
                    90:36:99:6f:32:d4:09:a6:1d:c8:a1:97:75:19:94:
                    08:f3:47:4a:3a:5b:e9:8a:1a:e1:ac:93:8a:46:4d:
                    2f:aa:c9:98:c0:81:eb:87:47:ff:0f:c6:10:67:dd:
                    33:8b:ab:4c:8c:76:62:d7:0e:0f:f1:be:cc:84:cd:
                    00:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DD:E6:A5:01:12:4E:7E:78:C3:F1:70:A3:F1:FA:00:26:65:A5:02
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:99:31:76:1a:26:6a:32:72:c9:01:7f:83:62:18:a7:00:ea:
         90:ec:38:33:32:4b:c6:6a:05:22:c4:da:df:1a:a3:c1:65:56:
         e7:bd:4f:e1:f0:a0:06:c6:c9:e8:b5:2b:20:e1:8c:71:30:4e:
         24:43:72:e8:e5:3e:78:d8:46:d7:4e:d4:27:3b:b0:fa:70:be:
         a3:05:de:88:ad:85:e8:b3:26:5d:70:94:54:f9:e2:54:a9:b7:
         87:c1:da:7a:0a:a8:4d:16:bf:87:b8:01:fb:79:08:65:e9:80:
         9a:b6:3e:6a:f9:65:d5:43:b4:13:e7:92:57:0d:32:29:19:07:
         85:63:fd:8f:c5:ac:1a:c0:96:f3:9c:22:93:57:05:b1:46:cd:
         fd:38:f6:ac:2b:84:19:41:57:be:31:40:fa:03:e6:10:d2:2a:
         64:8e:f7:31:4b:62:c1:8c:1e:94:a1:59:8d:5a:52:aa:fe:7c:
         f1:6b:60:cc:76:8f:06:fb:cf:b8:a7:e2:23:37:be:af:9a:81:
         d4:21:d3:f3:27:e1:37:01:7c:bf:c3:79:9b:69:19:96:ab:47:
         b7:18:be:8f:5c:0f:1f:eb:83:c2:74:10:9a:01:2d:c1:92:e1:
         22:bd:0d:d6:bb:07:3f:bf:fd:e7:29:38:74:ca:eb:13:89:ec:
         ec:e3:0d:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLIPyWGzsMsuQGRGnXU7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MjQ3Zjc3YTNhZTBhZjcxZWFjMDMyNTY0NDlmNWQyOTJj
ZmZkNzQwHhcNMjUwNjE0MTYwMTE3WhcNMjUwNjE1MTYwMTE3WjAzMTEwLwYDVQQD
EygzNWRkZTZhNTAxMTI0ZTdlNzhjM2YxNzBhM2YxZmEwMDI2NjVhNTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueP0eIAP0QswqS6Atopw4Jc6DfWx
qPdoQEoKUoDyvWXy5YEP+PjBR6b21u1oslmwaeDu6gCpYb10O5zRknFV/lG5aId4
t5JvE8ikSv/GsB4F03vMbur6/4l/g3QmACgGP5ylLybRN5Q15ajLq+Q2sq/Vxx4q
1sOHBj4VlWTkC85o6oKvfI+7utZnXb5kGaZZX8Of2MRRgcerbOxjkqnXqSR+E6Jo
5IFnZkZyWo3YIwbqIX1+j8x4NVcQoOTmyK4TNPGQNplvMtQJph3IoZd1GZQI80dK
OlvpihrhrJOKRk0vqsmYwIHrh0f/D8YQZ90zi6tMjHZi1w4P8b7MhM0AIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXd5qUBEk5+eMPxcKPx+gAmZaUCMB8GA1UdIwQY
MBaAFDkkf3ejrgr3HqwDJWRJ9dKSz/10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYt
Y2Q2NmFkNTM0ODEyLzEvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYtY2Q2NmFkNTM0ODEy
LzEvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJkxdhom
ajJyyQF/g2IYpwDqkOw4MzJLxmoFIsTa3xqjwWVW571P4fCgBsbJ6LUrIOGMcTBO
JENy6OU+eNhG107UJzuw+nC+owXeiK2F6LMmXXCUVPniVKm3h8HaegqoTRa/h7gB
+3kIZemAmrY+avll1UO0E+eSVw0yKRkHhWP9j8WsGsCW85wik1cFsUbN/Tj2rCuE
GUFXvjFA+gPmENIqZI73MUtiwYwelKFZjVpSqv588WtgzHaPBvvPuKfiIze+r5qB
1CHT8yfhNwF8v8N5m2kZlqtHtxi+j1wPH+uDwnQQmgEtwZLhIr0N1rsHP7/95yk4
dMrrE4ns7OMNhw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:52:28 2025 by rpki-client