Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
File:                     N50QO5Uwccqp4aiXOAiQQJbnk9g.mft (raw, json)
Hash identifier:          vrMdKi/uDqjnRT9x653hDk7xtQgF3OWGwmbzqfV6jQE=
Subject key identifier:   C2:E7:DA:99:CD:29:2F:A4:12:E3:BF:23:8A:18:D9:94:5F:E7:08:F7
Authority key identifier: 37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
Certificate issuer:       /CN=379d103b953071caa9e1a8973808904096e793d8
Certificate serial:       0198D4A7D330C34DD7B7460291C06BD17B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
Manifest number:          091B
Signing time:             Sat 23 Aug 2025 02:00:24 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:24 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:24 +0000
Files and hashes:         1: J2OkX8bApJPiRItiujPnBGrsZY4.roa (hash: i7nPB++63HS9z1hezyAi0vnytbZFG8+Xg2xHv015LZ0=)
                          2: N50QO5Uwccqp4aiXOAiQQJbnk9g.crl (hash: ozfFV3/spIQaZV8RjuXkEhEy+JtXbRQuEi8FVR5DqS0=)
                          3: Ol1gwf97KN8C2okTQgFoNBJAj_Y.roa (hash: nOhD6696K5uFNmSeTl0PuDWrBC3Uu0s0j0X6YVs7JlM=)
                          4: UKgpB89XWxDrwt2wvJCexcV0Vro.roa (hash: EhxlZRaFnaHWTa4h+4XITRoT+tWzmXi1bhPwvQrMspw=)
                          5: a8iyIDpnvnbxbTS2n1VDZieJ_9E.roa (hash: 8Zfyg7ufLSgxjTlxOposyYi/HNbgCO7Wpg4AzvBTpFY=)
                          6: owDo-dE90Q4aVz9Otyrxfp0jJuU.roa (hash: R3FfKqa+CBkhoX3AH8SVbam9fEJqpTMt1H0aKWJw/DM=)
                          7: siGNpjOukqtq61iEt69vPKECUBY.roa (hash: KGLP98dU7eIP8APR/O7z5omV59hwh3Vy+VU74c3Ej2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:d3:30:c3:4d:d7:b7:46:02:91:c0:6b:d1:7b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379d103b953071caa9e1a8973808904096e793d8
        Validity
            Not Before: Aug 23 02:00:24 2025 GMT
            Not After : Aug 24 02:00:24 2025 GMT
        Subject: CN=c2e7da99cd292fa412e3bf238a18d9945fe708f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3d:23:20:5c:5a:e0:f0:8d:ac:e7:6d:f2:f6:
                    16:da:62:dd:81:ff:c3:a5:11:55:b4:fb:5c:1d:33:
                    c2:b0:bd:55:81:b4:a6:e8:57:6c:a6:00:79:1b:0a:
                    a7:c8:9f:b0:a9:55:7c:64:c0:f3:cf:93:b4:cc:a1:
                    1e:6f:8b:a5:4a:00:60:4e:24:04:f9:d0:20:e5:40:
                    ab:86:e5:db:96:97:4f:77:00:91:d8:7c:5b:17:b2:
                    9b:92:0f:ed:2f:79:ad:00:ff:82:e4:4d:7b:ee:e0:
                    0c:18:82:4f:8b:03:4f:52:a0:38:37:a3:e4:a7:64:
                    b3:13:13:3a:d9:9e:33:d9:18:ad:0d:11:04:d0:df:
                    62:a4:a3:e3:fc:27:cf:e5:dd:50:45:17:2a:e9:16:
                    65:26:4e:3a:6e:3f:4a:18:d3:eb:7d:dc:f9:3e:df:
                    51:77:7b:29:a0:7e:49:7e:68:6f:2c:d0:b2:4e:55:
                    ff:a2:c3:ca:57:03:75:6a:a0:90:1b:53:a3:d5:4c:
                    09:3e:97:55:2a:7d:a9:03:7a:45:b1:1e:83:02:9f:
                    f1:af:7b:5a:e0:c5:23:1b:83:63:56:2e:e4:99:f7:
                    00:9d:bf:69:ad:e9:b4:00:fc:0c:32:f6:d1:35:e3:
                    5a:9f:ed:a8:b7:3d:db:e7:91:db:2b:73:32:84:d9:
                    f1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E7:DA:99:CD:29:2F:A4:12:E3:BF:23:8A:18:D9:94:5F:E7:08:F7
            X509v3 Authority Key Identifier:
                keyid:37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:3b:7e:56:22:07:59:f8:e5:cc:01:2d:78:af:74:1f:e4:dd:
         74:bb:6c:81:85:d0:d1:b1:a0:8f:de:f7:9d:28:0a:ce:31:48:
         f7:03:fe:03:2a:0d:45:88:90:ef:2f:79:09:40:39:bf:8a:ec:
         cf:f6:f5:9b:7b:b7:67:e9:b8:0e:22:02:af:d6:ec:9e:95:ed:
         4d:6b:1d:4e:d4:05:d9:d7:2b:32:19:99:89:98:de:f2:be:4d:
         36:9a:6a:c7:f3:ae:d4:4a:df:a5:e8:f1:eb:87:ad:9c:cc:6e:
         93:db:5b:40:a0:ca:0f:04:db:2f:81:b7:04:f9:bb:a5:7c:fa:
         00:b2:ac:ed:2a:50:50:c8:b0:87:f1:80:80:61:7d:2f:fc:41:
         df:3e:4b:b3:3b:5c:8b:42:2d:80:6d:fe:9f:06:80:d7:4b:73:
         ba:53:3e:bf:d6:ba:38:dd:a4:a5:30:d7:51:58:27:4b:4e:75:
         16:19:da:56:d9:97:d3:61:23:cb:00:eb:95:df:02:e7:37:04:
         f8:6e:d4:0a:a9:f1:11:92:90:ae:cd:1f:2e:6a:91:90:9e:e4:
         d0:7d:1c:a8:67:b0:62:58:4f:aa:6b:4c:b6:ea:eb:93:83:b1:
         2c:64:f7:4b:30:c2:8d:cf:ca:fb:31:12:15:3a:b7:1a:44:71:
         93:ae:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:39 2025 by rpki-client