Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
File:                     N50QO5Uwccqp4aiXOAiQQJbnk9g.mft (raw, json)
Hash identifier:          Vb2W1x4GvQi6PLPrT2qYQtmxTsORmqrPMD4eMNn/rUI=
Subject key identifier:   61:E8:4A:F1:69:22:7C:EF:E7:E6:47:45:1A:C3:03:A8:66:C6:89:70
Authority key identifier: 37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
Certificate issuer:       /CN=379d103b953071caa9e1a8973808904096e793d8
Certificate serial:       01950F46C9A362F80DFBC1D49309CC29D9D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
Manifest number:          0725
Signing time:             Sun 16 Feb 2025 15:00:51 +0000
Manifest this update:     Sun 16 Feb 2025 15:00:51 +0000
Manifest next update:     Mon 17 Feb 2025 15:00:51 +0000
Files and hashes:         1: F9lmKwX1Rv7KxzRjDe05KgJ-DkA.roa (hash: TnsxpjEDKRc4VqcW5gnxxZtGuFFQXcJnJi7MTCf/xJQ=)
                          2: J2OkX8bApJPiRItiujPnBGrsZY4.roa (hash: i7nPB++63HS9z1hezyAi0vnytbZFG8+Xg2xHv015LZ0=)
                          3: N50QO5Uwccqp4aiXOAiQQJbnk9g.crl (hash: IISg8mXpY7PNH9a0pKW3qZ5h/MmiUPtle62ofqoWkgk=)
                          4: UKgpB89XWxDrwt2wvJCexcV0Vro.roa (hash: EhxlZRaFnaHWTa4h+4XITRoT+tWzmXi1bhPwvQrMspw=)
                          5: owDo-dE90Q4aVz9Otyrxfp0jJuU.roa (hash: R3FfKqa+CBkhoX3AH8SVbam9fEJqpTMt1H0aKWJw/DM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:0f:46:c9:a3:62:f8:0d:fb:c1:d4:93:09:cc:29:d9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379d103b953071caa9e1a8973808904096e793d8
        Validity
            Not Before: Feb 16 15:00:51 2025 GMT
            Not After : Feb 17 15:00:51 2025 GMT
        Subject: CN=61e84af169227cefe7e647451ac303a866c68970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f8:2c:9d:c4:1a:43:ac:0c:77:f8:7f:9a:bd:
                    12:65:f5:79:71:09:6b:da:ae:f3:b3:5b:47:8c:f4:
                    01:93:cf:4d:02:24:87:20:26:db:8e:28:ff:45:3f:
                    e5:7a:c3:50:ff:5b:a2:7a:c8:21:4f:e6:14:01:5b:
                    0b:68:5d:dd:4b:9e:98:46:5f:ee:66:bd:62:6c:e8:
                    8a:59:97:e8:9d:70:ba:46:ad:b3:00:bc:36:be:2e:
                    42:99:60:4f:52:24:e7:e5:50:17:88:58:00:6d:2a:
                    59:a7:05:4f:88:e0:ba:42:dd:61:66:22:ea:e6:d8:
                    79:95:45:a8:ed:17:bc:1f:50:e2:44:c7:21:c6:31:
                    57:0c:e3:d0:2f:24:cb:be:f3:c9:94:df:88:fa:b7:
                    24:8f:cd:2c:14:bb:d1:8e:20:b7:43:8b:35:42:60:
                    a2:03:6b:33:ef:b8:d2:f3:97:a3:fa:58:19:b1:b2:
                    14:91:4d:31:c4:d7:55:e4:8f:e2:cd:f4:cc:7d:49:
                    cb:b8:1a:a9:a1:51:6f:d4:88:14:08:93:ff:ee:1d:
                    53:cd:4f:4c:03:46:af:28:8c:33:d7:39:f0:33:24:
                    e4:f1:42:31:46:1b:c8:25:14:1a:35:c9:32:94:38:
                    f8:9a:65:5c:50:44:f5:49:8f:e3:56:09:81:78:47:
                    bc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E8:4A:F1:69:22:7C:EF:E7:E6:47:45:1A:C3:03:A8:66:C6:89:70
            X509v3 Authority Key Identifier:
                keyid:37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:16:65:89:0d:e7:4a:62:d9:df:cd:83:e0:1e:0b:7b:4a:49:
         b4:dd:f0:2f:13:58:42:18:e6:e9:b1:fe:03:9f:f0:af:af:95:
         d2:b2:3b:92:3b:16:d0:d5:43:01:19:9b:11:ba:55:e1:71:3b:
         53:a6:e2:f6:54:fd:18:da:07:25:c9:3a:74:7c:60:33:e7:4e:
         54:7f:7b:2d:12:e3:86:f8:9c:b1:38:8b:1e:ac:48:71:e6:b8:
         60:e4:a6:98:fe:57:d2:fc:6a:95:8e:38:9a:92:69:4e:5f:29:
         9e:ee:91:84:a1:0e:2e:b4:dc:3f:d2:d6:31:80:06:88:cb:f4:
         00:85:f2:9c:f4:3e:fd:ba:3f:4b:b5:16:99:cd:93:8d:d6:9e:
         a4:0f:26:31:7d:a5:27:ce:b4:11:ea:b3:fb:02:8f:43:2c:15:
         9b:74:f6:97:c5:e8:ae:23:9b:ce:85:6e:38:7a:1d:ac:d7:23:
         8c:d7:64:83:10:64:17:1b:e6:17:b2:6f:92:ba:96:53:80:e1:
         f4:d5:62:d3:fa:4c:a3:e9:94:92:4f:c5:4d:1b:b6:80:a7:55:
         ea:87:a1:f6:f5:d1:fe:45:05:27:18:22:d9:18:e4:ce:7b:fa:
         8a:98:ea:57:90:83:d5:d7:ca:95:10:23:a8:92:1c:59:36:36:
         f0:e0:f3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:31 2025 by rpki-client