Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft
File:                     B50D92304CA867525C648A07380EA065FD352DEC.mft (raw, json)
Hash identifier:          eqgwuk8o591N0+s3+MlcvW58lYDKKzIHsamGgLNe/hs=
Subject key identifier:   CF:6C:BB:3C:84:52:57:6C:FE:77:80:CD:E8:E8:75:7A:12:EB:BD:B7
Authority key identifier: B5:0D:92:30:4C:A8:67:52:5C:64:8A:07:38:0E:A0:65:FD:35:2D:EC
Certificate issuer:       /CN=B50D92304CA867525C648A07380EA065FD352DEC
Certificate serial:       2E8E90B54953D7C83C0300B5ECA5DAB99B28A477
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft
Manifest number:          025B
Signing time:             Sun 19 Oct 2025 06:54:18 +0000
Manifest this update:     Sun 19 Oct 2025 06:49:18 +0000
Manifest next update:     Mon 20 Oct 2025 10:33:18 +0000
Files and hashes:         1: 326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa (hash: jMfNBauLsuyKF1Bnrr2mTN5g8wCiId2FE0DDlamIixc=)
                          2: B50D92304CA867525C648A07380EA065FD352DEC.crl (hash: gmYxQBUJKr/5OluRTDvVoJBoDDlFmRSLnuLS3OLbRYc=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8e:90:b5:49:53:d7:c8:3c:03:00:b5:ec:a5:da:b9:9b:28:a4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B50D92304CA867525C648A07380EA065FD352DEC
        Validity
            Not Before: Oct 19 06:49:18 2025 GMT
            Not After : Oct 20 10:33:18 2025 GMT
        Subject: CN=CF6CBB3C8452576CFE7780CDE8E8757A12EBBDB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:24:79:49:c3:1b:50:56:9a:d7:21:10:8e:
                    40:0c:2b:01:36:36:f9:3e:41:5e:30:f6:b0:3c:02:
                    92:c1:5e:34:bc:00:6a:9a:57:8e:72:fd:0a:a7:02:
                    f7:49:87:e5:a4:b1:10:5f:32:e4:12:1f:e1:5c:a5:
                    69:81:c5:35:f2:b9:36:ec:f6:a4:5f:ef:d3:fb:72:
                    bf:98:dc:7f:c8:91:7c:5a:74:44:5d:ad:71:36:7f:
                    3c:3e:61:f4:e9:f3:a6:11:43:8c:13:dc:b8:dc:3c:
                    21:4c:8d:8b:7d:c1:5f:06:5c:dc:10:9e:53:59:1b:
                    58:4b:d9:d3:ef:6c:b4:20:30:7e:af:b9:85:d5:25:
                    a4:19:42:f2:3f:04:0f:dc:8a:27:a1:93:2c:82:fd:
                    23:10:d2:a0:17:11:8d:fd:eb:3b:07:04:10:85:68:
                    18:a7:ed:f9:a1:9f:86:ed:e1:2d:36:ac:2f:54:ad:
                    c2:87:b1:42:84:32:01:92:c0:73:e2:a3:f5:44:2e:
                    0b:41:d7:fe:8c:75:db:9a:5e:d3:42:02:fc:0a:f6:
                    3f:c7:ae:f1:6f:64:26:ad:46:15:37:e0:8a:71:41:
                    7f:5e:88:ef:4d:ce:43:a3:de:85:47:f3:44:a6:97:
                    8f:48:4d:89:e3:7a:d3:59:81:d7:df:73:41:2b:4a:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6C:BB:3C:84:52:57:6C:FE:77:80:CD:E8:E8:75:7A:12:EB:BD:B7
            X509v3 Authority Key Identifier:
                keyid:B5:0D:92:30:4C:A8:67:52:5C:64:8A:07:38:0E:A0:65:FD:35:2D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9d:ed:97:42:1d:7a:e2:43:01:61:5b:82:32:7b:28:10:27:
         5e:e0:86:52:cb:8b:e3:09:df:1c:0e:e1:14:58:a9:91:3e:52:
         db:a7:4b:b2:23:c0:51:06:dc:24:e4:e2:0e:89:a2:5b:07:2a:
         ee:09:0d:39:b6:d9:67:d2:ab:86:83:fb:45:95:40:06:f6:03:
         ba:78:77:10:78:6b:96:ad:30:65:a4:b3:bd:0c:cd:bf:3a:b3:
         83:5b:3e:1b:6b:64:bd:81:9f:f1:f4:dd:b5:e2:00:3c:12:11:
         4a:f9:0d:92:f8:6e:fb:b6:a2:56:77:71:03:a2:46:10:94:66:
         d4:3e:a1:0b:f9:81:9c:84:3d:46:17:7a:55:99:1d:45:07:1e:
         48:3e:f4:82:15:b0:a2:42:0c:9d:45:3e:a6:3e:85:23:ce:93:
         fe:33:34:b1:cc:8d:06:f7:7e:45:74:0a:02:9f:b6:77:c6:6d:
         39:5b:96:03:d6:5c:1e:06:1a:79:c7:de:1d:60:0a:e5:66:42:
         d5:27:f5:e9:29:89:41:2c:9c:c4:ff:f6:cc:0e:6a:2a:13:91:
         f9:42:00:31:aa:b2:a1:7a:5f:3e:3e:77:60:10:ab:18:4f:28:
         a4:47:01:09:6e:e3:cf:76:0a:ef:b3:03:42:1a:76:72:f3:a6:
         7b:20:c7:e2
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIULo6QtUlT18g8AwC17KXauZsopHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUwRDkyMzA0Q0E4Njc1MjVDNjQ4QTA3MzgwRUEwNjVG
RDM1MkRFQzAeFw0yNTEwMTkwNjQ5MThaFw0yNTEwMjAxMDMzMThaMDMxMTAvBgNV
BAMTKENGNkNCQjNDODQ1MjU3NkNGRTc3ODBDREU4RTg3NTdBMTJFQkJEQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBvSR5ScMbUFaa1yEQjkAMKwE2
Nvk+QV4w9rA8ApLBXjS8AGqaV45y/QqnAvdJh+WksRBfMuQSH+FcpWmBxTXyuTbs
9qRf79P7cr+Y3H/IkXxadERdrXE2fzw+YfTp86YRQ4wT3LjcPCFMjYt9wV8GXNwQ
nlNZG1hL2dPvbLQgMH6vuYXVJaQZQvI/BA/ciiehkyyC/SMQ0qAXEY396zsHBBCF
aBin7fmhn4bt4S02rC9UrcKHsUKEMgGSwHPio/VELgtB1/6MdduaXtNCAvwK9j/H
rvFvZCatRhU34IpxQX9eiO9NzkOj3oVH80Sml49ITYnjetNZgdffc0ErSrI9AgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUz2y7PIRSV2z+d4DN6Oh1ehLrvbcwHwYDVR0j
BBgwFoAUtQ2SMEyoZ1JcZIoHOA6gZf01LewwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzVkOGY1N2NiODNhMTQ0ZWRhYzRiNTViMWE4OGIzNGQ2LzAv
QjUwRDkyMzA0Q0E4Njc1MjVDNjQ4QTA3MzgwRUEwNjVGRDM1MkRFQy5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy9CNTBEOTIzMDRDQTg2NzUyNUM2NDhBMDczODBFQTA2
NUZEMzUyREVDLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVkOGY1
N2NiODNhMTQ0ZWRhYzRiNTViMWE4OGIzNGQ2LzAvQjUwRDkyMzA0Q0E4Njc1MjVD
NjQ4QTA3MzgwRUEwNjVGRDM1MkRFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADed7ZdCHXriQwFhW4Iy
eygQJ17ghlLLi+MJ3xwO4RRYqZE+UtunS7IjwFEG3CTk4g6JolsHKu4JDTm22WfS
q4aD+0WVQAb2A7p4dxB4a5atMGWks70Mzb86s4NbPhtrZL2Bn/H03bXiADwSEUr5
DZL4bvu2olZ3cQOiRhCUZtQ+oQv5gZyEPUYXelWZHUUHHkg+9IIVsKJCDJ1FPqY+
hSPOk/4zNLHMjQb3fkV0CgKftnfGbTlblgPWXB4GGnnH3h1gCuVmQtUn9ekpiUEs
nMT/9swOaioTkflCADGqsqF6Xz4+d2AQqxhPKKRHAQlu4892Cu+zA0IadnLzpnsg
x+I=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:15:51 2025 by rpki-client