Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.mft
File:                     50qrpZibrbYCdHYN7vbEDNARICY.mft (raw, json)
Hash identifier:          whLp8Xn2a/bbzK/wlMtd+NBMxCPPw838KQdxDH1ogH0=
Subject key identifier:   82:02:1B:86:F4:A5:81:0E:07:92:D7:40:59:18:AB:26:B9:CC:4A:BA
Authority key identifier: E7:4A:AB:A5:98:9B:AD:B6:02:74:76:0D:EE:F6:C4:0C:D0:11:20:26
Certificate issuer:       /CN=e74aaba5989badb60274760deef6c40cd0112026
Certificate serial:       0196BF00DAC55A934C9DE06340EEE31AEAA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.mft
Manifest number:          CB
Signing time:             Sun 11 May 2025 11:00:26 +0000
Manifest this update:     Sun 11 May 2025 11:00:26 +0000
Manifest next update:     Mon 12 May 2025 11:00:26 +0000
Files and hashes:         1: 50qrpZibrbYCdHYN7vbEDNARICY.crl (hash: R6ol23gK/xQPIK4sM0mCjPg5f7dw/HOfWqDUtj4ZHX4=)
                          2: 8RxHOUlOeBNF1q9dQqzL6CLJ-wQ.roa (hash: +v01+zBzDLeUOc5XI9rBivZDnxmBKlPf9T2Z8rmGSao=)
                          3: QyUl-lSFmCQ2sSAMDyWZkApySAA.roa (hash: VKO2nKkttCfHxE1KuAWoUpJ5WAerz0pIpf4+nyknK84=)
                          4: shpqgGwHCQF0iwWzIowmkJNit-Q.roa (hash: 7k0pF5mbWO4TDYU7lL9EvWKWpS8YgHKXuR5li2e0+ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:00:da:c5:5a:93:4c:9d:e0:63:40:ee:e3:1a:ea:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e74aaba5989badb60274760deef6c40cd0112026
        Validity
            Not Before: May 11 11:00:26 2025 GMT
            Not After : May 12 11:00:26 2025 GMT
        Subject: CN=82021b86f4a5810e0792d7405918ab26b9cc4aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:d7:dd:8e:ee:0d:ca:60:ff:f4:20:36:2e:
                    7a:a1:4f:b3:87:69:16:3f:96:a6:5a:3a:9f:00:aa:
                    00:d2:68:5a:e3:16:7a:d2:11:bf:98:f0:c6:b5:16:
                    2c:1b:ad:62:69:ed:c2:a2:0e:d4:ee:1c:56:ff:73:
                    be:87:2c:37:ba:30:7f:57:9b:7a:43:fc:d2:b8:a9:
                    28:64:d1:5b:06:58:be:c2:fa:40:a5:0f:e8:10:91:
                    d4:93:3d:aa:6e:12:eb:0b:18:b7:2d:af:7f:80:2e:
                    08:d7:6f:37:cb:4e:53:df:bc:45:dc:23:4d:d5:f8:
                    12:d8:e3:ed:27:eb:63:68:36:4a:0d:45:64:a2:e1:
                    cd:36:05:c3:86:c0:19:5d:01:89:ba:78:08:0c:13:
                    3b:84:0d:d2:5b:ed:ec:27:b2:ea:d1:a7:1b:7d:c5:
                    73:21:14:b4:94:60:9f:01:ab:72:7f:b9:3e:06:3d:
                    47:7a:ba:88:e3:57:8f:68:e8:dc:1d:2c:1c:b6:e4:
                    8a:bd:34:3f:17:2d:9d:59:f0:20:06:43:36:f5:65:
                    13:7a:98:f7:ee:db:9d:0c:2a:f9:33:f0:fb:e2:ad:
                    e0:69:ef:8b:61:b6:9a:04:b7:aa:d7:12:06:50:bb:
                    2a:d2:3e:51:e5:bc:6f:77:e5:07:77:4e:ab:0d:69:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:02:1B:86:F4:A5:81:0E:07:92:D7:40:59:18:AB:26:B9:CC:4A:BA
            X509v3 Authority Key Identifier:
                keyid:E7:4A:AB:A5:98:9B:AD:B6:02:74:76:0D:EE:F6:C4:0C:D0:11:20:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:11:4f:3e:7c:f7:20:9c:5a:18:5d:b0:b2:45:c7:a5:fb:44:
         b1:a7:ae:74:19:73:76:29:d0:31:b3:b0:54:9c:48:bc:d4:d5:
         47:50:a5:89:6c:e5:2a:1f:80:48:b0:a5:91:55:f7:f5:c0:75:
         71:70:ca:9e:bb:4f:65:da:28:9a:39:06:92:93:08:58:4e:1e:
         9a:28:85:70:b0:21:19:86:c5:0d:f3:33:91:38:9f:38:ed:e3:
         c3:cf:9c:e0:0a:18:75:5f:b3:dd:c9:35:10:5a:6c:aa:93:03:
         ee:02:a0:5f:ee:a1:ef:36:5a:ca:e7:50:a4:a5:20:f2:8b:d0:
         2e:7e:6b:90:18:8e:60:83:40:cd:a9:38:4b:5c:b7:f3:da:a9:
         af:c5:5a:fc:2c:0f:81:46:5a:e2:0c:27:dd:57:ab:6b:fe:8c:
         64:36:78:fe:dd:81:fc:c5:5f:71:ba:88:ac:a9:7b:3b:a1:09:
         d2:c2:92:e4:57:30:cb:a8:b3:17:88:aa:28:a7:dc:15:29:ca:
         04:54:0c:15:48:85:4c:72:2d:78:c0:6b:3c:6e:01:f0:00:9f:
         28:1c:4a:da:93:34:ff:fa:01:89:8d:6b:5a:0c:64:f6:b8:f2:
         d0:15:55:f7:ef:f4:2d:e6:91:80:d5:f7:f4:6e:70:dd:26:0b:
         f7:7e:a3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:39:56 2025 by rpki-client