Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.mft
File:                     50qrpZibrbYCdHYN7vbEDNARICY.mft (raw, json)
Hash identifier:          c1SUg82X4CsaDkT8HGtXUg536Bri1rMtCd8khktmnws=
Subject key identifier:   63:C8:8E:A4:12:F7:C9:3D:7B:5C:4C:97:42:23:5B:DF:6F:9F:E2:82
Authority key identifier: E7:4A:AB:A5:98:9B:AD:B6:02:74:76:0D:EE:F6:C4:0C:D0:11:20:26
Certificate issuer:       /CN=e74aaba5989badb60274760deef6c40cd0112026
Certificate serial:       01974D0DB7A8D7E07D37CE4EB5E1674775CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.mft
Manifest number:          0117
Signing time:             Sun 08 Jun 2025 01:00:33 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:33 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:33 +0000
Files and hashes:         1: 50qrpZibrbYCdHYN7vbEDNARICY.crl (hash: AmXbcQWDKwq6CBXpJ+bJB685uPpV1EdrVXsb4rIe4aU=)
                          2: YsqohcE_Dg-XYoFeUOqMvoU0F-s.roa (hash: TT64MmC86nvlYk0r9ns0vV8T9Fyqm/0JpqD9FBhVM1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0d:b7:a8:d7:e0:7d:37:ce:4e:b5:e1:67:47:75:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e74aaba5989badb60274760deef6c40cd0112026
        Validity
            Not Before: Jun  8 01:00:33 2025 GMT
            Not After : Jun  9 01:00:33 2025 GMT
        Subject: CN=63c88ea412f7c93d7b5c4c9742235bdf6f9fe282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:55:8a:91:d1:98:ec:e7:e1:f3:eb:b4:6a:
                    51:e4:04:1a:27:af:23:f9:a7:13:ca:ae:90:85:35:
                    87:95:dd:c5:25:9d:88:ea:e5:a0:40:6d:8f:21:eb:
                    21:0f:b7:93:a9:7d:a3:93:89:e0:af:65:86:71:0e:
                    56:11:67:ee:19:b6:2f:5a:26:4d:d1:be:5d:dc:1f:
                    6c:a8:4f:37:a4:b0:e7:47:f0:53:e7:42:68:13:fc:
                    b7:02:94:8b:69:75:22:34:8c:74:75:55:4e:64:b8:
                    05:70:e3:29:aa:c3:be:bc:9a:62:22:7b:e6:1c:e6:
                    3c:30:2c:41:4b:45:88:92:27:de:cf:8b:6b:34:e2:
                    db:f1:ef:db:0b:4f:af:21:24:ab:2f:07:c1:dc:d6:
                    ef:df:fd:2c:1e:5e:bd:29:ff:90:b4:44:7d:fc:b6:
                    55:9c:e3:ea:59:3f:72:33:2f:5a:d2:27:cd:b4:63:
                    0d:ae:b2:b0:fb:46:55:7d:8f:af:39:33:e7:6f:41:
                    c8:71:87:da:29:eb:47:aa:97:87:99:53:70:96:1f:
                    0b:7f:ae:4a:a7:dc:5b:6b:53:01:75:40:4f:1b:78:
                    b7:03:a1:9d:ee:bf:03:e0:ab:a6:1f:96:38:d2:e0:
                    e7:ac:6d:f8:2c:66:01:15:73:e9:70:20:1a:78:f7:
                    b3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C8:8E:A4:12:F7:C9:3D:7B:5C:4C:97:42:23:5B:DF:6F:9F:E2:82
            X509v3 Authority Key Identifier:
                keyid:E7:4A:AB:A5:98:9B:AD:B6:02:74:76:0D:EE:F6:C4:0C:D0:11:20:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:26:aa:c7:ef:7f:17:37:2e:51:0c:40:8b:4c:cc:22:56:ef:
         a4:78:f6:e0:0b:c6:34:30:58:bb:2c:cd:9f:36:9a:7c:f9:b0:
         9a:ae:60:b3:b0:85:e2:49:55:23:e8:06:8f:e9:13:fb:7f:32:
         38:96:84:34:38:f4:d8:70:62:85:b1:26:02:d2:21:fd:26:cf:
         59:b3:0e:1c:73:37:b4:b0:fb:b5:5c:ce:ab:0c:d9:3f:32:16:
         fd:c2:a8:4e:8e:36:75:79:5e:88:36:17:8c:8c:3b:44:22:1e:
         06:4a:d5:e9:f3:54:1c:fa:d1:e3:ec:ec:8c:f0:12:ee:b2:e3:
         90:58:8a:ed:6c:cb:09:b9:12:b5:c8:0f:31:3c:0d:63:bb:22:
         80:d6:94:20:1f:f5:79:52:15:1c:4b:a9:01:5f:ff:ee:39:66:
         50:e5:cb:92:a0:52:4e:5b:74:8a:43:c8:92:2a:c4:42:0d:c7:
         ef:77:79:78:51:95:20:ee:3a:fc:b2:8f:36:e0:93:8b:6d:9e:
         a2:30:26:3f:1a:e8:75:8c:98:87:84:7f:2c:e5:23:d3:ee:16:
         3f:d4:99:41:c3:06:c0:37:9e:0f:0f:79:87:cc:76:26:f8:f5:
         f6:64:46:28:b1:86:13:d9:d3:1d:7f:81:70:00:c3:6a:8a:39:
         2b:f2:a4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:03 2025 by rpki-client