Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.mft
File:                     50qrpZibrbYCdHYN7vbEDNARICY.mft (raw, json)
Hash identifier:          vl1eexTwECdk9Yp8hGP4pcMyOoPSEEaaN8lTVf3gpvA=
Subject key identifier:   44:31:41:60:B3:85:6B:65:15:70:50:4F:98:AE:B1:7C:F4:BB:82:F1
Authority key identifier: E7:4A:AB:A5:98:9B:AD:B6:02:74:76:0D:EE:F6:C4:0C:D0:11:20:26
Certificate issuer:       /CN=e74aaba5989badb60274760deef6c40cd0112026
Certificate serial:       019673B025D0F9161875F7B308995991712D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.mft
Manifest number:          A4
Signing time:             Sat 26 Apr 2025 20:00:45 +0000
Manifest this update:     Sat 26 Apr 2025 20:00:45 +0000
Manifest next update:     Sun 27 Apr 2025 20:00:45 +0000
Files and hashes:         1: 50qrpZibrbYCdHYN7vbEDNARICY.crl (hash: V3etenCS7/QqILYra4KgrOaBM3IQPLSGynpjPVREG70=)
                          2: 8RxHOUlOeBNF1q9dQqzL6CLJ-wQ.roa (hash: +v01+zBzDLeUOc5XI9rBivZDnxmBKlPf9T2Z8rmGSao=)
                          3: QyUl-lSFmCQ2sSAMDyWZkApySAA.roa (hash: VKO2nKkttCfHxE1KuAWoUpJ5WAerz0pIpf4+nyknK84=)
                          4: shpqgGwHCQF0iwWzIowmkJNit-Q.roa (hash: 7k0pF5mbWO4TDYU7lL9EvWKWpS8YgHKXuR5li2e0+ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:b0:25:d0:f9:16:18:75:f7:b3:08:99:59:91:71:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e74aaba5989badb60274760deef6c40cd0112026
        Validity
            Not Before: Apr 26 20:00:45 2025 GMT
            Not After : Apr 27 20:00:45 2025 GMT
        Subject: CN=44314160b3856b651570504f98aeb17cf4bb82f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6c:79:ba:86:d1:c4:6f:6e:03:f2:a1:12:ca:
                    2b:9d:9f:b6:cb:d4:44:11:6f:14:c5:12:99:87:b7:
                    e3:1f:4a:c9:05:9d:04:44:8d:01:dc:36:65:79:23:
                    60:62:a4:fe:38:3b:9d:33:32:d8:3c:17:d0:12:42:
                    d3:17:18:76:10:5e:b6:d5:f8:1e:82:49:de:fe:c3:
                    81:ad:3a:8e:ba:ef:18:98:5c:39:eb:eb:6b:5e:c8:
                    2b:24:ca:8c:2d:e0:9b:2b:e1:9f:b5:dd:55:cf:42:
                    18:a1:ff:04:f9:36:eb:fa:f4:b6:4b:bd:71:46:89:
                    22:d1:3f:72:d4:74:67:e5:33:14:f3:a0:9a:68:c1:
                    81:2b:fe:36:06:57:f3:da:13:95:5a:c3:8e:0a:9a:
                    72:2e:38:db:4c:d9:13:6d:e2:ee:c3:b4:7e:07:5d:
                    73:d8:c8:f1:f3:a1:cf:c6:27:75:7d:d5:49:0d:02:
                    e6:ef:26:81:04:b9:64:2e:eb:f9:95:b8:b3:1d:b9:
                    b5:ca:a8:81:fe:72:3e:6c:15:12:49:be:f3:d0:f6:
                    6b:32:68:27:00:1a:21:46:5b:24:cb:e9:74:7b:99:
                    7d:13:60:11:c7:46:6b:89:60:f9:70:77:30:4a:03:
                    d1:79:2f:f1:85:1f:bb:2a:a5:74:73:97:ed:34:43:
                    ef:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:31:41:60:B3:85:6B:65:15:70:50:4F:98:AE:B1:7C:F4:BB:82:F1
            X509v3 Authority Key Identifier:
                keyid:E7:4A:AB:A5:98:9B:AD:B6:02:74:76:0D:EE:F6:C4:0C:D0:11:20:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e8:4e:95:60:5a:dc:be:1b:b1:54:53:d6:78:d5:81:a0:61:
         20:46:8d:63:d6:61:c8:a9:cc:ff:36:3e:e4:0a:2f:99:08:10:
         01:67:83:99:ff:6a:3e:17:fd:73:61:01:37:b1:20:cd:36:02:
         1b:c1:4f:ab:b5:38:43:e4:c0:5b:8c:06:b3:34:33:9a:9f:67:
         3d:b1:e1:68:1f:de:60:b5:d1:7b:be:7e:0b:3d:67:a4:08:fe:
         65:99:75:aa:91:73:08:26:60:c5:d3:bc:10:c3:9e:c0:34:de:
         d5:c9:18:6f:c4:73:b5:6e:2a:dd:38:db:09:8a:53:c7:23:e0:
         1e:6e:12:ae:f9:a0:98:b7:4a:bb:19:f1:cd:0d:f1:f0:70:32:
         bc:24:5f:65:5e:8b:fe:6f:ef:6b:60:2c:75:81:16:ab:f9:33:
         e4:cd:ae:bd:f8:c1:c6:35:77:a5:85:5b:ab:bb:7c:b9:8a:69:
         1a:81:68:8c:0f:07:71:00:e6:1e:bb:2d:9a:be:81:b6:e5:e8:
         72:91:68:c8:f6:49:22:ca:a6:77:4f:03:32:e8:db:0a:ee:d4:
         df:b1:60:de:06:e2:43:0e:94:b1:7b:0b:ef:b2:14:10:f3:ac:
         ee:2c:b1:5e:23:a3:07:90:ec:bb:6a:86:f0:ef:21:ac:18:9a:
         c2:77:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:21:25 2025 by rpki-client