Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
File:                     50ul5zTP81BoFBYlRVZuMxxyS8A.mft (raw, json)
Hash identifier:          IT27MoTfSIkKJ9bEwYJWXblweF6LHQQqUhJlBGeBTnE=
Subject key identifier:   C7:9F:4A:8D:2D:DF:53:65:A4:1F:AF:DB:15:12:83:82:D0:3A:31:59
Authority key identifier: E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0
Certificate issuer:       /CN=e74ba5e734cff3506814162545566e331c724bc0
Certificate serial:       019694F22CF2F4F25C6A9C770C3C6AEFDBAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
Manifest number:          0DCC
Signing time:             Sat 03 May 2025 07:00:21 +0000
Manifest this update:     Sat 03 May 2025 07:00:21 +0000
Manifest next update:     Sun 04 May 2025 07:00:21 +0000
Files and hashes:         1: 50ul5zTP81BoFBYlRVZuMxxyS8A.crl (hash: 7d/hxDE2mOq4IY2UdeYgKh2Sy3vJQWNw0cWaQ4bU8xk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 07:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:94:f2:2c:f2:f4:f2:5c:6a:9c:77:0c:3c:6a:ef:db:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e74ba5e734cff3506814162545566e331c724bc0
        Validity
            Not Before: May  3 07:00:21 2025 GMT
            Not After : May  4 07:00:21 2025 GMT
        Subject: CN=c79f4a8d2ddf5365a41fafdb15128382d03a3159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:14:ff:11:e9:04:6b:d3:d5:f5:b2:c0:8c:0c:
                    75:8b:d4:cd:1f:f6:b7:4e:ef:0e:eb:fd:56:ec:bc:
                    df:c7:5e:85:bb:19:01:3a:3e:b0:15:a5:55:cc:07:
                    08:08:0d:b2:02:90:51:db:ce:ba:36:79:35:e5:b0:
                    98:8d:5c:5a:8b:0e:e8:93:c7:4f:c3:69:8b:5e:f8:
                    1d:a8:6b:7c:c8:29:27:fc:61:76:f5:80:95:80:f7:
                    fc:80:b6:38:ae:1a:de:39:dc:39:86:ae:f9:e6:70:
                    dd:ca:81:cb:a0:ec:89:69:5b:22:74:36:97:fd:1a:
                    f3:cb:1d:76:b6:5a:d0:80:e1:ff:2c:47:8f:69:b7:
                    43:cb:02:46:d7:e1:86:67:74:b0:c6:30:83:64:0f:
                    90:80:08:7c:2a:95:5e:47:fc:b9:bb:0b:51:63:34:
                    46:61:3d:45:4e:7d:b2:a0:1d:6d:13:47:38:89:45:
                    f7:00:f5:b2:f2:c7:ad:8c:dd:47:d4:49:e1:fe:94:
                    38:1c:a4:cb:6f:30:22:eb:2d:17:a3:05:7e:58:53:
                    77:0c:d1:cc:81:be:28:98:df:5c:9b:1d:e5:da:c3:
                    20:1e:b3:00:d6:e6:0d:e3:af:f4:50:f3:3c:38:03:
                    9b:60:d6:40:9b:c6:e0:5a:2c:88:5e:a7:95:f5:02:
                    e6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9F:4A:8D:2D:DF:53:65:A4:1F:AF:DB:15:12:83:82:D0:3A:31:59
            X509v3 Authority Key Identifier:
                keyid:E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:f4:ea:0e:bb:03:92:59:28:1f:b4:e4:93:6e:93:41:09:0b:
         5a:24:73:cb:7c:32:f6:0f:0c:9e:c0:2d:a0:67:ff:0e:5f:97:
         c9:ce:82:37:a4:5c:41:8b:ab:98:45:8f:a6:11:f9:bd:91:83:
         03:69:f4:0c:43:b3:27:1d:0d:89:fe:1b:fb:d2:eb:78:a3:d9:
         92:ca:66:1b:30:da:4c:b8:04:66:73:b3:d4:c3:72:91:10:75:
         66:22:9c:0b:32:0e:e8:4f:4f:2f:0f:e5:44:11:80:64:41:61:
         fd:fd:2a:7d:6c:e3:ba:eb:41:92:35:38:1f:1f:7a:74:00:d2:
         63:be:e3:ff:3e:36:2f:5c:6f:e0:f4:ad:40:c8:79:96:a9:e5:
         1d:cc:75:e4:a6:0b:36:62:a3:23:5d:f6:ee:68:de:4b:0c:74:
         cb:84:97:7f:10:be:0a:60:21:9e:7b:7f:50:53:84:33:85:ee:
         b5:cb:1a:69:b5:9d:92:66:27:7a:79:1d:b1:79:0e:6b:1a:44:
         9f:d9:b1:64:1f:6d:43:1a:2b:34:bd:f5:85:75:8e:ac:90:ac:
         53:76:3e:99:75:e6:07:8d:1b:04:4a:cf:14:7a:b7:e5:8a:7f:
         8d:6a:3e:55:ac:f0:5c:b3:4f:42:f8:16:6d:e9:5b:ba:df:23:
         b4:93:d7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:55:10 2025 by rpki-client