Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
File:                     50eFUAaL94IgQIwl1hK8L7AkYME.mft (raw, json)
Hash identifier:          cJOjbNaaPbZIiBFOKyvfev3KBrzoyqPg1VUGYT8Lnuo=
Subject key identifier:   BC:4E:FC:02:06:06:A9:C7:6E:EF:6E:08:E3:1A:14:8B:61:31:D1:6F
Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Certificate issuer:       /CN=e7478550068bf78220408c25d612bc2fb02460c1
Certificate serial:       019E30A98DC68F3508809E8C1BC26E87BEA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
Manifest number:          10D4
Signing time:             Sat 16 May 2026 12:01:18 +0000
Manifest this update:     Sat 16 May 2026 12:01:18 +0000
Manifest next update:     Sun 17 May 2026 12:01:18 +0000
Files and hashes:         1: 50eFUAaL94IgQIwl1hK8L7AkYME.crl (hash: tSDAdjoAf7zN0JJNPXp8iKVLzCNpV0+9Y2JfB6V+iHM=)
                          2: 8Z1Fe41TwalLVZHgkQPApervv24.roa (hash: F/UZEYLq5oXVVtK0yybX3uC3qwDitsO1X4zzo9SB4hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:8d:c6:8f:35:08:80:9e:8c:1b:c2:6e:87:be:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1
        Validity
            Not Before: May 16 12:01:18 2026 GMT
            Not After : May 17 12:01:18 2026 GMT
        Subject: CN=bc4efc020606a9c76eef6e08e31a148b6131d16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:98:2c:39:b9:be:fe:d7:8d:d1:d0:b6:24:7e:
                    ad:fe:57:0a:c8:ff:79:8b:47:27:a0:f3:bf:e1:ee:
                    6b:ea:da:dd:0d:0f:de:7a:34:fb:f4:c7:8a:01:4f:
                    1b:09:52:6e:86:6e:ce:b7:23:b2:88:4d:13:70:40:
                    65:46:e3:86:45:b4:0f:3b:14:45:f9:1b:e4:8c:5d:
                    8b:0b:9b:c6:14:f2:fa:88:20:74:83:25:69:50:07:
                    f9:56:cf:09:a9:84:04:78:c2:3a:0e:86:5f:c2:89:
                    58:29:17:db:e2:44:55:bb:08:d4:58:f1:2e:e1:aa:
                    4d:63:b4:bc:fa:08:2f:b2:ac:16:66:69:f0:4f:3d:
                    42:02:89:ce:40:15:73:45:38:35:8e:58:4d:e8:76:
                    71:93:12:a6:58:2e:dc:a1:d9:d6:f2:38:14:79:3c:
                    86:7f:ea:f0:39:4f:04:d5:1f:4f:22:b7:14:fc:97:
                    8f:b8:1e:6b:bf:a3:dc:b4:70:d9:d8:5e:4e:4e:3d:
                    35:a2:de:ac:6c:b2:dd:b8:24:dd:d2:47:b9:6a:b9:
                    2e:73:20:1a:b9:ed:10:1e:53:d4:8d:d6:d6:64:6d:
                    55:71:a3:a4:0d:1d:4c:2b:aa:d0:ee:75:ef:86:2b:
                    b9:b8:e8:47:0d:f1:fe:69:41:4d:c2:48:e3:b1:c3:
                    44:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4E:FC:02:06:06:A9:C7:6E:EF:6E:08:E3:1A:14:8B:61:31:D1:6F
            X509v3 Authority Key Identifier:
                keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:bf:1c:58:4b:93:79:bc:16:41:56:c5:c3:e2:91:ee:38:17:
         15:ab:5e:5e:94:4e:12:5e:5e:35:48:4e:bd:67:d6:a5:71:1f:
         23:93:18:d7:ee:b9:4f:4d:53:63:be:1c:ac:2b:84:73:ac:d3:
         be:95:5f:12:20:2b:3a:c4:be:20:73:dc:2e:31:6f:63:b8:1f:
         47:50:c5:53:7f:18:f0:da:3e:38:89:8f:26:d8:e1:0a:fe:21:
         6d:01:fd:ec:63:7e:31:bf:51:5b:1a:37:28:95:8e:23:3c:08:
         22:40:39:9c:7c:e2:9c:92:10:18:55:aa:80:f7:44:53:4f:d3:
         6d:9b:6b:03:d4:0c:ec:ce:6a:1d:d6:b4:0e:73:c3:f5:44:03:
         ab:25:50:02:99:d0:5b:8c:c5:3d:c6:a9:5b:75:5b:0d:7d:c8:
         fd:bb:b6:3a:a6:67:4d:97:63:95:ed:d3:80:c6:4b:ee:85:ef:
         d9:56:04:c4:46:c7:25:12:f9:f6:3d:f9:77:a6:8f:23:73:69:
         47:2e:fc:2c:dc:e7:2f:fb:67:4d:dd:f3:cb:b8:ea:15:8d:4a:
         51:2d:ac:1a:e3:ea:c2:cd:88:4f:3a:27:b9:bd:7f:ed:9a:49:
         39:32:ad:52:c6:d9:63:8d:52:77:42:89:ea:44:02:93:08:b0:
         c1:c9:2a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:20:14 2026 by rpki-client