Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
File:                     50eFUAaL94IgQIwl1hK8L7AkYME.mft (raw, json)
Hash identifier:          sJsHOWyoE6jKsylJtdJ+ZNOKx1FMoQ21uXEDXlu/60g=
Subject key identifier:   EC:90:9A:3A:31:12:A8:67:3C:1A:76:60:D5:4C:79:29:6C:93:9A:CD
Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Certificate issuer:       /CN=e7478550068bf78220408c25d612bc2fb02460c1
Certificate serial:       019D39780B892D2AEFF9D76C93049440012E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
Manifest number:          1054
Signing time:             Sun 29 Mar 2026 12:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 12:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 12:01:01 +0000
Files and hashes:         1: 50eFUAaL94IgQIwl1hK8L7AkYME.crl (hash: UBF/6xBcJvoH2/YpeRz25/efpAd6+vZcjYRTopbAbZw=)
                          2: 8Z1Fe41TwalLVZHgkQPApervv24.roa (hash: F/UZEYLq5oXVVtK0yybX3uC3qwDitsO1X4zzo9SB4hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:78:0b:89:2d:2a:ef:f9:d7:6c:93:04:94:40:01:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1
        Validity
            Not Before: Mar 29 12:01:01 2026 GMT
            Not After : Mar 30 12:01:01 2026 GMT
        Subject: CN=ec909a3a3112a8673c1a7660d54c79296c939acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f5:d3:59:cb:ed:70:67:f4:e5:86:11:d9:a3:
                    fa:d5:d6:6e:23:2c:c2:a1:25:0b:71:c8:4b:e7:01:
                    b3:2d:71:b9:64:0e:00:fe:c8:03:16:8a:5a:b3:6f:
                    78:56:90:9d:0e:d6:86:21:7e:bd:dd:fc:f4:30:ca:
                    44:db:a1:88:da:06:63:70:5d:cd:24:47:dc:81:5a:
                    c5:16:78:a4:39:35:35:1d:58:24:f3:61:0e:1f:c1:
                    db:28:01:52:12:ab:58:bb:b1:cf:ac:58:18:a0:ce:
                    75:9e:13:0c:be:96:71:01:68:d5:1a:4c:5e:2e:c1:
                    5d:25:2d:5b:4a:73:0b:44:b2:c2:f2:9c:a0:72:8d:
                    15:5a:75:92:b6:d9:68:81:bd:3b:f4:0f:3b:37:26:
                    16:2b:58:60:f7:99:84:e4:62:df:ca:fe:12:a7:42:
                    19:ea:fa:35:9f:aa:e4:8d:17:7e:b3:87:61:d4:96:
                    92:e8:cc:ca:c8:ee:f3:48:f1:ad:64:ff:ec:52:bb:
                    fb:d2:34:ca:a8:72:1f:69:86:ff:5c:ee:bd:4b:d8:
                    27:ac:8a:64:2e:64:e7:a0:18:a8:4e:db:00:c6:92:
                    9d:e5:07:c2:a1:f2:d0:16:61:9c:8d:cb:c7:c2:64:
                    60:4c:69:f2:21:27:74:b9:72:75:4c:ec:df:77:31:
                    c2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:90:9A:3A:31:12:A8:67:3C:1A:76:60:D5:4C:79:29:6C:93:9A:CD
            X509v3 Authority Key Identifier:
                keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:18:84:c0:75:71:09:1e:ad:9b:ad:1c:24:be:e2:6a:83:44:
         84:d2:f7:ca:d2:3f:c8:18:3d:b3:bf:69:b5:85:4e:54:19:80:
         fd:5b:0b:5b:01:c2:05:90:11:0a:5a:1c:6f:8d:b5:16:a9:f4:
         61:b4:9c:7c:51:97:b5:80:2e:bc:c7:0c:80:ab:de:2c:37:47:
         eb:f8:d7:ab:10:28:24:15:15:8a:45:42:75:83:f6:9e:11:65:
         20:f0:9b:31:64:16:8b:62:3b:11:cf:25:d2:df:08:f8:45:b2:
         f2:c2:b4:8b:d2:0e:48:f5:dc:34:32:b2:a2:b2:13:7f:6d:25:
         55:24:52:30:21:1f:a4:e7:8e:d8:04:04:86:df:fa:1c:8c:93:
         98:56:9c:ff:94:c9:01:81:39:e2:22:0c:6f:d7:99:cf:fc:fe:
         1a:30:ef:e5:18:36:f6:db:61:08:1b:3a:0c:06:c5:82:51:9b:
         cb:13:0c:77:d4:17:cc:58:89:20:7b:95:47:13:fe:db:7c:0d:
         8f:53:42:0b:b0:9c:a3:ab:0f:63:b4:d9:7f:cf:81:bd:14:25:
         82:66:f4:93:72:6f:3e:92:fc:98:50:47:30:be:50:aa:60:1a:
         24:af:08:71:74:ef:5a:dc:72:be:cb:87:7f:10:48:97:ef:da:
         d6:8d:b6:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eAuJLSrv+ddskwSUQAEuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NDc4NTUwMDY4YmY3ODIyMDQwOGMyNWQ2MTJiYzJmYjAy
NDYwYzEwHhcNMjYwMzI5MTIwMTAxWhcNMjYwMzMwMTIwMTAxWjAzMTEwLwYDVQQD
EyhlYzkwOWEzYTMxMTJhODY3M2MxYTc2NjBkNTRjNzkyOTZjOTM5YWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/XTWcvtcGf05YYR2aP61dZuIyzC
oSULcchL5wGzLXG5ZA4A/sgDFopas294VpCdDtaGIX693fz0MMpE26GI2gZjcF3N
JEfcgVrFFnikOTU1HVgk82EOH8HbKAFSEqtYu7HPrFgYoM51nhMMvpZxAWjVGkxe
LsFdJS1bSnMLRLLC8pygco0VWnWSttlogb079A87NyYWK1hg95mE5GLfyv4Sp0IZ
6vo1n6rkjRd+s4dh1JaS6MzKyO7zSPGtZP/sUrv70jTKqHIfaYb/XO69S9gnrIpk
LmTnoBioTtsAxpKd5QfCofLQFmGcjcvHwmRgTGnyISd0uXJ1TOzfdzHCLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyQmjoxEqhnPBp2YNVMeSlsk5rNMB8GA1UdIwQY
MBaAFOdHhVAGi/eCIECMJdYSvC+wJGDBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82MzU1MTEtNzFmMy00ZjU3LTkxMzkt
N2RhM2NkMjUzYmY2LzEvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82MzU1MTEtNzFmMy00ZjU3LTkxMzktN2RhM2NkMjUzYmY2
LzEvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhiEwHVx
CR6tm60cJL7iaoNEhNL3ytI/yBg9s79ptYVOVBmA/VsLWwHCBZARClocb421Fqn0
YbScfFGXtYAuvMcMgKveLDdH6/jXqxAoJBUVikVCdYP2nhFlIPCbMWQWi2I7Ec8l
0t8I+EWy8sK0i9IOSPXcNDKyorITf20lVSRSMCEfpOeO2AQEht/6HIyTmFac/5TJ
AYE54iIMb9eZz/z+GjDv5Rg29tthCBs6DAbFglGbyxMMd9QXzFiJIHuVRxP+23wN
j1NCC7Cco6sPY7TZf8+BvRQlgmb0k3JvPpL8mFBHML5QqmAaJK8IcXTvWtxyvsuH
fxBIl+/a1o224g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:37 2026 by rpki-client