Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
File:                     50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft (raw, json)
Hash identifier:          VzTk+72qjTGVJ1Q9Uq/OCt/ODUWT3FzpYal6obdur9A=
Subject key identifier:   FF:BC:75:B5:CA:B2:BC:A2:E8:28:76:04:CC:6E:BC:6B:0F:74:C5:49
Authority key identifier: E7:43:67:87:46:E7:9E:91:A4:76:8C:83:17:38:DF:82:3E:13:E8:C2
Certificate issuer:       /CN=e743678746e79e91a4768c831738df823e13e8c2
Certificate serial:       019F9F28162BC6D869C9AAF7EF9BA83AB4F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
Manifest number:          015D
Signing time:             Sun 26 Jul 2026 16:00:32 +0000
Manifest this update:     Sun 26 Jul 2026 16:00:32 +0000
Manifest next update:     Mon 27 Jul 2026 16:00:32 +0000
Files and hashes:         1: 50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl (hash: 899CQdb2PoxwTBBFI3pl0YmWPwfQ44/rXhQNPB2ydio=)
                          2: 6JazZr7SPXh8slqXB7HbHUov70k.roa (hash: 7XDa+VuKmI+wLywvS5/AlPdQmoE7eWHSvxOhyrEmunI=)
                          3: aIKtZGQTlVVpSIQ2xB365ii0-Kw.roa (hash: m8BHvkfBcBguPzQ9nNGWSBwFbV1HakSsU6GmXM8bvfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 16:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:28:16:2b:c6:d8:69:c9:aa:f7:ef:9b:a8:3a:b4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e743678746e79e91a4768c831738df823e13e8c2
        Validity
            Not Before: Jul 26 16:00:32 2026 GMT
            Not After : Jul 27 16:00:32 2026 GMT
        Subject: CN=ffbc75b5cab2bca2e8287604cc6ebc6b0f74c549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:fa:06:40:78:f5:c9:d0:d6:20:02:92:85:
                    9d:74:2b:f5:70:bc:f9:40:35:63:47:11:e8:85:4c:
                    db:0b:f1:4f:94:53:42:ee:92:54:ec:6a:ef:66:08:
                    1b:d5:f1:39:cd:d9:9b:39:b8:ee:31:eb:cd:40:ab:
                    06:de:9f:5f:ef:e0:a1:cb:b1:f4:74:e7:bc:45:14:
                    57:5f:fe:4e:14:d4:94:eb:09:9d:14:96:47:68:dd:
                    98:8d:96:2b:c4:79:b1:48:e9:a8:43:42:2a:a7:15:
                    be:f0:35:db:c3:71:ed:d6:75:1a:62:d4:4f:77:a6:
                    9a:a5:de:55:9f:f2:e7:58:0a:f9:88:3a:a2:60:57:
                    61:2d:a3:03:cf:cd:7e:0f:d6:f6:2d:1d:60:f8:b9:
                    ee:be:2a:04:1f:24:77:99:27:a9:d9:f5:fa:1d:3e:
                    92:ad:68:94:07:6d:02:91:f1:9b:db:a7:cd:05:93:
                    c5:00:e5:cf:8f:fc:60:69:25:04:f4:d2:a0:df:a6:
                    9b:2b:b3:6d:1a:81:07:da:52:94:cc:18:56:d3:fa:
                    be:af:54:e7:af:09:f0:ae:3a:88:5e:d5:0b:ea:22:
                    07:f7:b7:ea:31:2a:08:10:29:5d:de:a6:75:d9:9e:
                    54:6a:f7:0e:fc:27:0c:2b:b8:46:12:47:ab:0f:d4:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BC:75:B5:CA:B2:BC:A2:E8:28:76:04:CC:6E:BC:6B:0F:74:C5:49
            X509v3 Authority Key Identifier:
                keyid:E7:43:67:87:46:E7:9E:91:A4:76:8C:83:17:38:DF:82:3E:13:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:3f:34:60:a6:05:70:e8:dc:d2:bf:f1:43:c4:7f:55:61:27:
         b8:51:f0:5c:74:f5:59:47:d6:c3:a0:bb:98:65:4a:f5:92:bf:
         d6:4f:cc:e4:f1:54:cd:99:8e:23:98:d8:10:58:4f:5b:73:63:
         e2:17:fd:a5:5a:0e:16:bc:30:2e:ae:c8:ad:05:06:27:e2:0e:
         97:29:9b:3d:06:58:62:60:51:d3:5d:88:3b:ce:a7:61:71:e1:
         9f:de:57:bb:f2:87:23:a2:69:c7:e8:4f:dd:a4:c0:62:cd:69:
         6a:53:8d:99:56:cf:af:44:62:14:53:8b:c6:ef:eb:73:ca:23:
         95:b1:00:03:4d:68:7a:b8:09:2e:05:d1:3e:c2:65:34:9e:b8:
         68:15:e8:c9:82:4f:8f:9c:c1:9d:a8:14:99:04:fa:ce:43:ec:
         20:fe:f0:20:be:45:69:1f:c7:06:f9:07:61:8f:0b:9a:ed:8f:
         9b:96:83:a0:c1:56:21:28:fb:63:f1:9f:4e:e8:f6:41:fb:32:
         da:d0:c9:73:15:3b:2c:aa:ca:d8:11:ca:da:77:5f:f4:21:60:
         32:ba:86:16:89:75:14:f9:ec:9f:e0:ba:ff:31:38:df:01:c3:
         cc:e9:7f:fc:86:d8:ed:75:52:b0:b3:4c:08:30:7b:23:98:c3:
         a8:a4:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:40 2026 by rpki-client