Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
File:                     50Du0o8tmU6yuDHLjvxkcDBtdGE.mft (raw, json)
Hash identifier:          HVZ+wheUtyhumJ77U5193rW6eGTPPRfBQu1pBkc5Cxw=
Subject key identifier:   C9:88:94:DA:38:63:CE:06:AD:3C:B5:39:46:1C:6A:EB:90:E5:AC:6E
Authority key identifier: E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61
Certificate issuer:       /CN=e740eed28f2d994eb2b831cb8efc6470306d7461
Certificate serial:       01A13FA7C265CFE6C9FBCCDCC7D1A5B37191
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
Manifest number:          12BB
Signing time:             Thu 15 Oct 2026 13:02:01 +0000
Manifest this update:     Thu 15 Oct 2026 13:02:01 +0000
Manifest next update:     Fri 16 Oct 2026 13:02:01 +0000
Files and hashes:         1: 50Du0o8tmU6yuDHLjvxkcDBtdGE.crl (hash: +8JY36n62Y19Jyi0+mW4Myj6yrnPC9rTniILghi1l2M=)
                          2: yIDca_4n_vWlCaLHGyh0ZQJf864.roa (hash: HnwqE8ggCCf2qjihjisCWvzXEQ4Ud1FRMg5ZYuNj078=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:c2:65:cf:e6:c9:fb:cc:dc:c7:d1:a5:b3:71:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e740eed28f2d994eb2b831cb8efc6470306d7461
        Validity
            Not Before: Oct 15 13:02:01 2026 GMT
            Not After : Oct 16 13:02:01 2026 GMT
        Subject: CN=c98894da3863ce06ad3cb539461c6aeb90e5ac6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a7:d2:51:6e:cb:2c:41:05:96:a5:e9:1f:d3:
                    44:c3:b7:47:24:4d:a9:7c:8a:c9:b2:81:a8:8c:03:
                    9a:84:03:88:d7:9f:c5:81:54:5c:18:ad:c8:e1:88:
                    65:8c:12:03:1a:99:9c:b5:e5:5c:de:ae:21:6c:9b:
                    ca:9c:e0:2c:bf:03:5e:ed:ad:9e:f7:af:10:32:54:
                    b5:c3:ed:40:9d:ed:1a:52:b2:6e:8b:7b:7f:0f:23:
                    e7:45:b2:dd:79:42:7a:ba:57:2b:54:20:e1:a6:b9:
                    4f:c5:29:d7:df:ff:53:ff:52:3a:f3:64:17:a7:43:
                    d6:d0:cf:54:8b:ea:1f:02:07:8b:48:70:91:39:6f:
                    22:1b:79:bd:d6:ed:3c:48:31:9b:cd:55:d2:81:04:
                    17:57:aa:66:fe:c6:6c:be:5d:4c:ad:73:64:17:05:
                    41:26:eb:cc:61:90:59:31:99:a7:23:93:9b:7e:4e:
                    c4:2c:df:90:1d:ff:b8:02:85:bd:64:da:5f:10:83:
                    2a:b0:08:8e:d3:4e:3c:55:b0:b0:07:a6:c6:9a:bf:
                    a2:b7:d2:85:ea:73:ed:54:a2:49:9a:09:d5:5f:52:
                    d7:be:a9:da:eb:ac:64:17:b1:eb:1f:cc:38:d1:50:
                    6d:b4:4e:67:93:00:56:97:05:32:76:bf:ae:6b:86:
                    c4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:88:94:DA:38:63:CE:06:AD:3C:B5:39:46:1C:6A:EB:90:E5:AC:6E
            X509v3 Authority Key Identifier:
                keyid:E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9e:ae:cd:13:40:07:ee:3c:8d:e9:83:f6:7b:55:6e:ff:6a:
         fc:70:22:29:89:64:50:3f:93:8a:0a:58:60:6b:64:63:d5:05:
         a3:9a:93:ea:b6:05:ab:0f:5a:f4:72:16:73:e1:4d:ae:bc:c5:
         94:92:35:fd:27:a9:40:35:f4:9e:69:d8:99:5f:11:73:be:51:
         c8:49:fa:52:3e:02:16:2a:01:ec:60:65:54:91:1c:cd:20:4e:
         9a:e1:37:e8:06:85:b1:49:28:80:62:8d:a3:ea:45:9b:d4:ec:
         1e:9f:b8:26:39:b9:ce:4c:e3:50:f3:a7:b7:8b:6f:52:7c:7b:
         dd:9e:e6:47:ba:c6:73:54:84:e8:ef:03:9a:6b:84:ba:f0:fc:
         a3:80:18:2e:12:c9:20:c3:7e:fd:d6:9e:3b:e8:5c:da:d9:c2:
         7e:41:88:32:1b:b5:84:cd:9f:b8:ec:64:76:80:d4:ca:45:45:
         a2:fe:1d:79:29:e8:d3:d6:7a:97:3e:2a:d1:8c:8e:12:9d:bb:
         49:24:9a:5c:13:29:ef:f7:51:9a:f5:fd:5c:05:b3:ff:c5:a0:
         4b:13:fb:48:d2:cc:f8:5f:ad:c6:c6:6b:91:8d:9f:3c:be:af:
         b2:b2:21:9f:25:cc:5b:15:15:9b:9c:73:f5:c6:4a:a4:2a:0e:
         9a:ee:27:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:40:37 2026 by rpki-client