Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
File:                     50ul5zTP81BoFBYlRVZuMxxyS8A.mft (raw, json)
Hash identifier:          xSpPu8o2+3QU205exqdr0QT1+lgy28CkP9IjIoY9/W0=
Subject key identifier:   E7:DC:DC:80:58:D7:AD:0E:3C:97:85:13:E9:9B:EB:F7:83:24:5A:BA
Authority key identifier: E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0
Certificate issuer:       /CN=e74ba5e734cff3506814162545566e331c724bc0
Certificate serial:       019F19435C70A40956F0A2C76B9DD74AA4FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
Manifest number:          1235
Signing time:             Tue 30 Jun 2026 16:01:12 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:12 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:12 +0000
Files and hashes:         1: 50ul5zTP81BoFBYlRVZuMxxyS8A.crl (hash: yRL61ntq3KtsRuSkLXfPhKb1OeHXdNTT1CcRGJO8a6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:5c:70:a4:09:56:f0:a2:c7:6b:9d:d7:4a:a4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e74ba5e734cff3506814162545566e331c724bc0
        Validity
            Not Before: Jun 30 16:01:12 2026 GMT
            Not After : Jul  1 16:01:12 2026 GMT
        Subject: CN=e7dcdc8058d7ad0e3c978513e99bebf783245aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:01:35:f6:5d:ae:d4:73:d0:6f:7e:4b:f3:
                    5a:bd:cb:4f:9e:ef:32:75:0d:a8:75:45:eb:a7:c0:
                    6e:c1:e4:5a:72:4f:da:6f:d1:a0:21:12:8f:36:28:
                    95:c3:9e:8b:75:24:fe:b9:8a:d6:a5:bd:2a:fc:da:
                    7c:0d:2c:42:0d:8c:63:a8:d2:17:f9:f8:a1:31:ff:
                    4c:2f:11:0d:e3:d6:03:2e:d5:4f:b8:53:40:65:48:
                    94:bd:e5:fb:1d:d8:01:32:5a:30:cc:89:3b:ef:47:
                    e4:01:01:5e:21:e6:bf:d3:5d:b7:cc:be:92:12:84:
                    4a:54:10:aa:2c:31:f7:9c:57:b2:74:64:22:31:33:
                    f2:f1:f2:fa:ea:89:b0:11:58:d1:86:02:80:2a:44:
                    2c:ed:a6:87:a2:6e:75:dc:0f:94:d6:70:9e:24:61:
                    ae:69:59:03:d1:5d:cf:5c:cf:63:ac:7b:7a:53:19:
                    40:95:a9:da:0c:cf:38:5e:f1:00:81:d4:88:1c:ae:
                    60:4b:1d:14:e3:b0:d5:57:9a:c5:bd:33:3c:1f:0f:
                    f5:79:d2:af:a3:93:d8:7a:c7:cc:00:a1:32:3d:e1:
                    9b:05:36:e0:d0:48:75:5d:49:3e:17:9a:d0:22:6b:
                    a8:c5:52:46:c9:2c:84:0d:26:23:d9:8f:96:91:07:
                    f9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DC:DC:80:58:D7:AD:0E:3C:97:85:13:E9:9B:EB:F7:83:24:5A:BA
            X509v3 Authority Key Identifier:
                keyid:E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b6:e4:d3:49:32:97:0f:63:10:a0:0f:9a:33:a6:02:b5:8a:
         42:db:d7:2c:1d:fe:20:65:26:38:44:ac:d5:f7:52:37:5a:3d:
         93:37:d6:4e:cc:ff:58:c8:eb:24:b8:cf:ea:d7:5f:c5:09:17:
         b4:4a:d0:68:5d:04:78:2f:52:58:50:da:8e:82:75:9e:9b:74:
         c9:6d:ad:a6:2a:72:97:08:c7:30:d2:74:2c:e0:3a:46:58:d6:
         13:ae:ce:56:86:a2:ea:cd:1f:e7:d3:cb:7a:65:85:0e:bf:47:
         5f:c8:93:45:69:53:c7:73:07:4a:97:de:80:80:57:63:94:b0:
         b9:fb:96:db:18:f8:18:c9:8c:12:a3:36:db:36:16:03:6f:3a:
         31:7a:7f:70:95:5e:61:f8:b0:2d:c8:c5:5d:f1:96:a6:42:01:
         6d:ae:1d:9b:8e:81:41:c9:a5:3f:38:b4:e8:b7:61:0d:e1:57:
         9a:9f:69:3e:4e:a6:0c:25:d3:6f:c4:d5:1d:d0:51:92:c2:62:
         dd:fe:de:68:4a:70:21:92:83:08:a0:c3:8a:08:73:ef:a0:f3:
         0f:3b:50:da:ac:0f:52:60:c7:ff:4a:db:55:51:a0:27:04:c3:
         51:a4:e1:bd:b8:53:d7:1e:72:44:3b:1f:9a:24:78:b4:63:13:
         ed:ba:66:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ1xwpAlW8KLHa53XSqT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NGJhNWU3MzRjZmYzNTA2ODE0MTYyNTQ1NTY2ZTMzMWM3
MjRiYzAwHhcNMjYwNjMwMTYwMTEyWhcNMjYwNzAxMTYwMTEyWjAzMTEwLwYDVQQD
EyhlN2RjZGM4MDU4ZDdhZDBlM2M5Nzg1MTNlOTliZWJmNzgzMjQ1YWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO8BNfZdrtRz0G9+S/NavctPnu8y
dQ2odUXrp8BuweRack/ab9GgIRKPNiiVw56LdST+uYrWpb0q/Np8DSxCDYxjqNIX
+fihMf9MLxEN49YDLtVPuFNAZUiUveX7HdgBMlowzIk770fkAQFeIea/0123zL6S
EoRKVBCqLDH3nFeydGQiMTPy8fL66omwEVjRhgKAKkQs7aaHom513A+U1nCeJGGu
aVkD0V3PXM9jrHt6UxlAlanaDM84XvEAgdSIHK5gSx0U47DVV5rFvTM8Hw/1edKv
o5PYesfMAKEyPeGbBTbg0Eh1XUk+F5rQImuoxVJGySyEDSYj2Y+WkQf5TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfc3IBY160OPJeFE+mb6/eDJFq6MB8GA1UdIwQY
MBaAFOdLpec0z/NQaBQWJUVWbjMcckvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMTRkNDItZWNiZS00Nzk2LThiM2Qt
YWU1YzI3MmQ0NTQxLzEvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xMTRkNDItZWNiZS00Nzk2LThiM2QtYWU1YzI3MmQ0NTQx
LzEvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbbk00ky
lw9jEKAPmjOmArWKQtvXLB3+IGUmOESs1fdSN1o9kzfWTsz/WMjrJLjP6tdfxQkX
tErQaF0EeC9SWFDajoJ1npt0yW2tpipylwjHMNJ0LOA6RljWE67OVoai6s0f59PL
emWFDr9HX8iTRWlTx3MHSpfegIBXY5SwufuW2xj4GMmMEqM22zYWA286MXp/cJVe
YfiwLcjFXfGWpkIBba4dm46BQcmlPzi06LdhDeFXmp9pPk6mDCXTb8TVHdBRksJi
3f7eaEpwIZKDCKDDighz76DzDztQ2qwPUmDH/0rbVVGgJwTDUaThvbhT1x5yRDsf
miR4tGMT7bpmMw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:37:27 2026 by rpki-client