Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
File:                     50eFUAaL94IgQIwl1hK8L7AkYME.mft (raw, json)
Hash identifier:          DV3Ei+OlOj/98+DKNqpqiBX5ym7dIky86A2BaHsX7xA=
Subject key identifier:   3E:C9:76:DE:8C:9B:E4:E1:D3:12:52:E2:D2:08:7B:3E:88:61:32:E6
Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Certificate issuer:       /CN=e7478550068bf78220408c25d612bc2fb02460c1
Certificate serial:       019EBDA2FC68548E17FA16DB30428AB5FE92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
Manifest number:          111D
Signing time:             Fri 12 Jun 2026 21:00:35 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:35 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:35 +0000
Files and hashes:         1: 50eFUAaL94IgQIwl1hK8L7AkYME.crl (hash: Fe+GBv4pU54XWty3K8KeFyWPS6e2R1nU1Nb11DzetWw=)
                          2: 8Z1Fe41TwalLVZHgkQPApervv24.roa (hash: F/UZEYLq5oXVVtK0yybX3uC3qwDitsO1X4zzo9SB4hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:fc:68:54:8e:17:fa:16:db:30:42:8a:b5:fe:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1
        Validity
            Not Before: Jun 12 21:00:35 2026 GMT
            Not After : Jun 13 21:00:35 2026 GMT
        Subject: CN=3ec976de8c9be4e1d31252e2d2087b3e886132e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:54:6c:34:8d:6c:bf:90:e3:35:72:d5:e6:c6:
                    3f:01:2d:45:da:c0:d5:92:27:6f:bc:bc:70:94:7d:
                    50:7d:7d:bd:c0:dd:66:64:a1:0a:98:71:07:e3:18:
                    fa:d6:8c:e9:b3:44:2c:47:08:cb:9d:fa:d8:87:02:
                    34:51:d4:1b:88:6d:5a:3b:17:5f:ae:9d:0d:3d:da:
                    5c:33:79:1e:92:42:24:0f:b1:ca:e7:e3:1a:b1:dc:
                    11:3d:42:6a:4d:b9:53:38:53:b9:79:98:7b:5e:d5:
                    67:ba:2f:4f:cd:8e:b8:92:c4:6e:f2:79:37:28:77:
                    97:74:77:4b:d8:de:ed:f7:92:25:9c:f4:59:93:4c:
                    b2:fc:1f:48:90:df:71:22:ce:d1:39:81:35:a3:6a:
                    2a:94:52:65:af:14:08:f0:3c:a0:87:5c:79:91:42:
                    f1:f9:a6:63:4c:d2:9c:fd:b9:8c:cd:0a:e1:e1:c4:
                    28:6f:1a:43:62:a0:37:e4:61:39:0d:05:7a:80:4e:
                    f1:a7:7b:5f:42:38:e8:c6:34:35:ca:43:58:17:7e:
                    22:e9:3d:e5:3e:fb:52:67:7d:53:40:1c:22:24:de:
                    7e:55:ae:cd:16:5f:60:bc:ff:6a:fc:f0:4d:1e:e6:
                    be:a4:20:de:72:15:4a:65:e9:2d:ef:cf:b2:5e:02:
                    1a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C9:76:DE:8C:9B:E4:E1:D3:12:52:E2:D2:08:7B:3E:88:61:32:E6
            X509v3 Authority Key Identifier:
                keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2f:8f:e2:25:c9:07:ec:f4:aa:e6:22:21:59:c2:62:a1:9f:
         f6:c9:a5:7f:82:0a:88:2a:47:a5:ef:a2:f5:fb:61:7c:10:90:
         20:6f:53:2f:f0:62:ac:d5:14:fa:c3:9d:e5:7c:fe:68:1b:3f:
         53:a5:6d:0d:78:39:5b:19:bf:f8:3b:fd:6e:d6:e3:ec:40:07:
         70:8a:78:45:f3:d5:98:f5:14:ff:a1:0a:9d:62:21:c2:55:42:
         3a:18:69:7e:12:6f:11:9f:67:a3:35:11:56:05:0e:d5:de:8b:
         ef:50:b5:1f:70:74:f5:c9:a7:9e:93:7e:39:74:e3:9e:65:27:
         90:4b:19:3c:65:29:5c:fa:19:b8:e9:c7:a1:d2:49:82:8d:96:
         5b:89:72:4d:24:fa:bb:3e:64:d7:45:78:0c:6c:37:9c:95:11:
         43:fe:58:ce:20:cf:0e:a8:84:03:50:65:b5:1c:92:b6:0e:ef:
         af:49:3c:94:63:60:e5:fc:eb:eb:12:f1:7a:3e:23:b9:25:8a:
         10:6d:c8:82:fc:c0:ce:46:36:fb:28:a1:e7:a7:5e:f3:99:4d:
         84:fb:52:dc:08:53:50:06:27:61:bf:ec:67:0f:19:fb:11:50:
         81:51:8c:9f:c8:d6:0e:02:81:28:7b:04:ae:35:c3:e9:ad:c9:
         7a:92:e4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:47 2026 by rpki-client