Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
File:                     50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft (raw, json)
Hash identifier:          kf8sCgM6hIT6WFOQ5rOiY3ebW2pu8lHpR5nQIvGZ7qQ=
Subject key identifier:   8D:32:14:2B:A7:84:05:BD:DA:B7:68:B0:29:7E:BD:43:AD:4C:B0:CC
Authority key identifier: E7:43:67:87:46:E7:9E:91:A4:76:8C:83:17:38:DF:82:3E:13:E8:C2
Certificate issuer:       /CN=e743678746e79e91a4768c831738df823e13e8c2
Certificate serial:       01A1423A6EA619E3127D9C8349E646778D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
Manifest number:          0236
Signing time:             Fri 16 Oct 2026 01:01:27 +0000
Manifest this update:     Fri 16 Oct 2026 01:01:27 +0000
Manifest next update:     Sat 17 Oct 2026 01:01:27 +0000
Files and hashes:         1: 50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl (hash: NpQ8mUt5R8KN1P+99KqWX6cgly7jNC7lmhlk53naOFc=)
                          2: 6JazZr7SPXh8slqXB7HbHUov70k.roa (hash: 7XDa+VuKmI+wLywvS5/AlPdQmoE7eWHSvxOhyrEmunI=)
                          3: aIKtZGQTlVVpSIQ2xB365ii0-Kw.roa (hash: m8BHvkfBcBguPzQ9nNGWSBwFbV1HakSsU6GmXM8bvfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 01:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:42:3a:6e:a6:19:e3:12:7d:9c:83:49:e6:46:77:8d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e743678746e79e91a4768c831738df823e13e8c2
        Validity
            Not Before: Oct 16 01:01:27 2026 GMT
            Not After : Oct 17 01:01:27 2026 GMT
        Subject: CN=8d32142ba78405bddab768b0297ebd43ad4cb0cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d3:bb:79:99:4c:5b:db:9d:33:49:e8:bb:0d:
                    44:de:8b:7c:6f:da:3d:7c:fc:18:93:ac:47:1b:4b:
                    05:b6:c8:28:7a:6b:bf:f5:d8:ae:35:0e:da:f4:c6:
                    2a:e8:66:1b:b8:63:1e:c3:f1:a2:b4:2b:2c:dd:f7:
                    dc:26:26:1f:26:83:4f:41:4d:94:f9:14:9c:4a:e4:
                    8c:dc:22:ce:dd:62:c8:fa:a2:54:cb:c9:01:04:08:
                    1e:a1:d2:60:4c:e1:69:e8:11:c0:de:d5:93:50:af:
                    e3:e8:2b:5b:68:8d:81:02:eb:1a:8f:2d:19:18:8a:
                    94:a4:29:1b:a2:9b:f5:d6:d8:e0:fb:52:5b:5d:12:
                    a1:fa:ee:40:e0:3b:57:58:96:9b:f3:86:cd:ca:61:
                    3f:57:19:9c:11:8a:ce:49:81:db:ad:bc:3f:9c:12:
                    f8:7c:65:5b:56:e0:a7:21:38:85:15:8e:79:1c:38:
                    62:5e:18:1a:ea:fa:dc:71:ee:13:aa:4e:c5:7f:66:
                    af:18:b0:91:e2:99:b3:c2:bf:eb:4c:a6:3a:d1:a3:
                    b8:b4:24:74:48:c9:6e:43:e7:6d:10:df:79:cd:5f:
                    ba:f2:7e:ae:af:26:9a:f8:b5:c2:21:ab:5d:91:11:
                    f7:c0:ec:f8:8a:57:57:e9:53:37:6c:7a:0a:04:05:
                    f0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:32:14:2B:A7:84:05:BD:DA:B7:68:B0:29:7E:BD:43:AD:4C:B0:CC
            X509v3 Authority Key Identifier:
                keyid:E7:43:67:87:46:E7:9E:91:A4:76:8C:83:17:38:DF:82:3E:13:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Nnh0bnnpGkdoyDFzjfgj4T6MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/49cb09-683e-430d-bc7b-3cf1a82d20de/1/50Nnh0bnnpGkdoyDFzjfgj4T6MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0b:ac:df:c1:9f:68:08:7d:8a:a2:51:76:d4:e6:fc:76:a0:
         e2:66:94:22:12:a3:d0:8c:32:a6:8f:bf:39:10:e1:57:1c:f5:
         bc:82:c9:0c:6b:ed:f0:df:9b:60:b1:68:17:95:d7:d2:78:65:
         52:d3:cd:6e:23:5f:95:34:db:f5:f2:54:12:14:93:aa:4e:fd:
         13:d2:ee:4a:5f:bd:14:5e:f2:46:a2:c5:07:ae:5a:9a:f0:e4:
         41:0e:ba:d7:11:e2:d8:a3:e7:12:8e:91:d8:af:9f:39:2e:d2:
         13:61:fe:70:85:fa:0d:59:e0:ed:95:41:8e:2a:77:da:cc:bb:
         98:aa:bf:cd:3c:39:f2:e5:83:85:53:22:bb:40:e5:b3:51:d7:
         a3:ee:4b:aa:18:7b:6a:24:1e:77:ac:58:b8:19:5a:e9:60:c7:
         4f:f7:7c:b7:90:e6:20:8e:da:cd:87:d0:4c:c8:76:9d:34:66:
         dd:72:af:5a:c9:a5:97:80:3e:03:bd:15:be:7d:34:ed:e0:12:
         9e:28:e8:93:53:20:fe:01:6d:e4:1c:14:aa:4e:e8:53:4d:1a:
         dd:11:a6:2f:2b:00:0a:55:61:cd:de:bd:87:6e:a8:9d:e5:34:
         08:87:6f:69:9d:2f:3f:41:8a:f4:bc:93:b3:e7:61:f0:9e:75:
         87:62:d7:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFCOm6mGeMSfZyDSeZGd40iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NDM2Nzg3NDZlNzllOTFhNDc2OGM4MzE3MzhkZjgyM2Ux
M2U4YzIwHhcNMjYxMDE2MDEwMTI3WhcNMjYxMDE3MDEwMTI3WjAzMTEwLwYDVQQD
Eyg4ZDMyMTQyYmE3ODQwNWJkZGFiNzY4YjAyOTdlYmQ0M2FkNGNiMGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tO7eZlMW9udM0nouw1E3ot8b9o9
fPwYk6xHG0sFtsgoemu/9diuNQ7a9MYq6GYbuGMew/GitCss3ffcJiYfJoNPQU2U
+RScSuSM3CLO3WLI+qJUy8kBBAgeodJgTOFp6BHA3tWTUK/j6CtbaI2BAusajy0Z
GIqUpCkbopv11tjg+1JbXRKh+u5A4DtXWJab84bNymE/VxmcEYrOSYHbrbw/nBL4
fGVbVuCnITiFFY55HDhiXhga6vrcce4Tqk7Ff2avGLCR4pmzwr/rTKY60aO4tCR0
SMluQ+dtEN95zV+68n6uryaa+LXCIatdkRH3wOz4ildX6VM3bHoKBAXwZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0yFCunhAW92rdosCl+vUOtTLDMMB8GA1UdIwQY
MBaAFOdDZ4dG556RpHaMgxc434I+E+jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTBObmgwYm5ucEdrZG95REZ6amZnajRUNk1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80OWNiMDktNjgzZS00MzBkLWJjN2It
M2NmMWE4MmQyMGRlLzEvNTBObmgwYm5ucEdrZG95REZ6amZnajRUNk1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80OWNiMDktNjgzZS00MzBkLWJjN2ItM2NmMWE4MmQyMGRl
LzEvNTBObmgwYm5ucEdrZG95REZ6amZnajRUNk1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwus38Gf
aAh9iqJRdtTm/Hag4maUIhKj0Iwypo+/ORDhVxz1vILJDGvt8N+bYLFoF5XX0nhl
UtPNbiNflTTb9fJUEhSTqk79E9LuSl+9FF7yRqLFB65amvDkQQ661xHi2KPnEo6R
2K+fOS7SE2H+cIX6DVng7ZVBjip32sy7mKq/zTw58uWDhVMiu0Dls1HXo+5Lqhh7
aiQed6xYuBla6WDHT/d8t5DmII7azYfQTMh2nTRm3XKvWsmll4A+A70Vvn007eAS
nijok1Mg/gFt5BwUqk7oU00a3RGmLysAClVhzd69h26oneU0CIdvaZ0vP0GK9LyT
s+dh8J51h2LXOg==
-----END CERTIFICATE-----
Generated at Fri Oct 16 12:50:49 2026 by rpki-client