Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
File:                     50Du0o8tmU6yuDHLjvxkcDBtdGE.mft (raw, json)
Hash identifier:          lvdYnJTlNaOoe2QCWSD0KUF6wsMrGsFVfuPeXkNSj2Y=
Subject key identifier:   76:6A:15:87:50:0A:6E:D7:84:DD:0C:85:6A:9D:A8:48:BB:D6:C1:0A
Authority key identifier: E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61
Certificate issuer:       /CN=e740eed28f2d994eb2b831cb8efc6470306d7461
Certificate serial:       019DA48A60E78E109328F3F23E3739CCDB2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
Manifest number:          10DD
Signing time:             Sun 19 Apr 2026 07:00:25 +0000
Manifest this update:     Sun 19 Apr 2026 07:00:25 +0000
Manifest next update:     Mon 20 Apr 2026 07:00:25 +0000
Files and hashes:         1: 50Du0o8tmU6yuDHLjvxkcDBtdGE.crl (hash: 63LunjGPNtrQf63hD1D6hKC6Rw9QdkHAMHw/TnZxz8g=)
                          2: yIDca_4n_vWlCaLHGyh0ZQJf864.roa (hash: HnwqE8ggCCf2qjihjisCWvzXEQ4Ud1FRMg5ZYuNj078=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8a:60:e7:8e:10:93:28:f3:f2:3e:37:39:cc:db:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e740eed28f2d994eb2b831cb8efc6470306d7461
        Validity
            Not Before: Apr 19 07:00:25 2026 GMT
            Not After : Apr 20 07:00:25 2026 GMT
        Subject: CN=766a1587500a6ed784dd0c856a9da848bbd6c10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:06:ae:c1:36:6f:58:61:c2:22:ef:c7:5f:
                    c4:4a:25:99:35:5b:17:a9:ad:b8:de:2f:04:9a:81:
                    9a:5f:d2:32:d8:72:f6:28:6f:66:40:78:28:eb:d2:
                    28:cc:a5:f7:28:d7:2d:26:5f:67:bc:1d:27:e8:5f:
                    a0:e0:53:fc:e5:b5:1e:96:cf:b7:ad:59:de:f2:88:
                    b5:8f:97:73:3f:40:a4:da:4c:f8:f9:e9:1d:e6:4c:
                    50:34:82:35:c5:02:2a:59:dd:2d:d4:6d:4d:d6:b4:
                    d2:5c:86:8f:1b:dd:68:20:eb:73:b3:7f:e1:87:7a:
                    ed:c7:a5:0a:99:50:ad:90:1a:02:d0:4f:3d:57:52:
                    26:d2:3f:d7:c0:a6:64:80:33:35:05:89:61:d4:20:
                    43:d2:1b:f6:16:a2:d1:7e:75:06:23:6a:9a:bc:3a:
                    10:b7:94:b7:ea:ac:bf:fd:31:32:3c:97:2e:bc:3e:
                    45:21:6f:cd:c8:d5:f6:17:17:72:b8:cd:0a:d2:35:
                    67:e5:ad:f4:ec:79:da:ee:a3:12:a6:08:eb:b4:e3:
                    cd:14:51:4f:e5:3f:78:13:93:33:06:ef:f1:c2:29:
                    e9:eb:ec:76:3f:64:dc:f4:b9:0a:bd:34:9c:59:92:
                    4b:78:bc:27:5f:6c:1e:50:08:44:9b:54:50:4d:b9:
                    aa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6A:15:87:50:0A:6E:D7:84:DD:0C:85:6A:9D:A8:48:BB:D6:C1:0A
            X509v3 Authority Key Identifier:
                keyid:E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:be:12:14:55:8b:8b:08:52:7a:13:d6:1f:6c:b6:63:cb:d0:
         8f:53:bd:45:ae:ca:0b:81:66:d1:22:a4:07:32:a5:cf:3e:3c:
         ab:4b:d2:b7:b8:42:a0:89:14:81:d9:8a:62:c8:ec:40:d8:cc:
         00:5d:a0:2a:1c:09:77:41:c1:86:e7:c6:49:c2:5c:48:38:27:
         f9:17:d3:7a:d8:82:a4:5d:f6:7a:04:4d:1a:33:da:28:b4:66:
         f8:60:ca:e8:f5:32:a0:f2:f9:80:53:2e:6a:a4:3d:e9:f8:81:
         43:65:d6:88:01:d8:93:1d:c6:10:9c:aa:46:18:29:b0:79:af:
         b4:3c:48:fa:25:eb:dd:a3:12:c9:dd:2d:9a:b8:19:09:5b:88:
         34:11:67:3e:60:c0:b4:8e:92:e7:92:68:93:c2:56:70:4a:e2:
         5a:ba:9c:ec:4e:9e:d6:a1:42:05:52:57:0b:38:9e:41:81:1c:
         fc:14:fa:e4:a3:ac:d7:0a:5b:f1:fb:8b:b1:cc:d0:84:ad:ff:
         c8:ec:e9:4b:a8:91:fa:30:f3:bc:c6:b9:cf:7e:4a:37:d1:08:
         23:e3:59:8b:24:51:81:30:fd:ad:71:78:d9:5c:ca:cc:e7:2e:
         48:7e:1b:fa:8f:e8:70:29:ba:26:3c:49:ab:e4:56:10:c1:a2:
         53:ac:71:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:41:58 2026 by rpki-client