Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
File:                     50ul5zTP81BoFBYlRVZuMxxyS8A.mft (raw, json)
Hash identifier:          vvGQ0rEQ8lJJhzlK9CK5awR+r42ywjfSNS2M1lWCcdY=
Subject key identifier:   DD:6D:3F:E9:02:7F:98:B3:49:F3:99:49:31:0F:DD:A7:30:9E:7F:4E
Authority key identifier: E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0
Certificate issuer:       /CN=e74ba5e734cff3506814162545566e331c724bc0
Certificate serial:       01A0E4E3418128688227FB38B444BB0CD08A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
Manifest number:          1323
Signing time:             Sun 27 Sep 2026 22:01:33 +0000
Manifest this update:     Sun 27 Sep 2026 22:01:33 +0000
Manifest next update:     Mon 28 Sep 2026 22:01:33 +0000
Files and hashes:         1: 50ul5zTP81BoFBYlRVZuMxxyS8A.crl (hash: Ncpo2LlTwgeNVgAGBfFdpuP0G6umrQRLN5GK5CRSe6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:e3:41:81:28:68:82:27:fb:38:b4:44:bb:0c:d0:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e74ba5e734cff3506814162545566e331c724bc0
        Validity
            Not Before: Sep 27 22:01:33 2026 GMT
            Not After : Sep 28 22:01:33 2026 GMT
        Subject: CN=dd6d3fe9027f98b349f39949310fdda7309e7f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7e:31:93:ef:47:94:30:04:6d:9e:16:00:2e:
                    58:a6:81:5c:a6:e5:8f:70:5a:35:90:c1:e1:01:24:
                    21:e8:61:67:ff:5e:33:82:f9:b1:33:14:67:1a:34:
                    97:51:6a:7c:c1:24:19:d9:a1:bf:e8:9d:02:c6:22:
                    e2:cc:73:0b:8e:f6:51:36:cd:be:f4:95:bf:96:e6:
                    5d:d9:33:11:a6:e1:56:f6:d1:4f:9f:a9:9e:e0:aa:
                    d9:53:eb:bf:be:84:a2:b1:93:60:97:d3:58:2c:0b:
                    e9:63:a8:0e:7b:48:fc:b9:be:ba:c9:7e:2d:a7:56:
                    f2:25:08:87:af:ce:c1:70:7d:77:33:12:90:ec:e4:
                    1a:55:b2:a7:77:41:cf:95:54:5d:11:e1:98:96:ec:
                    fa:7c:6f:fb:b7:c6:dd:02:12:9b:5f:43:b8:b9:82:
                    6e:32:37:d9:3e:b3:ff:e1:da:8c:ad:34:34:56:40:
                    ba:fa:b9:4b:67:54:9a:1e:f9:d3:f9:2e:2d:aa:52:
                    1e:17:06:3b:f9:07:40:2a:9a:6b:ff:06:cd:1d:f5:
                    a3:c9:ea:e1:5b:37:9f:12:8e:68:82:12:57:7f:3c:
                    c2:ac:f2:22:8b:81:37:9a:25:b9:d3:fc:8d:05:96:
                    d1:e4:d5:6f:fb:2a:ce:46:04:82:31:f6:dc:36:80:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6D:3F:E9:02:7F:98:B3:49:F3:99:49:31:0F:DD:A7:30:9E:7F:4E
            X509v3 Authority Key Identifier:
                keyid:E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ad:c3:89:e4:d8:b7:7b:35:3c:60:ed:8a:3b:52:5d:35:df:
         0f:d3:91:29:cc:d2:b5:2c:cf:e9:45:e1:a5:73:6c:56:6a:ce:
         10:e2:30:23:7e:3d:f3:80:d5:74:78:ef:c2:d0:28:4a:12:1d:
         3b:c3:86:5e:6b:65:f2:ec:3b:85:6b:d9:77:47:72:fb:8b:58:
         49:af:55:80:39:6a:ce:71:95:e0:6c:73:88:48:01:c1:20:a9:
         7e:27:1e:7c:29:f5:e8:ed:f1:39:2a:4a:a2:98:f9:1d:73:7a:
         15:86:6c:5b:ff:e8:95:ca:dc:14:39:a1:b9:e6:6c:00:ff:48:
         b3:b2:16:5e:89:6b:32:c4:58:3b:e4:42:ec:77:ac:c6:f0:2e:
         17:52:a2:89:97:2e:ef:b7:f0:3b:ab:d8:a4:1e:37:de:10:51:
         45:aa:e4:8a:e1:52:0b:e9:9b:0d:53:a9:31:ef:ab:eb:11:7a:
         75:b2:dc:d7:f1:dd:8e:4c:49:0c:94:8f:1d:9f:89:13:f4:d4:
         fb:48:a1:fa:de:c9:32:3c:4a:52:36:83:0f:1b:f1:b1:8b:b3:
         a6:e6:4d:6b:01:e1:81:04:26:c2:99:de:2d:44:6c:8b:af:c9:
         a0:18:b9:55:be:fd:d3:f9:0b:0b:c2:6d:80:8f:bd:72:fc:55:
         cb:44:4c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:14:31 2026 by rpki-client