Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
File:                     50Du0o8tmU6yuDHLjvxkcDBtdGE.mft (raw, json)
Hash identifier:          e0+BnORKCnAmY86jP7uehMTq+wIU6Zzd0R+v8rO8bM0=
Subject key identifier:   ED:D2:4E:EA:5C:3B:46:B4:F1:9F:14:58:5E:EB:E6:D6:79:6D:AD:8A
Authority key identifier: E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61
Certificate issuer:       /CN=e740eed28f2d994eb2b831cb8efc6470306d7461
Certificate serial:       0199FCC63010F1D9A95C93B1B0A04FD1316F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
Manifest number:          0EF8
Signing time:             Sun 19 Oct 2025 14:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:10 +0000
Files and hashes:         1: 50Du0o8tmU6yuDHLjvxkcDBtdGE.crl (hash: w8Lsxatn0WSQN2TxWJlgM+A+0xIWlvc+QadO5spvYe8=)
                          2: nIb9hACkrzkR8YbAdKP9wDLbBJc.roa (hash: GZXAKYA4rdv87pCnOscB54KXgGj+TJ2DGRrncRH4Kpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:30:10:f1:d9:a9:5c:93:b1:b0:a0:4f:d1:31:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e740eed28f2d994eb2b831cb8efc6470306d7461
        Validity
            Not Before: Oct 19 14:01:10 2025 GMT
            Not After : Oct 20 14:01:10 2025 GMT
        Subject: CN=edd24eea5c3b46b4f19f14585eebe6d6796dad8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:ad:c5:66:a4:d6:00:d2:61:00:c1:31:8d:
                    60:a2:8e:7a:6f:12:1b:e6:d7:26:55:f6:d0:ec:82:
                    dd:bc:01:a3:28:79:12:9e:44:a2:5d:23:7e:e5:67:
                    fa:83:03:a9:08:44:cc:7a:cc:e0:2c:e9:90:de:fb:
                    c0:39:ac:cf:a4:0b:57:f8:d2:95:38:cc:8c:0d:38:
                    7e:90:11:8a:b4:2f:27:0e:62:14:e8:9f:89:74:05:
                    dd:7a:15:6f:2a:cb:15:26:b7:0d:70:6a:8b:c9:70:
                    e3:b6:0f:53:1c:6b:6f:fa:96:f4:06:26:c5:e5:fa:
                    ad:59:71:3d:61:16:8c:a5:73:a0:41:c9:1a:23:bf:
                    f5:0b:58:b7:93:6f:db:a8:62:f5:ae:0e:de:aa:7a:
                    d0:b2:98:7b:66:3f:b3:8e:f5:2d:82:e4:1b:39:b3:
                    2b:1a:0a:c4:03:86:9c:61:37:43:7a:cd:eb:4a:1e:
                    f4:dc:e7:a3:29:e3:ec:5f:bc:17:5c:66:7e:b7:8d:
                    89:52:b4:9b:8a:40:2b:cb:a6:13:9d:9e:9b:f4:33:
                    d2:3e:10:01:85:9d:bc:5a:ea:ef:1c:d3:e6:b5:30:
                    ca:41:cc:f0:cf:1a:c1:0b:52:76:99:e7:a9:71:7f:
                    9c:61:9c:51:8f:f7:89:5c:d8:b7:50:73:46:df:68:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D2:4E:EA:5C:3B:46:B4:F1:9F:14:58:5E:EB:E6:D6:79:6D:AD:8A
            X509v3 Authority Key Identifier:
                keyid:E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ac:96:f5:b4:75:3b:7c:64:e7:09:5c:1c:4b:b9:e5:dd:07:
         ab:31:81:2f:66:60:c0:da:c2:e6:41:05:b2:3d:b3:cc:f9:de:
         4f:b8:ac:05:ab:84:a1:ee:48:6e:7b:9d:9a:6f:fa:a7:5d:95:
         66:f1:9a:04:bd:97:62:43:38:fa:40:16:3c:06:5a:45:4b:03:
         2d:09:4a:fd:41:8e:11:3f:d5:5c:1a:05:e4:5c:4f:c5:1f:1c:
         3e:77:e0:9e:bd:d1:c8:ba:59:c4:8a:07:5a:d9:ac:fc:cf:31:
         d3:83:1f:63:23:4f:a7:4c:75:65:d4:4e:ba:f2:bc:25:2d:c3:
         e7:ac:8d:d8:fa:85:aa:67:68:93:71:29:15:ab:5f:4c:a6:0c:
         c7:42:6c:16:fa:c2:9f:90:13:79:9a:7e:0e:03:9e:09:cf:60:
         82:ae:5b:44:c1:73:56:04:89:3a:33:89:e6:08:dd:57:cc:da:
         76:e3:86:89:76:9e:13:c4:23:4b:97:55:16:d1:94:34:12:42:
         89:90:45:e2:78:80:ff:f8:f9:60:e8:34:83:b7:58:cb:b7:1e:
         1c:28:de:37:b5:b4:97:df:5b:0e:f3:b8:2e:3b:50:40:d2:37:
         79:92:94:c8:3c:4b:0c:61:88:3e:17:30:9c:75:dc:5c:58:fe:
         44:48:ec:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:25 2025 by rpki-client