Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
File:                     50ul5zTP81BoFBYlRVZuMxxyS8A.mft (raw, json)
Hash identifier:          W0kWhnsQa9HnVuc2FH0L+f/la+fPzFkJ9+pCFER7drQ=
Subject key identifier:   86:AA:67:40:89:59:CA:E8:0E:77:62:02:D8:8D:7C:08:6F:88:68:6F
Authority key identifier: E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0
Certificate issuer:       /CN=e74ba5e734cff3506814162545566e331c724bc0
Certificate serial:       019F90FE894D164CE5AFA1BDD61DF16C386D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
Manifest number:          1273
Signing time:             Thu 23 Jul 2026 22:00:28 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:28 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:28 +0000
Files and hashes:         1: 50ul5zTP81BoFBYlRVZuMxxyS8A.crl (hash: JYpH4/yLJWFk5oAQ9Z7XfYk68rA07XJmYmUmamaQZcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:89:4d:16:4c:e5:af:a1:bd:d6:1d:f1:6c:38:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e74ba5e734cff3506814162545566e331c724bc0
        Validity
            Not Before: Jul 23 22:00:28 2026 GMT
            Not After : Jul 24 22:00:28 2026 GMT
        Subject: CN=86aa67408959cae80e776202d88d7c086f88686f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:0a:87:60:c3:94:20:40:c3:2d:fb:7e:5b:
                    02:44:4a:4a:4c:27:0f:9d:b9:41:4d:32:7d:ac:6a:
                    f1:af:45:f4:8f:98:9e:a6:59:6f:62:e4:5a:7a:36:
                    84:ca:f1:a8:4a:1b:d7:a4:0a:89:f4:b0:14:98:2d:
                    98:01:fb:54:d4:51:fa:6e:22:07:15:4d:f2:5c:cc:
                    f4:cf:67:4c:7e:bc:f1:9e:f4:ea:af:c0:22:34:cd:
                    9f:0c:c1:bb:6d:47:3e:7b:50:05:51:c2:07:a3:55:
                    6e:55:ed:66:b6:b0:59:c4:1b:07:1f:75:95:bb:62:
                    e9:69:03:3f:06:c6:61:e1:79:b7:3d:b0:01:e8:e2:
                    b2:c8:59:29:91:33:3b:f7:d1:f6:8b:80:f2:33:03:
                    9d:86:40:56:b2:9d:d4:f0:ca:2b:36:cd:36:7a:46:
                    4c:97:53:0b:52:41:eb:97:c1:de:68:16:35:d9:a1:
                    64:ee:a8:fc:42:25:3e:fb:07:5e:c5:dd:1f:b1:9d:
                    f1:fa:5c:cf:ab:13:21:e2:78:d9:d7:5d:70:fd:3d:
                    e3:11:36:0e:60:75:15:37:a8:c1:17:88:53:14:2c:
                    8e:58:3f:c7:21:01:9a:d0:c1:69:48:39:f1:27:08:
                    83:48:42:61:d3:aa:fe:cc:d9:31:f8:9d:30:ea:45:
                    b4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AA:67:40:89:59:CA:E8:0E:77:62:02:D8:8D:7C:08:6F:88:68:6F
            X509v3 Authority Key Identifier:
                keyid:E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:fd:88:33:d7:85:5e:d4:49:57:96:0f:fc:39:6c:46:eb:46:
         c7:97:6f:03:b1:df:1b:4f:7e:68:2b:8c:f0:9f:d7:be:f5:31:
         fe:98:93:68:81:cf:14:09:a0:04:32:32:81:ec:75:9d:15:05:
         5f:6d:26:f2:70:6e:86:f9:2d:9c:18:cd:10:83:3d:a3:05:28:
         22:ec:ee:00:22:95:15:17:50:70:1c:03:78:4d:11:1d:37:f5:
         6a:ba:28:f1:d5:2b:f5:70:b4:a6:8d:59:c1:45:a9:d7:19:64:
         e8:48:9e:d6:3a:f2:d5:db:9f:86:06:42:b8:67:08:25:95:79:
         2a:25:4c:fd:eb:04:c7:41:c6:ea:d9:9d:b8:3d:4c:8a:96:b2:
         13:67:35:22:fb:83:b0:de:35:cc:84:2d:6e:8a:22:57:5e:34:
         83:60:2f:21:47:f8:79:26:11:19:77:fc:de:5a:3b:87:ea:e0:
         35:54:96:8a:cb:a5:6f:b8:ae:ab:4d:78:99:ee:c2:2d:f0:3e:
         ec:35:d3:60:42:c1:ff:78:09:5e:6e:6f:00:01:27:a9:d6:6a:
         e7:44:67:12:a5:57:16:33:bd:54:a3:cf:b4:24:2c:b2:ad:e1:
         ea:19:7c:6f:6e:48:cf:8e:d1:d2:64:8c:41:ba:43:1f:28:e1:
         1a:80:2a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:44:33 2026 by rpki-client