Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
File:                     50ul5zTP81BoFBYlRVZuMxxyS8A.mft (raw, json)
Hash identifier:          GeJqxeP4H6X7LOI1qY86SycB3DBFMSILRuKUttKagws=
Subject key identifier:   9E:95:B7:9B:79:33:7A:C9:37:08:B8:F1:F4:9E:BA:72:B0:9C:95:29
Authority key identifier: E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0
Certificate issuer:       /CN=e74ba5e734cff3506814162545566e331c724bc0
Certificate serial:       0198D66031B6D005478274353137CBA83410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
Manifest number:          0EF7
Signing time:             Sat 23 Aug 2025 10:01:25 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:25 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:25 +0000
Files and hashes:         1: 50ul5zTP81BoFBYlRVZuMxxyS8A.crl (hash: +guist9gVWtKEb8FF/MAG0PBNdYypoCUKE19ChQaJz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:31:b6:d0:05:47:82:74:35:31:37:cb:a8:34:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e74ba5e734cff3506814162545566e331c724bc0
        Validity
            Not Before: Aug 23 10:01:25 2025 GMT
            Not After : Aug 24 10:01:25 2025 GMT
        Subject: CN=9e95b79b79337ac93708b8f1f49eba72b09c9529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8a:30:f9:ac:76:ea:94:9b:3e:e9:c5:db:d2:
                    be:16:85:08:1d:3a:03:00:76:3f:b0:0b:35:b9:68:
                    cf:42:a6:97:d5:6b:de:59:4f:fa:4f:e6:21:d0:4b:
                    4c:52:16:62:97:91:3f:d4:24:c5:73:15:10:70:a4:
                    1f:ae:81:58:e2:21:49:06:46:57:15:24:ee:f5:ad:
                    ec:af:fe:39:6f:aa:d7:b1:37:55:f9:4d:dd:ae:4a:
                    78:eb:85:e8:70:a6:b7:9f:bb:c3:8e:d6:c7:a0:87:
                    69:a9:fe:96:5c:23:30:5b:97:32:8e:cb:cc:63:0a:
                    bc:1b:6f:e6:b9:89:46:4d:c0:2c:95:70:cd:58:e5:
                    2b:95:26:ad:91:2a:84:c6:bb:84:f0:cc:85:59:39:
                    b6:01:2c:2f:35:df:78:45:c5:42:28:5b:ef:5f:21:
                    ea:84:0f:f1:8d:e0:c6:a9:e9:4a:bd:62:e7:60:b9:
                    c4:80:e0:0d:72:07:97:6d:4d:d0:06:d8:db:71:73:
                    65:21:c0:8b:ba:f1:bd:38:8e:47:f8:6c:88:cb:c6:
                    d5:61:31:d6:a3:b3:2d:82:a3:bf:a4:7a:77:db:8d:
                    16:b1:7b:2f:d4:94:38:e2:8e:4e:7d:e8:40:1e:2b:
                    76:c0:b0:26:63:46:59:d5:5a:b8:cc:13:44:5a:04:
                    b3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:95:B7:9B:79:33:7A:C9:37:08:B8:F1:F4:9E:BA:72:B0:9C:95:29
            X509v3 Authority Key Identifier:
                keyid:E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f1:ed:50:aa:83:16:3b:f9:c8:49:30:7a:4c:a9:bb:6c:14:
         1a:7f:ca:9b:cb:fb:c6:79:b8:7b:58:59:e6:c3:51:03:40:60:
         b7:80:21:75:d1:9a:43:fc:d3:41:68:85:57:9e:3c:f9:48:a3:
         40:15:07:55:f7:d3:2e:9b:1d:65:57:09:b7:d6:d6:d5:96:9c:
         ee:f7:a1:14:19:23:9b:3b:13:87:a1:64:d3:53:dd:37:85:47:
         ee:03:70:23:c3:7a:59:bd:e4:f5:bb:2f:a9:7c:0f:f0:5c:1e:
         af:56:45:dd:99:e2:c4:a5:3a:08:fe:c2:00:ff:27:8b:b0:bc:
         28:da:1e:3d:f0:c5:32:0c:0e:ed:d2:b1:6c:15:b6:e0:df:50:
         05:0d:06:b3:8c:fa:38:26:a1:fd:9a:3f:8c:d2:ec:f2:a9:91:
         01:7f:e3:ed:10:b1:bb:37:c9:ac:61:16:b9:fa:eb:d6:d0:4a:
         d6:b4:ca:4f:f9:8b:1a:b8:ec:4b:14:87:6b:bf:ec:51:d2:2a:
         10:15:07:97:60:7e:6a:ee:1a:ac:51:83:0c:46:7d:59:9f:78:
         9e:19:19:b6:c4:ad:80:70:dc:3e:8d:78:78:c1:0d:b4:df:ae:
         d8:9d:ab:70:fd:cf:50:8f:61:31:26:39:49:a7:60:d1:7a:85:
         ce:ef:d6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:41:41 2025 by rpki-client