Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
File:                     50ul5zTP81BoFBYlRVZuMxxyS8A.mft (raw, json)
Hash identifier:          OvcbqWFc7VXwTyu/o6ry2RdB3McSCngbItUR5fV/Vjc=
Subject key identifier:   A6:69:F7:7C:76:BD:B7:52:60:FF:A8:57:59:50:47:84:54:EF:24:8F
Authority key identifier: E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0
Certificate issuer:       /CN=e74ba5e734cff3506814162545566e331c724bc0
Certificate serial:       0199FFC8ADCBC02C71647EA87B2858D1AC3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
Manifest number:          0F91
Signing time:             Mon 20 Oct 2025 04:02:45 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:45 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:45 +0000
Files and hashes:         1: 50ul5zTP81BoFBYlRVZuMxxyS8A.crl (hash: IwYo8AmczsF29jMkABzIvt3+8oKk5zE7rkLSV6/YR4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:ad:cb:c0:2c:71:64:7e:a8:7b:28:58:d1:ac:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e74ba5e734cff3506814162545566e331c724bc0
        Validity
            Not Before: Oct 20 04:02:45 2025 GMT
            Not After : Oct 21 04:02:45 2025 GMT
        Subject: CN=a669f77c76bdb75260ffa8575950478454ef248f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:65:3c:60:fc:51:eb:49:b2:fb:7f:d0:76:c0:
                    f1:d1:ff:3e:85:01:00:3c:fa:6b:72:19:fe:73:b2:
                    c7:8e:d2:ed:0d:62:05:b7:30:d3:54:a6:a8:31:69:
                    a8:9a:08:e8:4c:4e:c6:da:25:47:15:a1:b3:e0:a8:
                    51:bf:f7:77:2d:ad:3d:e6:c1:64:99:df:17:c1:9f:
                    2e:70:45:83:66:da:d1:a0:81:74:87:60:a0:e2:45:
                    a0:27:10:f0:45:10:c7:cc:4b:47:a6:6a:e8:96:f8:
                    d9:ec:a6:0b:a0:fd:9b:c9:93:56:e3:c9:3c:5f:79:
                    0f:da:1f:97:ac:0b:a1:05:c6:57:78:1a:fa:ad:93:
                    17:1d:f3:0b:be:ec:54:9e:d4:fe:77:c6:b4:3f:01:
                    d7:de:52:81:fa:56:61:70:12:5f:91:07:17:47:8c:
                    b9:50:a5:7f:1c:29:ed:b8:4e:d3:b0:c2:3f:e1:32:
                    bb:2a:14:4f:1f:dc:b7:35:41:18:d9:dc:00:38:e6:
                    02:8c:57:ce:06:34:8a:2c:0b:fd:7d:0f:24:17:11:
                    93:77:ec:22:da:be:59:a4:8d:15:c3:37:54:3b:ee:
                    2c:f2:df:54:e7:1b:7a:83:15:87:ac:29:ac:10:ff:
                    9c:dc:c0:60:52:a5:1c:09:72:07:03:f9:b4:3c:cd:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:69:F7:7C:76:BD:B7:52:60:FF:A8:57:59:50:47:84:54:EF:24:8F
            X509v3 Authority Key Identifier:
                keyid:E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c6:33:bb:7e:5a:33:4e:4a:16:6c:12:76:21:1b:e5:66:5e:
         2c:0b:ee:7f:ba:12:23:27:f9:44:1c:36:25:8d:8f:88:86:2d:
         87:1e:86:53:a2:73:f2:ea:fe:49:2b:45:ed:55:23:4f:18:74:
         5e:4c:70:45:87:7b:2a:4e:71:07:02:aa:e8:f9:32:51:2c:63:
         47:e2:37:76:1e:fe:cb:57:62:9d:35:c3:5e:d2:b2:31:be:76:
         a8:0f:c9:07:fe:ad:f2:a0:64:d8:2b:23:6c:ef:fe:27:fb:c6:
         7f:e1:a5:de:5f:6b:fc:67:bc:21:13:ef:27:c2:ab:40:4e:58:
         1e:d2:81:a1:e7:fc:2a:ec:ce:b6:4e:f7:d8:be:96:21:e0:87:
         61:fd:7f:6f:1d:4a:ab:c3:90:b5:10:29:4d:79:0c:bb:2e:3f:
         b0:d4:07:56:d4:bc:ad:41:c3:10:de:c3:3d:e9:c7:79:54:0e:
         1f:06:23:d9:e7:3a:8d:7e:da:5d:4c:66:32:79:30:a3:f8:8a:
         b5:79:e8:75:ee:34:c0:cd:c8:ec:fd:db:22:8c:86:b7:ba:96:
         74:61:0b:01:02:ee:d7:15:5c:d3:af:40:ad:cd:06:be:85:28:
         a2:bc:0f:0f:c1:1f:a1:8b:f2:fb:89:6a:04:94:6e:49:14:ea:
         2e:d0:ac:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yK3LwCxxZH6oeyhY0aw7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NGJhNWU3MzRjZmYzNTA2ODE0MTYyNTQ1NTY2ZTMzMWM3
MjRiYzAwHhcNMjUxMDIwMDQwMjQ1WhcNMjUxMDIxMDQwMjQ1WjAzMTEwLwYDVQQD
EyhhNjY5Zjc3Yzc2YmRiNzUyNjBmZmE4NTc1OTUwNDc4NDU0ZWYyNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWU8YPxR60my+3/QdsDx0f8+hQEA
PPprchn+c7LHjtLtDWIFtzDTVKaoMWmomgjoTE7G2iVHFaGz4KhRv/d3La095sFk
md8XwZ8ucEWDZtrRoIF0h2Cg4kWgJxDwRRDHzEtHpmrolvjZ7KYLoP2byZNW48k8
X3kP2h+XrAuhBcZXeBr6rZMXHfMLvuxUntT+d8a0PwHX3lKB+lZhcBJfkQcXR4y5
UKV/HCntuE7TsMI/4TK7KhRPH9y3NUEY2dwAOOYCjFfOBjSKLAv9fQ8kFxGTd+wi
2r5ZpI0VwzdUO+4s8t9U5xt6gxWHrCmsEP+c3MBgUqUcCXIHA/m0PM3vewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZp93x2vbdSYP+oV1lQR4RU7ySPMB8GA1UdIwQY
MBaAFOdLpec0z/NQaBQWJUVWbjMcckvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMTRkNDItZWNiZS00Nzk2LThiM2Qt
YWU1YzI3MmQ0NTQxLzEvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xMTRkNDItZWNiZS00Nzk2LThiM2QtYWU1YzI3MmQ0NTQx
LzEvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsYzu35a
M05KFmwSdiEb5WZeLAvuf7oSIyf5RBw2JY2PiIYthx6GU6Jz8ur+SStF7VUjTxh0
XkxwRYd7Kk5xBwKq6PkyUSxjR+I3dh7+y1dinTXDXtKyMb52qA/JB/6t8qBk2Csj
bO/+J/vGf+Gl3l9r/Ge8IRPvJ8KrQE5YHtKBoef8KuzOtk732L6WIeCHYf1/bx1K
q8OQtRApTXkMuy4/sNQHVtS8rUHDEN7DPenHeVQOHwYj2ec6jX7aXUxmMnkwo/iK
tXnode40wM3I7P3bIoyGt7qWdGELAQLu1xVc069Arc0GvoUoorwPD8EfoYvy+4lq
BJRuSRTqLtCsiA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:42:14 2025 by rpki-client