Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
File:                     ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft (raw, json)
Hash identifier:          Dnl7negBJPKXAujzjayLDhopf/4P7xS+t5bHJAzTorc=
Subject key identifier:   74:93:DF:35:BB:16:0C:F1:19:10:B4:56:94:F2:FB:CE:BE:51:E6:7C
Authority key identifier: 50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14
Certificate issuer:       /CN=50b0e7157147a90ce37460b719cb760694ab5414
Certificate serial:       01A110036214680890485253F74787084A86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
Manifest number:          0394
Signing time:             Tue 06 Oct 2026 07:00:19 +0000
Manifest this update:     Tue 06 Oct 2026 07:00:19 +0000
Manifest next update:     Wed 07 Oct 2026 07:00:19 +0000
Files and hashes:         1: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl (hash: WFJGyj4ZsCl4rCNx3ZPLEhA9E4JwRdqo1DFM6RKtSZI=)
                          2: YTZnwgX1fpqLaA8u7GzOIk6ue1k.roa (hash: mBjPd/UyUtpVQP57vDWgcX+PhPNfMg70eOHjoJqEsnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:03:62:14:68:08:90:48:52:53:f7:47:87:08:4a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b0e7157147a90ce37460b719cb760694ab5414
        Validity
            Not Before: Oct  6 07:00:19 2026 GMT
            Not After : Oct  7 07:00:19 2026 GMT
        Subject: CN=7493df35bb160cf11910b45694f2fbcebe51e67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:40:43:8d:53:a4:36:c0:af:e8:37:6d:91:
                    34:0f:c2:ad:1b:77:46:45:0f:bf:ba:f1:eb:42:2c:
                    67:5a:dc:e6:f4:cd:43:9f:cf:d7:ef:21:83:d1:b5:
                    02:80:68:f5:e8:ca:dd:eb:ed:ae:b8:d4:13:37:0e:
                    28:b0:ce:cc:8a:e6:b6:54:a1:7d:e6:29:cc:d2:a9:
                    1f:aa:fd:36:ec:5d:5c:ee:d4:b6:8b:9f:4d:e9:66:
                    3b:7c:62:5d:b7:f9:59:f2:78:f7:5d:e0:33:dc:7b:
                    ac:85:34:14:2a:db:1e:01:a5:88:b0:7a:56:33:4a:
                    14:04:c3:94:3a:8c:4a:18:93:53:c0:27:e1:02:a4:
                    f8:40:89:da:19:77:38:e5:39:c4:42:72:1f:0f:21:
                    e2:13:a1:8d:2f:e4:5b:a3:b9:34:b2:7e:bd:95:a6:
                    e8:5d:55:0d:11:ad:c4:46:82:1f:e7:28:70:65:d2:
                    c3:a1:52:d3:e5:a3:d3:dc:fd:78:3d:d3:b2:77:38:
                    45:f4:bc:75:9c:b7:fa:20:17:3f:bd:83:be:80:9c:
                    1a:16:04:e0:dc:49:37:e0:f8:57:7d:19:56:29:f7:
                    a3:ac:71:51:3b:60:9a:02:20:00:e8:14:f4:b0:ed:
                    a6:19:c5:ec:ec:c3:08:06:a8:96:72:67:6a:cf:b6:
                    01:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:93:DF:35:BB:16:0C:F1:19:10:B4:56:94:F2:FB:CE:BE:51:E6:7C
            X509v3 Authority Key Identifier:
                keyid:50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b8:9e:34:ff:f4:52:58:f0:4b:60:d0:2b:db:ab:eb:7b:2c:
         ca:2d:58:f9:f9:b0:11:71:36:50:93:ae:3c:1a:7c:a5:b9:bd:
         99:5c:c2:a5:38:62:86:a8:13:9d:6c:6d:83:f7:2b:e3:05:57:
         4c:b7:76:2e:90:ae:00:e7:bc:65:3e:60:f5:a4:2b:d1:16:44:
         f2:fa:8c:a6:db:91:5d:c3:29:e5:8a:64:ec:c8:5b:35:f6:47:
         77:1e:ca:99:da:2c:07:b4:71:2e:03:4a:f9:a8:d5:d7:9a:52:
         07:4e:66:04:69:1f:86:f8:6c:2f:ec:9e:42:a6:13:1f:53:f9:
         1a:d0:02:e2:01:fc:75:15:a4:66:27:55:b2:a4:d6:19:df:ae:
         88:ac:9e:10:b4:65:2e:51:8b:ba:5e:90:ac:29:ae:dd:aa:a6:
         a4:17:93:7a:57:31:39:e1:a6:c5:da:5e:22:48:83:6d:0b:35:
         ee:99:0b:26:89:fc:ac:6a:36:ac:66:bb:dd:41:c8:a9:2c:81:
         22:73:a2:28:2d:ff:dc:fd:c1:60:b8:78:0e:89:e9:5c:4c:ac:
         76:41:1f:d6:2f:e4:60:f7:28:b4:3c:a6:d5:17:9a:75:fd:27:
         c6:5f:f2:a5:4b:cb:bb:92:36:72:1a:87:2b:e8:cf:68:24:3d:
         50:e1:c0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:29:33 2026 by rpki-client