Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
File:                     ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft (raw, json)
Hash identifier:          jr+akCiTUbXCsbsJAtzjqOZzbCOGGj7OnGQlryPKf3g=
Subject key identifier:   74:17:07:25:0D:0E:92:3B:2C:5E:5B:51:B0:5B:1B:46:C6:44:E4:F1
Authority key identifier: 50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14
Certificate issuer:       /CN=50b0e7157147a90ce37460b719cb760694ab5414
Certificate serial:       019E20C82D45E28A3DAEC1338DB8DE1888CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
Manifest number:          020F
Signing time:             Wed 13 May 2026 10:00:50 +0000
Manifest this update:     Wed 13 May 2026 10:00:50 +0000
Manifest next update:     Thu 14 May 2026 10:00:50 +0000
Files and hashes:         1: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl (hash: y0GPcJh1+DHStgdIDguOzptZH7eI8jc15fogBnAeVo0=)
                          2: YTZnwgX1fpqLaA8u7GzOIk6ue1k.roa (hash: mBjPd/UyUtpVQP57vDWgcX+PhPNfMg70eOHjoJqEsnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:2d:45:e2:8a:3d:ae:c1:33:8d:b8:de:18:88:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b0e7157147a90ce37460b719cb760694ab5414
        Validity
            Not Before: May 13 10:00:50 2026 GMT
            Not After : May 14 10:00:50 2026 GMT
        Subject: CN=741707250d0e923b2c5e5b51b05b1b46c644e4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:ee:84:49:24:24:a4:4a:05:30:d6:97:85:
                    ae:fe:8c:1f:5c:a1:d8:88:a0:bc:6c:6c:37:46:37:
                    72:6f:5e:36:72:5c:6a:ac:df:d9:c0:72:e7:28:39:
                    40:c6:ac:e1:8d:58:f7:da:ae:3b:bf:df:f4:e6:c2:
                    49:a5:d0:d2:6b:02:e5:cf:c2:02:30:0d:4c:19:8e:
                    15:43:a2:14:b2:e3:9d:48:83:33:01:af:9c:16:c1:
                    70:25:c3:35:76:f6:40:cb:0b:b4:37:2b:06:d9:9c:
                    8c:d5:73:bb:59:1b:fd:f3:9b:73:51:35:29:9d:ba:
                    08:bd:47:83:1e:67:16:a7:22:e8:39:c6:cd:a3:a1:
                    3f:e0:39:74:96:9b:e4:0e:19:4c:91:8e:c2:79:62:
                    22:9f:97:88:68:da:f9:96:22:2b:21:db:19:19:29:
                    92:dc:ff:36:96:a3:81:f2:28:38:cb:0a:3c:cb:2a:
                    fb:5a:05:d7:1b:2b:e8:40:a4:56:b3:3c:89:a9:33:
                    66:4a:1d:18:53:2d:ce:5a:60:09:48:ed:73:2a:bf:
                    8b:df:eb:58:c1:df:b4:1a:0e:1d:39:72:a1:72:8f:
                    27:7c:0e:94:68:11:2a:f7:ad:cc:7d:7b:72:0d:4a:
                    db:15:12:cd:b0:79:15:99:51:7b:be:1a:a0:a5:c0:
                    c0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:17:07:25:0D:0E:92:3B:2C:5E:5B:51:B0:5B:1B:46:C6:44:E4:F1
            X509v3 Authority Key Identifier:
                keyid:50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:22:30:19:76:62:7f:ce:d4:a3:c7:fb:b0:80:c6:c8:9a:b5:
         47:21:f2:e4:85:ce:90:8c:d3:4f:86:ba:21:02:97:af:7c:bb:
         64:f7:66:7d:ac:03:10:c5:79:35:9a:88:bc:82:47:99:13:96:
         28:b3:54:25:4f:9b:a1:cf:68:95:e4:cb:11:39:f5:b9:ad:1a:
         6f:8f:0f:f6:0a:17:d0:bb:c1:f9:fd:51:c0:41:3d:16:54:4d:
         58:c8:47:81:8f:6b:d0:08:00:05:ec:97:f3:8f:b0:48:7b:cd:
         84:10:ce:ee:20:c8:31:9f:45:65:3e:50:95:f2:5a:4d:cc:67:
         4d:c3:46:30:7c:83:86:7f:36:8e:cc:c0:4d:88:fb:af:0e:cd:
         68:e1:4b:0e:3f:0a:44:e7:5e:a0:e3:a0:a5:42:1f:4d:2b:ca:
         d5:05:e8:f2:25:69:e6:d5:88:e8:11:2b:e6:c2:ee:9f:26:67:
         91:74:29:c4:2c:ea:17:6e:6b:0a:ef:3b:d4:50:62:b5:db:2d:
         22:81:b3:e2:07:ca:17:ff:db:2f:16:cd:ae:f6:f4:1e:5a:55:
         cb:26:d9:7b:db:7e:49:83:0f:0e:99:65:90:85:4d:a8:d8:d2:
         8e:4a:cf:e4:c7:ac:3a:06:49:c4:fc:8d:1a:df:7c:6f:1c:f5:
         7b:6e:64:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:46 2026 by rpki-client