Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
File:                     40Y1lMN3zViH3pB4tLLozcTTrls.mft (raw, json)
Hash identifier:          9hXEcuMvMhiitob+p4hy34bg+7pcfxnzzKNa5ZGosOM=
Subject key identifier:   2E:7C:0C:A2:7F:5F:C4:E5:03:36:89:85:06:56:17:37:F6:F4:5B:2A
Authority key identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
Certificate issuer:       /CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Certificate serial:       019D31F5DF48668F120F8EC0C54C6F7BAA98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
Manifest number:          06D0
Signing time:             Sat 28 Mar 2026 01:01:30 +0000
Manifest this update:     Sat 28 Mar 2026 01:01:30 +0000
Manifest next update:     Sun 29 Mar 2026 01:01:30 +0000
Files and hashes:         1: 40Y1lMN3zViH3pB4tLLozcTTrls.crl (hash: u3Ui8ZjLDRVV8tN/CnOdY+atMGPxb74D8UARQvxpYrY=)
                          2: Yvzp8k7tse_tqbxpodE5jMc5Rds.roa (hash: XO+F/9KhQMsBIWzLbEjgPyX2zSSbeZO2QWXWRdGBXsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:31:f5:df:48:66:8f:12:0f:8e:c0:c5:4c:6f:7b:aa:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
        Validity
            Not Before: Mar 28 01:01:30 2026 GMT
            Not After : Mar 29 01:01:30 2026 GMT
        Subject: CN=2e7c0ca27f5fc4e50336898506561737f6f45b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:cb:32:cb:9a:ef:1f:eb:e7:41:1a:57:d7:
                    f3:5b:d3:9c:94:6c:39:4b:0a:e1:89:b6:ec:24:8f:
                    f0:84:e6:85:f7:3c:57:56:98:ed:a8:ed:9b:c6:ba:
                    8c:f4:29:a2:e9:40:99:95:e7:19:45:1d:1a:5b:cf:
                    51:b4:ba:b0:ce:38:9d:e5:97:57:81:b0:8f:a9:88:
                    5c:66:c6:a9:d7:8d:43:71:07:80:5b:3f:14:cd:f1:
                    58:25:82:be:85:6d:bd:5a:f5:f8:f1:3a:5d:a2:fc:
                    c6:1e:1d:ac:eb:99:43:a8:73:0a:df:c4:d8:01:42:
                    f9:fb:b9:dc:55:22:40:8b:47:17:b3:09:21:ab:b0:
                    55:d2:17:61:78:18:3c:7f:bc:25:d8:77:68:e4:76:
                    62:9d:08:89:da:71:65:29:90:63:fc:a6:97:d0:f0:
                    be:70:6f:39:ef:ea:ee:45:4a:d6:16:be:1f:60:3d:
                    93:fe:e2:76:81:ab:01:60:cd:92:fc:78:b0:e9:73:
                    dc:5d:f1:94:7d:32:e5:d9:1a:41:fb:c9:de:6f:9a:
                    91:58:ab:5c:a6:3e:f3:47:11:0a:bd:79:2a:66:21:
                    6d:8f:a5:3b:9e:02:e9:2d:0f:40:86:a7:94:58:74:
                    ff:74:7d:a1:5f:00:c1:de:1b:46:47:c0:9e:52:be:
                    0c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7C:0C:A2:7F:5F:C4:E5:03:36:89:85:06:56:17:37:F6:F4:5B:2A
            X509v3 Authority Key Identifier:
                keyid:E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e7:0a:47:b7:bc:e7:a1:b4:9a:86:a5:ea:2d:bb:cf:ac:04:
         6a:6e:b3:aa:cd:42:73:87:f1:96:ea:14:2f:26:c7:0a:be:92:
         4d:51:f9:97:fc:9a:1e:34:4b:6a:89:2f:18:a1:58:d9:ac:ea:
         3f:06:7b:74:60:b9:0d:31:2b:a2:54:99:8c:31:9d:67:33:ae:
         39:ed:6a:83:8d:69:49:6f:ff:57:f1:d2:7a:f7:dd:8a:66:9a:
         4a:62:3d:90:d8:ba:bd:97:dc:14:96:39:95:c2:09:8b:c5:6c:
         da:59:47:03:c3:d0:01:4f:05:9b:be:05:f7:a7:34:0b:4f:d8:
         13:00:b8:aa:46:13:f4:3b:f9:51:45:70:a2:b0:5e:8f:d4:a1:
         f3:d7:4c:96:38:20:d6:8d:d4:81:07:cd:c1:f3:0b:f5:3b:ad:
         c1:31:79:2f:ae:6e:f3:79:69:5c:59:40:cf:65:50:a9:e4:ed:
         b9:a5:94:68:fb:4c:41:b6:98:fc:7f:a5:46:cc:ba:0c:ec:8a:
         38:1d:b4:38:73:d8:17:88:a8:fb:47:b3:36:57:71:e6:86:92:
         f6:9b:da:29:61:44:a6:86:3b:15:7f:36:90:c2:9e:00:88:f4:
         2f:d9:8e:df:01:5b:7c:35:8a:66:c0:13:13:63:bc:f7:dc:6f:
         ab:9d:42:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:13 2026 by rpki-client