Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
File:                     40HGEPYYEikNrK1gvG0QHWPAjmU.mft (raw, json)
Hash identifier:          A1u8BcleKPsmIs/Qsp5f3dPtCWI67vhMUUXiJftSsm8=
Subject key identifier:   1B:E3:DA:5C:1B:9A:7A:C6:58:19:F7:95:B8:52:AE:6C:90:AF:7F:1B
Authority key identifier: E3:41:C6:10:F6:18:12:29:0D:AC:AD:60:BC:6D:10:1D:63:C0:8E:65
Certificate issuer:       /CN=e341c610f61812290dacad60bc6d101d63c08e65
Certificate serial:       019F8F10416C3C09C9AB8327CB9C562BB311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
Manifest number:          013F
Signing time:             Thu 23 Jul 2026 13:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:34 +0000
Files and hashes:         1: 40HGEPYYEikNrK1gvG0QHWPAjmU.crl (hash: NBrmaSQ4//fKCfzmDXFbh+Ep8gJjVoTHv2IBnmClxBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:41:6c:3c:09:c9:ab:83:27:cb:9c:56:2b:b3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e341c610f61812290dacad60bc6d101d63c08e65
        Validity
            Not Before: Jul 23 13:00:34 2026 GMT
            Not After : Jul 24 13:00:34 2026 GMT
        Subject: CN=1be3da5c1b9a7ac65819f795b852ae6c90af7f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:61:d8:a5:7d:86:83:c5:7a:d0:47:50:cb:
                    ef:5a:24:d0:46:82:41:b8:fa:7a:68:52:6f:9d:ec:
                    35:43:7d:fd:30:87:26:9c:a7:01:ae:43:01:38:8b:
                    24:4d:d5:36:ea:4b:3b:c6:16:e8:b2:a6:95:a0:1d:
                    2c:9b:84:e1:b8:d6:e6:52:b7:b3:b1:29:21:19:e3:
                    f6:b4:6c:30:cf:b7:6c:cc:60:94:41:5d:9b:98:7c:
                    28:fd:26:30:57:2d:e2:79:0d:6d:fe:37:24:e9:43:
                    60:68:e2:8c:5b:d2:e5:e4:41:91:2a:d4:c6:d1:b0:
                    d4:16:65:4b:18:5f:81:00:32:59:98:a8:70:11:6a:
                    7b:d3:21:33:ad:3f:b7:74:6b:e8:d8:8a:ae:ec:8a:
                    f8:e7:92:d4:e5:8c:8a:23:30:d6:a1:35:f4:4c:9a:
                    d1:35:99:7c:52:7b:a7:e3:c8:a5:45:4c:92:7f:ff:
                    c6:19:53:54:ad:7a:c5:b0:a5:63:5b:46:0f:d9:2d:
                    6c:6d:20:d0:62:47:b9:20:32:df:6d:47:3c:8d:fd:
                    97:bc:22:3f:56:da:af:9c:ae:39:1f:06:db:d0:d1:
                    02:5d:c0:54:29:06:bf:6c:e7:de:5d:8a:98:c6:11:
                    ee:f7:ee:54:e6:01:65:69:24:c7:dd:48:59:4f:74:
                    50:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E3:DA:5C:1B:9A:7A:C6:58:19:F7:95:B8:52:AE:6C:90:AF:7F:1B
            X509v3 Authority Key Identifier:
                keyid:E3:41:C6:10:F6:18:12:29:0D:AC:AD:60:BC:6D:10:1D:63:C0:8E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:43:66:f1:2f:5e:dc:d1:20:7f:25:c5:79:f0:c9:28:44:45:
         33:13:82:45:22:eb:e6:72:52:37:a6:38:01:22:e5:30:a3:7c:
         ae:62:6b:03:43:19:07:37:37:b1:15:36:e0:20:b6:26:5b:04:
         04:54:e2:3d:05:c5:65:d4:b9:1e:4f:0c:4e:9d:f9:1d:c9:23:
         67:90:be:15:f2:42:2c:71:cc:19:57:13:e5:d2:9c:f9:d8:77:
         29:9c:a3:0a:5a:69:3c:16:92:13:67:58:17:81:c4:29:9e:0a:
         42:1d:2a:4a:c2:82:c8:d3:b0:6a:d4:0c:d8:89:e0:42:53:2b:
         7c:b7:7a:20:2f:f8:1a:bc:a9:01:bc:74:4e:b6:c8:25:65:54:
         0b:b9:4a:d8:12:ac:e8:81:6e:ab:32:39:d3:24:0f:16:37:2a:
         88:12:42:6d:4a:91:96:27:04:68:9d:94:29:97:89:3b:7e:26:
         82:8b:5b:52:ce:3b:e7:16:c4:71:6a:51:bc:74:97:2a:d1:8c:
         dd:1e:b6:59:10:ae:12:17:ff:02:be:96:fa:92:9b:9e:d2:51:
         7b:e3:07:30:11:e6:e7:a0:e7:58:d7:bc:5c:09:fe:f3:62:d1:
         5c:a9:01:10:0f:d8:a9:21:e9:d8:8e:0c:6d:29:db:b1:24:8d:
         0d:32:70:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:57:09 2026 by rpki-client