Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
File:                     40HGEPYYEikNrK1gvG0QHWPAjmU.mft (raw, json)
Hash identifier:          P8sSNIPeriDbRp0n8n0iJgMALHPG++O+k48pI04vBCQ=
Subject key identifier:   6A:61:68:A4:8D:6B:EA:92:9D:3E:F5:85:50:4F:45:E2:6D:B8:3A:C6
Authority key identifier: E3:41:C6:10:F6:18:12:29:0D:AC:AD:60:BC:6D:10:1D:63:C0:8E:65
Certificate issuer:       /CN=e341c610f61812290dacad60bc6d101d63c08e65
Certificate serial:       019E1C46DEA8A7FA5EB91A972A253297B056
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
Manifest number:          7F
Signing time:             Tue 12 May 2026 13:01:06 +0000
Manifest this update:     Tue 12 May 2026 13:01:06 +0000
Manifest next update:     Wed 13 May 2026 13:01:06 +0000
Files and hashes:         1: 40HGEPYYEikNrK1gvG0QHWPAjmU.crl (hash: WMEzjAB6QE2B1cpl269y/cdup5ksPwM2g4LlqS7JE4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:de:a8:a7:fa:5e:b9:1a:97:2a:25:32:97:b0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e341c610f61812290dacad60bc6d101d63c08e65
        Validity
            Not Before: May 12 13:01:06 2026 GMT
            Not After : May 13 13:01:06 2026 GMT
        Subject: CN=6a6168a48d6bea929d3ef585504f45e26db83ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:e3:8f:b0:fe:6b:76:f1:f3:33:a5:38:35:
                    db:10:0f:0b:e1:78:e4:38:e2:8a:37:69:42:fd:b8:
                    17:5f:4e:ee:f8:79:ed:de:a5:b1:76:07:67:d0:cc:
                    de:5c:ab:4b:39:65:47:de:45:d8:53:14:e8:e7:b4:
                    2b:b5:0a:ec:fe:61:4c:fc:a1:b1:6d:18:96:d0:c0:
                    62:e4:f6:8d:2b:68:b0:37:0d:17:5f:04:5c:66:a2:
                    59:6d:58:e8:08:e4:8b:94:22:ef:fa:0e:56:4a:ed:
                    d7:42:1f:a3:c1:80:07:c0:05:cc:0c:de:8c:25:7a:
                    37:de:f2:39:32:8b:2e:54:8d:b1:a1:68:ad:52:f7:
                    ff:43:30:36:24:4f:ca:cb:eb:92:65:ad:24:4d:0f:
                    75:55:45:21:79:58:4e:96:19:d7:c1:2b:5b:ec:fe:
                    b9:22:9b:0f:24:9e:56:dc:cd:ad:21:ec:2c:59:d6:
                    ee:e9:7b:66:79:4c:3a:28:99:1e:a9:40:4b:db:79:
                    5f:22:3d:97:70:68:9f:59:12:c6:8b:c8:16:fb:e2:
                    55:dc:35:70:09:d3:70:12:9b:78:90:ca:08:b0:9f:
                    b0:bf:55:e0:0d:94:a0:ac:21:a2:fd:47:8d:fb:99:
                    5c:ea:47:ac:da:a8:2f:97:3c:45:2e:ee:8b:1e:c9:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:61:68:A4:8D:6B:EA:92:9D:3E:F5:85:50:4F:45:E2:6D:B8:3A:C6
            X509v3 Authority Key Identifier:
                keyid:E3:41:C6:10:F6:18:12:29:0D:AC:AD:60:BC:6D:10:1D:63:C0:8E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:21:d2:fd:a5:be:1c:0e:b1:d3:02:ac:e4:c7:45:0a:a2:2c:
         8f:e0:dc:6b:ab:84:15:3d:b7:2c:0a:9a:0f:f7:2d:1f:5c:03:
         3f:6e:94:73:e0:0c:29:67:a3:ea:00:39:dc:45:7c:60:9a:22:
         84:ce:29:9c:3f:a8:66:89:8e:c9:d4:bb:55:c5:68:03:24:0d:
         00:c2:0f:d1:30:85:a0:97:01:7f:41:2d:fd:2d:c7:cc:a3:cf:
         a7:4b:ba:d2:b2:42:9e:50:6f:a6:0b:61:09:99:ea:71:21:19:
         fe:81:fc:55:e0:1b:d2:ea:f0:a3:4a:c4:6a:c9:7b:ed:60:71:
         1e:e2:ff:7e:9c:3b:bb:bb:37:a8:1a:bc:d4:81:32:67:e4:6d:
         b8:e8:88:93:36:c7:ea:80:63:5a:b9:92:f8:d0:3b:45:8d:a0:
         79:b3:33:59:f2:af:87:c2:4d:a9:7e:1e:42:54:fb:c7:5a:8c:
         f5:e4:e4:0f:30:7f:29:9a:f8:a6:9f:bf:d7:3b:46:cc:9f:df:
         6f:c5:46:17:80:70:22:e9:df:3c:2b:98:b4:c1:92:7e:01:b7:
         f2:3d:50:60:b1:33:88:4e:a4:fa:44:30:47:dc:41:71:ac:5f:
         ea:6d:89:8d:f0:40:9b:49:6c:d3:76:10:4e:a4:75:fe:84:46:
         01:b6:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:17 2026 by rpki-client