Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File:                     40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier:          7QxpGeji6vft9/FP7AB+jj4qhqONHM8smzhaZ3rxgG8=
Subject key identifier:   61:28:C5:72:5A:EF:BE:32:41:D9:AA:DA:88:20:35:8C:72:39:29:66
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer:       /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial:       019E1C106F70DD6A97BD140CA33FEA71800D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number:          1190
Signing time:             Tue 12 May 2026 12:01:39 +0000
Manifest this update:     Tue 12 May 2026 12:01:39 +0000
Manifest next update:     Wed 13 May 2026 12:01:39 +0000
Files and hashes:         1: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: VzxnPOzFeHtHh98ntX+qBTPlk3D84kaiDZ5sE1XV44Q=)
                          2: L_-Xb0Gx3YHqlx1tMQzx2NXADHY.roa (hash: 5dx2j75C/cFqrHYWYHYvkWEXYxWb1XkSbro/7cWI8AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:6f:70:dd:6a:97:bd:14:0c:a3:3f:ea:71:80:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
        Validity
            Not Before: May 12 12:01:39 2026 GMT
            Not After : May 13 12:01:39 2026 GMT
        Subject: CN=6128c5725aefbe3241d9aada8820358c72392966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:69:3d:16:22:6c:f8:b5:c1:01:f1:f6:a7:
                    79:4f:7b:6e:60:ac:1f:87:c0:76:e0:42:88:66:bb:
                    bf:04:ec:f0:17:d0:dd:14:71:c3:dd:82:fd:80:1c:
                    68:ec:d2:50:b6:72:ed:30:85:2d:17:42:e3:99:a0:
                    46:cf:a7:7d:ac:d0:a6:b6:81:51:00:19:e0:21:cf:
                    00:99:87:d1:b9:0d:38:c7:26:c6:17:ef:6e:40:61:
                    a7:70:12:cb:29:02:e5:be:42:dd:6c:23:56:c3:ce:
                    06:ae:97:f1:ea:1e:a5:7e:9d:60:0e:64:dc:ee:4e:
                    d5:fc:3f:6c:8e:ed:89:34:2e:ed:e2:0f:86:82:15:
                    61:82:9e:47:53:e6:fe:56:ac:49:fd:37:6c:a0:2a:
                    63:c1:b8:00:01:c6:58:7d:0b:79:2e:7f:4b:b5:cc:
                    e3:41:dc:42:3c:16:c2:09:c3:46:09:64:75:96:7e:
                    55:f0:11:a8:8f:6d:66:2b:8a:da:f6:d5:4f:6d:7a:
                    30:56:78:71:81:eb:38:ce:c5:95:7e:c1:6c:f8:71:
                    bb:c3:7b:69:5a:8d:8d:8e:f6:41:87:94:ff:46:75:
                    33:de:b1:2b:a2:06:30:0d:93:9b:1a:2c:03:ef:0a:
                    6e:28:6c:06:92:83:dd:3f:11:44:39:12:ec:cf:dc:
                    e4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:28:C5:72:5A:EF:BE:32:41:D9:AA:DA:88:20:35:8C:72:39:29:66
            X509v3 Authority Key Identifier:
                keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:84:fe:02:41:e6:b0:9b:61:4a:59:5a:9e:5a:1c:53:b9:0d:
         fd:cc:56:26:df:fd:c0:17:24:5f:49:1b:bd:a4:14:66:2f:10:
         ff:11:86:37:78:5c:27:89:ad:38:21:0b:bc:79:b2:93:d0:a0:
         20:50:9a:2d:23:44:4e:b7:aa:50:6b:69:f5:d8:83:84:86:eb:
         0f:04:2d:73:77:e3:a9:b3:4c:fc:b1:1e:39:8f:fa:5b:b4:de:
         9b:79:2d:84:c6:2e:06:a6:83:97:93:9c:95:43:16:f5:1a:6e:
         0d:77:72:c7:c6:2e:23:32:8e:02:3a:83:fc:70:29:9a:36:11:
         0d:11:d7:ca:19:28:3f:d7:1e:95:76:cc:83:4b:c1:76:ed:1a:
         54:55:44:91:86:e3:43:20:ab:27:f4:5d:63:46:b0:36:9b:7a:
         8f:9c:4a:61:ee:b0:73:e5:10:f8:a3:ab:64:5b:00:ae:12:e0:
         b2:e8:f1:47:fa:ee:64:ca:19:2d:67:f0:df:9f:e0:ef:69:35:
         83:ed:48:cb:41:94:93:50:6f:d5:bf:6c:64:bc:a8:da:fe:72:
         6e:e3:59:ec:2c:6c:97:53:18:e0:32:8b:6e:86:94:9a:7d:bc:
         1d:2e:90:92:01:f2:48:94:bd:78:f8:ec:cc:c1:af:fc:c6:56:
         78:c5:95:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:26 2026 by rpki-client