Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File:                     40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier:          hyacvmKE4qBt8qaPzJCD7MaVzb+EhiqO7ZXjfHO7OeQ=
Subject key identifier:   C6:12:18:56:CF:32:7B:E7:A1:DF:D0:E4:EC:2E:38:51:4C:12:E5:D9
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer:       /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial:       01A0CB90CB0850B4CC80870321BB2C8B334E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number:          12F4
Signing time:             Wed 23 Sep 2026 00:00:58 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:58 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:58 +0000
Files and hashes:         1: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: quidojQWbqc55qaN/8s+Zp4VQIU0kxeS+WecwuT713M=)
                          2: L_-Xb0Gx3YHqlx1tMQzx2NXADHY.roa (hash: 5dx2j75C/cFqrHYWYHYvkWEXYxWb1XkSbro/7cWI8AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:cb:08:50:b4:cc:80:87:03:21:bb:2c:8b:33:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
        Validity
            Not Before: Sep 23 00:00:58 2026 GMT
            Not After : Sep 24 00:00:58 2026 GMT
        Subject: CN=c6121856cf327be7a1dfd0e4ec2e38514c12e5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3d:28:de:a3:20:6f:7f:91:b5:05:52:f4:1d:
                    20:0d:10:c1:0f:f6:03:f6:e7:2c:08:53:36:de:36:
                    0e:89:a4:37:41:85:3f:6c:4a:86:cd:45:ef:82:c3:
                    0a:e6:93:f3:80:3f:8d:b0:4b:87:52:0d:94:34:62:
                    d5:e2:89:2a:ec:3c:96:cd:ad:b7:e3:cb:2c:c1:99:
                    e9:1d:1f:60:75:02:e6:49:39:23:09:a6:2f:60:8b:
                    68:7c:cb:9e:49:69:11:5f:0f:a8:ef:9f:0f:30:99:
                    ab:9b:17:82:07:09:f6:dd:c1:88:a5:6a:70:74:7b:
                    45:88:ef:ca:03:9a:91:7c:8b:8e:f2:67:e9:35:d0:
                    df:b2:d3:db:fd:e1:e7:7f:d7:82:b2:68:11:4a:3c:
                    e0:ef:60:e4:e6:f4:c3:82:a4:01:46:79:c9:8d:ef:
                    8f:5e:38:bd:27:b3:27:84:bf:66:38:5f:cb:3c:64:
                    64:5d:10:6b:e3:00:0f:10:05:43:b3:32:3e:21:72:
                    9e:43:8b:f0:e7:48:a6:1b:06:d4:93:2b:3c:76:2a:
                    0d:16:39:24:b1:da:88:41:d6:43:f1:a7:b2:0f:b7:
                    02:63:8d:95:19:f0:b1:d7:a3:e4:4a:39:73:bc:14:
                    49:f7:3c:18:2c:0b:72:8a:bf:8c:ad:35:f2:29:1b:
                    6c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:12:18:56:CF:32:7B:E7:A1:DF:D0:E4:EC:2E:38:51:4C:12:E5:D9
            X509v3 Authority Key Identifier:
                keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:19:0e:68:80:43:7e:70:ec:20:d4:3c:37:17:7a:33:49:78:
         57:c3:d8:34:3d:63:96:57:bf:1b:a7:20:1b:25:15:14:6b:c8:
         d2:87:36:c7:9b:ba:d1:b5:a3:a7:45:1f:72:d7:34:ae:9f:cc:
         f5:31:48:f1:ff:cc:01:d5:02:23:13:a9:7f:40:79:cd:bd:29:
         30:72:58:da:b1:9c:6c:b1:2e:aa:95:e0:4b:5a:9d:8f:92:b2:
         79:e9:02:fb:91:aa:e1:38:8b:40:9c:2f:8e:e6:ab:7a:8e:f0:
         4d:08:71:81:ef:99:09:3e:49:47:3b:be:fd:19:72:f6:f9:5a:
         cd:f8:bf:40:08:bc:f8:10:36:82:35:c7:e1:ba:30:f8:a5:b7:
         65:33:7c:5f:49:90:f6:d7:89:35:3f:70:80:e0:15:b2:ca:d7:
         8a:a8:dc:a4:3c:e3:e2:ad:0c:c3:ef:2a:d6:ca:79:a9:ad:5f:
         b4:f8:15:92:da:b5:ea:82:34:be:90:ca:23:75:9b:09:e9:d0:
         84:84:4e:1c:63:7e:81:ab:62:de:6e:52:2c:b8:66:2f:77:48:
         c9:a3:7d:91:70:72:51:e7:6d:5a:fd:2a:cf:02:11:d0:61:fd:
         bc:a8:18:ee:55:a3:f2:d6:f3:30:6a:c5:c5:6d:3c:60:8b:18:
         64:74:76:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:01:13 2026 by rpki-client