Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
File:                     40B5208BE500E368704ABCF5103C6E71ED3633EE.mft (raw, json)
Hash identifier:          znY0yNmWcrViY30KEpUcdbRIjx30AhVhFYLbzt7WYrs=
Subject key identifier:   ED:4E:9D:0E:BD:B2:6E:FB:5D:D1:63:D5:EC:70:B4:BA:BD:E1:31:BF
Authority key identifier: 40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
Certificate issuer:       /CN=40b5208be500e368704abcf5103c6e71ed3633ee
Certificate serial:       74B01CBB2C1AFC537238EFD493115B4B8F1A8FEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
Manifest number:          0694
Signing time:             Thu 24 Sep 2026 05:14:21 +0000
Manifest this update:     Thu 24 Sep 2026 05:09:21 +0000
Manifest next update:     Fri 25 Sep 2026 06:51:21 +0000
Files and hashes:         1: 40B5208BE500E368704ABCF5103C6E71ED3633EE.crl (hash: IumrEbkzP/3MIGmSu9syvb9HX+k2VzWJ2E2fe+KVBz8=)
                          2: AS199518.asa (hash: hznEb1n74Lzeb6/+cOs6BR+UZzQbqQszEUckTSKxpzE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b0:1c:bb:2c:1a:fc:53:72:38:ef:d4:93:11:5b:4b:8f:1a:8f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b5208be500e368704abcf5103c6e71ed3633ee
        Validity
            Not Before: Sep 24 05:09:21 2026 GMT
            Not After : Sep 25 06:51:21 2026 GMT
        Subject: CN=ED4E9D0EBDB26EFB5DD163D5EC70B4BABDE131BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:8b:dd:3c:6c:45:83:97:6e:c3:75:b8:23:
                    32:4d:71:0a:7c:52:35:8f:21:d3:f0:b2:10:f0:ff:
                    9e:a3:3a:b4:6e:ef:83:9a:15:9f:e7:12:c7:eb:15:
                    77:46:81:19:3e:0b:f1:24:32:c6:87:e2:a8:8b:22:
                    29:f5:bd:b5:73:91:7d:64:e7:cf:c3:21:82:2a:7e:
                    3b:a7:3b:66:14:0f:05:ad:28:d3:f4:ca:06:e8:d2:
                    20:1d:37:a0:fb:be:3a:ee:0e:83:c8:23:17:65:b0:
                    97:00:e7:2f:77:0d:68:91:49:3c:ec:00:9d:0d:2d:
                    12:e2:12:d7:24:45:c4:73:6d:54:28:0f:08:c6:d0:
                    a1:4b:d8:2d:24:60:11:2e:15:66:d6:bb:0c:c8:62:
                    67:00:66:8d:02:ce:fc:ea:f4:18:8c:2f:f6:c2:88:
                    07:16:ab:0f:5e:e3:9d:c7:f8:dd:67:98:2c:53:20:
                    cf:3c:95:c4:ea:21:9d:91:da:1f:86:9d:ef:a9:6d:
                    c6:5e:83:58:fa:79:8b:79:13:81:e3:ee:69:10:58:
                    5c:fb:60:5b:ed:30:3e:e1:da:51:2d:d3:4f:9e:8c:
                    ac:97:5e:f3:1f:24:9c:f2:d5:7c:24:fb:9b:49:71:
                    a8:a9:a4:cb:f8:17:a1:44:88:7a:87:a3:f3:94:f6:
                    4c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4E:9D:0E:BD:B2:6E:FB:5D:D1:63:D5:EC:70:B4:BA:BD:E1:31:BF
            X509v3 Authority Key Identifier:
                keyid:40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d6:64:4c:8f:74:a0:4b:67:a9:63:d0:e2:ce:c8:49:fa:81:
         17:4a:a0:1d:b9:f3:88:8e:8f:dc:bb:87:43:b1:1a:12:5b:e8:
         fd:84:4d:04:62:99:ff:f0:dd:b0:50:a4:3a:2e:d9:63:62:92:
         f3:fa:a6:10:6c:d1:9f:08:fe:42:e3:8c:b1:34:e2:4e:f4:ea:
         85:17:a5:f3:e5:30:9d:f6:99:3a:c6:01:f4:ad:21:f8:09:86:
         4c:82:65:75:47:d8:86:58:17:51:be:e1:73:06:00:5a:9d:b2:
         cb:2c:b7:07:35:aa:eb:cb:a2:ad:08:b7:c8:7e:81:28:71:4d:
         b0:d4:0d:d3:95:e2:65:7e:f1:b3:9f:06:ab:71:e2:06:5c:db:
         11:e8:f8:95:5a:fe:cd:c8:d5:e1:d4:ae:2b:0f:15:1f:52:6c:
         b5:d9:ae:b2:d4:9a:90:16:55:51:3e:04:27:4d:df:55:e8:ae:
         c2:bc:bc:f5:fb:8f:52:8f:2d:91:ff:d7:90:ac:11:37:0e:79:
         95:83:68:2a:40:00:34:fa:75:9d:3a:23:f8:e7:1f:9c:c2:21:
         14:43:06:47:0c:2b:68:3c:d1:69:96:00:c2:74:0a:df:90:49:
         79:be:ac:78:dd:47:2e:a0:e6:a8:3e:cb:82:e6:c6:50:b2:16:
         72:98:cf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:39:30 2026 by rpki-client