Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File:                     C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier:          zB74ZXWPzY+d+a80TfiypqlyLJyhgB10SLWutInphv8=
Subject key identifier:   80:24:27:D9:8A:D2:0A:AF:9E:C4:A1:90:C8:73:2E:90:23:15:6A:31
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer:       /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial:       019E30A8EFFA187157F22AF2B80517AEC65F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number:          1915
Signing time:             Sat 16 May 2026 12:00:38 +0000
Manifest this update:     Sat 16 May 2026 12:00:38 +0000
Manifest next update:     Sun 17 May 2026 12:00:38 +0000
Files and hashes:         1: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: PzH05xqUaBlle2/hplbAezNkJD7P0ma3FTG5A7jcst4=)
                          2: kGE94C9BvEAQkbxYV-NajyFErRQ.roa (hash: +pic/FN6redbOgSewE+hp04FbkYh24EDIPAZdmJ+99s=)
                          3: wctakh6MbZAQ9a6QFbIr94pHwkI.roa (hash: lYT29eFvKjLzub83kniNeffCXgKNHrPpMwyvMGS+Fao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a8:ef:fa:18:71:57:f2:2a:f2:b8:05:17:ae:c6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
        Validity
            Not Before: May 16 12:00:38 2026 GMT
            Not After : May 17 12:00:38 2026 GMT
        Subject: CN=802427d98ad20aaf9ec4a190c8732e9023156a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:d3:b1:24:a0:34:10:25:45:bf:48:3c:5d:
                    ae:e0:82:74:2e:43:69:b9:c3:da:0b:bb:0c:ee:63:
                    f2:2c:af:cd:54:91:65:62:70:9b:98:78:90:c4:20:
                    5f:1b:54:94:e0:10:00:21:66:cb:08:b3:d2:3a:fe:
                    fa:db:cc:8c:47:4e:bb:5d:b6:7d:2c:d1:e6:e4:1d:
                    34:4e:bf:ac:79:d0:4d:d2:97:ed:a4:7f:dd:5f:fa:
                    ff:70:3d:e3:99:05:ee:c1:dc:22:24:89:6f:00:ac:
                    86:5e:1f:f2:3c:ba:7c:39:b9:95:2d:45:1a:b9:d6:
                    66:b7:32:17:f6:ff:f9:c6:c1:13:fa:91:f6:6a:48:
                    3c:16:a2:5f:cd:cf:96:f4:ad:1d:27:19:20:f4:75:
                    3b:73:7c:c5:09:fc:da:28:a6:9c:a1:ee:5d:6e:e8:
                    32:18:db:45:66:66:e6:cb:2a:b9:6d:7f:2a:45:6e:
                    f0:ed:9b:15:42:73:62:9a:ba:99:30:19:bf:f1:99:
                    ed:53:bd:1d:b7:1c:9f:19:f3:18:a7:26:c5:8f:aa:
                    68:d7:8f:e6:9c:12:97:04:2e:18:bd:a1:36:a0:6c:
                    75:31:36:a7:d2:58:c8:7c:ef:ed:d6:21:e8:4b:97:
                    f8:a3:f3:a1:5a:ec:22:41:2c:29:76:ec:dd:ab:17:
                    47:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:24:27:D9:8A:D2:0A:AF:9E:C4:A1:90:C8:73:2E:90:23:15:6A:31
            X509v3 Authority Key Identifier:
                keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:33:b4:06:1f:55:b9:87:89:f4:29:ad:e6:03:63:2f:aa:38:
         1e:b9:a6:11:71:ac:bf:b5:89:14:16:8e:f2:55:51:fa:39:3a:
         73:16:7c:61:21:df:9b:b7:49:71:e6:86:0e:04:2f:8d:c6:a4:
         75:00:9d:67:da:db:76:27:e2:11:9f:c4:a6:b1:18:65:c4:fa:
         4c:91:4e:94:1b:14:67:4b:5d:f8:d1:25:8d:0b:e1:d8:44:41:
         b5:2d:4b:a7:a4:86:a9:44:45:39:69:45:c4:d3:34:60:ac:f5:
         7e:16:75:c1:5f:20:c6:35:f6:ae:87:09:39:ae:55:84:d8:49:
         78:52:43:73:1d:66:aa:92:2d:a4:3b:07:a4:70:3b:55:1d:16:
         0c:97:fc:be:cb:f2:5b:04:7e:c5:e6:5c:1e:30:d8:4e:6c:18:
         22:3d:3e:b7:03:66:36:d5:58:61:7e:d4:e1:ed:e0:c6:1c:b2:
         1f:0d:aa:16:42:45:e2:b1:d6:59:07:9a:ac:f9:84:a4:54:4f:
         da:8a:41:c9:4f:a2:47:df:a3:6d:04:04:3f:d4:f9:ca:6b:45:
         57:94:bb:bf:91:74:49:7c:18:28:47:68:23:ed:b6:ff:d5:d9:
         33:ff:6a:f3:50:58:2d:be:d4:2c:fa:4e:21:2b:de:d3:52:9e:
         3c:dd:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:27:05 2026 by rpki-client