Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File:                     40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier:          gl/r9p8YUNF/UcAii6TLKufQG3qLtqE+19BFpHFpLBY=
Subject key identifier:   78:AB:E3:ED:23:40:EB:9D:09:0F:BC:7D:40:1F:27:F8:DF:B9:9A:A9
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer:       /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial:       01A00093146599DE6DC7A12EE634CBD1BF67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number:          19FF
Signing time:             Fri 14 Aug 2026 14:00:34 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:34 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:34 +0000
Files and hashes:         1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: g96TV413U9jW9mygliAH7EqbUmMpaSbD1yZsQO6c/mg=)
                          2: fTOZ6bwIEmD97JXBK2cTtsKp-dQ.roa (hash: ydQrbbkIB0mroPHTm9Ff78/w6YQRKyZSWJF5ki0jYCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:14:65:99:de:6d:c7:a1:2e:e6:34:cb:d1:bf:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
        Validity
            Not Before: Aug 14 14:00:34 2026 GMT
            Not After : Aug 15 14:00:34 2026 GMT
        Subject: CN=78abe3ed2340eb9d090fbc7d401f27f8dfb99aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:de:74:fe:65:3f:10:9d:c8:e7:35:57:cd:bc:
                    61:b8:ea:03:66:4b:9d:e6:92:02:97:74:4c:c4:f2:
                    77:18:e2:b7:70:b5:a7:be:d8:e4:0f:f7:59:53:62:
                    63:2b:03:d0:c3:94:c6:24:6f:a0:49:5e:95:ff:d1:
                    96:4f:d1:f8:5a:2f:6f:b2:47:ff:f2:17:cf:73:41:
                    f1:af:91:5c:da:64:18:4d:94:bf:69:a2:bb:34:79:
                    00:a2:22:bb:1f:ba:f9:67:cb:37:ca:86:1f:03:8b:
                    34:0c:f8:8b:9c:24:f1:9f:b5:08:bc:b9:83:09:5a:
                    ab:3e:82:50:ae:78:1b:b6:a1:48:6c:9e:83:da:d6:
                    14:39:26:b7:28:38:29:2d:bd:58:4a:3b:ab:86:44:
                    de:6d:97:d2:06:e0:8e:44:78:b2:cc:1a:10:f3:c0:
                    fc:60:7a:77:33:07:36:d2:cc:69:dd:df:b6:23:8b:
                    f5:4c:e4:09:d1:22:b3:3b:62:2b:e3:bb:38:9e:dd:
                    b9:15:65:d2:0b:45:ae:5c:1f:34:ca:d0:ef:a4:64:
                    f8:51:b6:6a:13:1b:f5:32:97:de:7e:a0:4e:e5:98:
                    3a:57:09:ab:e4:b9:83:5a:8e:85:f9:4a:9c:78:2d:
                    93:a6:b2:3c:c0:00:8e:3f:b8:5c:39:e1:d1:0e:64:
                    05:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AB:E3:ED:23:40:EB:9D:09:0F:BC:7D:40:1F:27:F8:DF:B9:9A:A9
            X509v3 Authority Key Identifier:
                keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0f:c3:20:e9:88:88:71:e2:fe:8d:bc:28:e8:3e:b1:32:15:
         1c:dd:a0:f0:9b:74:c5:8c:f8:a3:b9:c4:cf:8b:d5:7c:64:9e:
         99:af:b9:d9:71:6b:76:71:17:b6:3a:7c:40:2c:60:fe:b6:06:
         86:6b:8d:8b:35:f4:7a:58:de:00:ea:cf:01:1a:14:13:72:14:
         2f:c1:b9:e4:06:ca:00:90:05:78:54:ba:1e:c1:76:ef:48:5a:
         e3:c2:41:50:64:04:14:eb:83:64:45:ee:86:2e:71:d8:15:26:
         38:62:a9:94:61:ef:f2:f0:58:97:13:4e:a1:f4:b4:fd:da:86:
         b8:ce:a4:63:31:0b:5d:df:1f:20:ac:e6:23:2e:ab:db:dc:0d:
         05:7a:34:7d:7a:5b:84:85:04:50:a6:65:1c:38:77:a6:4c:1d:
         86:27:87:d9:6e:d8:f8:87:e4:6e:ef:4a:75:76:b0:87:9e:e5:
         5f:54:02:31:ea:b1:84:19:14:9e:b9:fb:56:c5:2f:2d:db:6a:
         a6:64:58:e2:24:73:d8:18:7e:95:1b:36:e7:d6:b8:b0:b3:90:
         31:dc:d3:e6:dc:84:8a:11:e5:fb:52:0d:62:c6:23:d3:7b:7c:
         53:e5:a6:63:66:a5:1d:0f:43:f0:c7:50:76:4e:ce:03:b6:69:
         ee:05:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:55 2026 by rpki-client