Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
File:                     40HGEPYYEikNrK1gvG0QHWPAjmU.mft (raw, json)
Hash identifier:          X2z+5y/9/2OXRNV4B3cpZSuraCNJPPNju87FX6rUTl8=
Subject key identifier:   4C:99:49:70:05:C9:F5:A1:C2:EA:2E:C4:97:FF:F0:92:84:D7:F7:1D
Authority key identifier: E3:41:C6:10:F6:18:12:29:0D:AC:AD:60:BC:6D:10:1D:63:C0:8E:65
Certificate issuer:       /CN=e341c610f61812290dacad60bc6d101d63c08e65
Certificate serial:       01A040BC77120391BB47652BBA9661320795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
Manifest number:          019B
Signing time:             Thu 27 Aug 2026 01:01:28 +0000
Manifest this update:     Thu 27 Aug 2026 01:01:28 +0000
Manifest next update:     Fri 28 Aug 2026 01:01:28 +0000
Files and hashes:         1: 40HGEPYYEikNrK1gvG0QHWPAjmU.crl (hash: 7s1NZAfE3huq89SRskKTRgQPDu/khykZC8DcuN2BIsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bc:77:12:03:91:bb:47:65:2b:ba:96:61:32:07:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e341c610f61812290dacad60bc6d101d63c08e65
        Validity
            Not Before: Aug 27 01:01:28 2026 GMT
            Not After : Aug 28 01:01:28 2026 GMT
        Subject: CN=4c99497005c9f5a1c2ea2ec497fff09284d7f71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:4f:1a:96:c9:5d:a3:b2:cd:0a:8f:aa:56:
                    77:74:42:aa:37:b1:2f:67:30:a1:aa:bd:1c:17:64:
                    d9:bb:83:73:32:e3:eb:29:7e:b6:6b:cc:9f:94:e2:
                    6a:08:e3:bd:0d:79:c9:48:4b:cd:4d:9b:61:19:c5:
                    8c:cd:bb:17:d6:35:09:67:56:33:01:23:4f:b9:41:
                    1d:cf:ec:0d:32:d2:37:d2:25:b0:68:70:10:ea:25:
                    ba:d1:1c:7c:d3:c7:6f:b2:57:44:99:a5:a6:ef:45:
                    f8:b2:49:ac:8a:c5:83:55:3a:b6:53:f2:64:07:f4:
                    08:6c:93:a8:40:e4:f1:10:8b:13:d0:da:03:24:98:
                    e3:c0:49:20:ec:6d:78:e7:17:f0:c1:4b:f5:4b:ad:
                    91:4f:84:56:ea:3d:40:b4:d8:fa:68:82:e0:93:08:
                    b6:80:84:1c:03:b7:b5:77:88:fe:ca:18:54:75:23:
                    d5:ed:62:a5:ad:2e:58:82:e1:e5:f3:b9:d2:dc:5e:
                    f8:2a:ce:fa:f9:4e:b6:aa:9e:cb:f1:8c:04:fe:be:
                    ce:df:a2:e4:c8:66:30:01:3d:a4:7b:f4:1b:76:b4:
                    5c:09:b8:46:d9:17:72:c8:3a:e6:35:f2:00:d5:2b:
                    95:2c:6a:a4:d7:6d:c3:e5:e3:92:6d:63:c9:b1:39:
                    1e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:99:49:70:05:C9:F5:A1:C2:EA:2E:C4:97:FF:F0:92:84:D7:F7:1D
            X509v3 Authority Key Identifier:
                keyid:E3:41:C6:10:F6:18:12:29:0D:AC:AD:60:BC:6D:10:1D:63:C0:8E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3c:bd:42:47:9e:be:4e:15:1c:de:e6:1b:f0:8d:11:bd:14:
         95:b3:44:ad:2c:12:0e:6c:3c:bd:f6:79:44:22:6e:83:92:d3:
         33:6b:0a:50:5b:4f:06:b1:e0:ce:e1:91:2c:9a:a2:33:4e:e6:
         52:44:38:59:80:a6:4c:62:26:08:b0:da:0b:78:63:cc:43:7e:
         eb:96:09:7f:86:c2:bc:53:ac:ce:45:09:fe:03:c7:98:21:fd:
         96:1c:13:60:1f:a6:41:bf:8c:dc:0b:e5:7c:80:37:91:42:27:
         b2:a8:ef:29:38:97:d2:05:33:aa:57:de:1b:86:38:09:86:6e:
         00:89:fc:f9:20:4d:42:35:83:40:08:b9:f7:57:61:93:1e:58:
         e3:e4:4b:fb:e6:89:6c:7d:9f:96:57:0c:a2:76:e9:26:b9:b6:
         65:3d:b3:03:d8:ac:6c:30:7a:ab:28:df:e1:66:98:65:28:5a:
         09:1b:ee:41:e9:06:dd:ef:1c:8c:15:7e:00:62:0b:a1:4d:81:
         9e:e5:1c:65:e3:99:75:9a:e5:73:4b:39:6d:3a:e1:ee:36:7c:
         0e:80:b7:ff:bd:fe:25:a3:ac:d2:94:c7:b0:e5:ec:21:9c:80:
         ca:cd:06:0f:5c:11:51:90:e7:97:ee:44:b1:1a:d4:fe:4b:86:
         df:18:95:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAvHcSA5G7R2UrupZhMgeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNDFjNjEwZjYxODEyMjkwZGFjYWQ2MGJjNmQxMDFkNjNj
MDhlNjUwHhcNMjYwODI3MDEwMTI4WhcNMjYwODI4MDEwMTI4WjAzMTEwLwYDVQQD
Eyg0Yzk5NDk3MDA1YzlmNWExYzJlYTJlYzQ5N2ZmZjA5Mjg0ZDdmNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp59PGpbJXaOyzQqPqlZ3dEKqN7Ev
ZzChqr0cF2TZu4NzMuPrKX62a8yflOJqCOO9DXnJSEvNTZthGcWMzbsX1jUJZ1Yz
ASNPuUEdz+wNMtI30iWwaHAQ6iW60Rx808dvsldEmaWm70X4skmsisWDVTq2U/Jk
B/QIbJOoQOTxEIsT0NoDJJjjwEkg7G145xfwwUv1S62RT4RW6j1AtNj6aILgkwi2
gIQcA7e1d4j+yhhUdSPV7WKlrS5YguHl87nS3F74Ks76+U62qp7L8YwE/r7O36Lk
yGYwAT2ke/QbdrRcCbhG2RdyyDrmNfIA1SuVLGqk123D5eOSbWPJsTkeqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyZSXAFyfWhwuouxJf/8JKE1/cdMB8GA1UdIwQY
MBaAFONBxhD2GBIpDaytYLxtEB1jwI5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDBIR0VQWVlFaWtOcksxZ3ZHMFFIV1BBam1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNjNlZTAtNTdhNC00NTk4LTkwZWQt
ZmViNzNjZDNkMTg1LzEvNDBIR0VQWVlFaWtOcksxZ3ZHMFFIV1BBam1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kNjNlZTAtNTdhNC00NTk4LTkwZWQtZmViNzNjZDNkMTg1
LzEvNDBIR0VQWVlFaWtOcksxZ3ZHMFFIV1BBam1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDy9Qkee
vk4VHN7mG/CNEb0UlbNErSwSDmw8vfZ5RCJug5LTM2sKUFtPBrHgzuGRLJqiM07m
UkQ4WYCmTGImCLDaC3hjzEN+65YJf4bCvFOszkUJ/gPHmCH9lhwTYB+mQb+M3Avl
fIA3kUInsqjvKTiX0gUzqlfeG4Y4CYZuAIn8+SBNQjWDQAi591dhkx5Y4+RL++aJ
bH2fllcMonbpJrm2ZT2zA9isbDB6qyjf4WaYZShaCRvuQekG3e8cjBV+AGILoU2B
nuUcZeOZdZrlc0s5bTrh7jZ8DoC3/73+JaOs0pTHsOXsIZyAys0GD1wRUZDnl+5E
sRrU/kuG3xiV5Q==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:36:45 2026 by rpki-client