Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File:                     40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier:          j1DSK0irZauKGabOXY719KE5kCWWPbPfj52Fd3SKap4=
Subject key identifier:   0C:46:5C:8F:36:57:A7:E5:14:15:92:91:C7:8A:F3:3D:ED:94:0C:94
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer:       /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial:       019F190D22000F0B00C0D24B67D85604595A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number:          1213
Signing time:             Tue 30 Jun 2026 15:01:58 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:58 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:58 +0000
Files and hashes:         1: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: 03jDD8Fthc1tBUafs6hLCreoQ0BKrlZYTuJ5uayQctg=)
                          2: L_-Xb0Gx3YHqlx1tMQzx2NXADHY.roa (hash: 5dx2j75C/cFqrHYWYHYvkWEXYxWb1XkSbro/7cWI8AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0d:22:00:0f:0b:00:c0:d2:4b:67:d8:56:04:59:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
        Validity
            Not Before: Jun 30 15:01:58 2026 GMT
            Not After : Jul  1 15:01:58 2026 GMT
        Subject: CN=0c465c8f3657a7e514159291c78af33ded940c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:52:73:f7:e2:26:d5:59:74:f4:93:d2:4a:1d:
                    6b:2c:e8:26:42:c5:ce:c1:5a:5a:55:25:d0:e7:18:
                    71:76:a5:df:8e:d4:95:d7:62:f9:fa:da:31:a8:fc:
                    55:27:3a:cd:4b:c8:be:78:f7:89:0d:a7:73:d3:d2:
                    ed:71:ba:b7:b5:e6:dc:ea:d0:43:4d:0f:49:5d:18:
                    82:85:65:0b:f0:87:52:7d:81:c4:5f:80:93:6c:c1:
                    18:5d:71:0d:ea:a1:08:57:a9:04:30:30:86:6b:d8:
                    cd:eb:c4:fe:f3:29:91:22:5b:4d:48:5d:90:20:59:
                    0e:4c:93:71:24:4b:74:39:16:fa:03:55:a5:64:17:
                    fc:93:ea:61:1c:bc:32:fd:66:af:cf:00:d0:bc:e3:
                    a8:26:bc:3c:a2:88:30:ff:73:2c:b0:4c:b1:64:75:
                    11:98:43:89:d7:e3:92:a7:3e:82:6b:8c:53:cd:b4:
                    ad:52:e8:2c:a3:b9:80:38:81:0d:80:1c:95:1a:49:
                    95:13:a0:ef:5b:40:ad:07:f3:02:5b:44:6c:0f:25:
                    22:29:67:e9:9c:09:54:2c:ef:12:0d:89:b4:d3:0e:
                    cf:9b:c8:4e:0a:3a:c5:77:37:e0:56:52:1f:9e:72:
                    2c:71:0f:da:6b:14:c9:cf:5f:53:1c:2c:e3:a0:ce:
                    f1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:46:5C:8F:36:57:A7:E5:14:15:92:91:C7:8A:F3:3D:ED:94:0C:94
            X509v3 Authority Key Identifier:
                keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:87:ef:ed:d7:58:a9:4d:5c:94:ba:a8:98:d0:8e:3a:3e:62:
         e8:4d:c2:0a:5d:bb:8d:8d:27:ba:c1:97:b4:f7:70:32:a9:09:
         a4:89:24:35:67:c6:ed:1c:83:e9:69:a6:2c:95:2c:90:fd:3e:
         49:e3:2f:df:f8:b8:ad:df:f1:f4:59:d7:9a:fe:da:02:c2:35:
         0a:f3:2f:7e:d3:04:8f:7b:8d:30:1b:80:30:fb:ae:44:05:48:
         d1:68:37:0e:82:05:68:8b:38:22:a7:8b:e9:8b:99:3e:32:08:
         71:13:03:b7:97:26:ec:35:a6:92:29:9b:5d:14:46:03:9b:8e:
         00:ac:17:85:07:95:8d:bc:a9:f1:76:e7:bd:36:da:d5:a6:25:
         9b:c6:b1:aa:83:64:18:df:33:d2:e3:6a:20:28:70:9a:c6:96:
         95:dc:13:ce:d3:db:2e:11:1d:2d:9d:85:3c:d7:c8:5e:30:ca:
         23:28:a7:26:c9:7c:71:8f:67:d4:ee:46:23:72:f1:77:c7:ba:
         16:8a:11:74:8a:58:bd:c9:38:4d:21:2b:a5:ff:2c:32:81:22:
         a5:88:81:c4:e7:67:c8:62:a0:14:74:09:42:82:2a:00:7e:3d:
         76:8f:43:b1:65:a1:63:0a:5c:de:86:13:15:e0:21:51:64:ac:
         cd:4c:3e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:46 2026 by rpki-client