Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File:                     40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier:          IR4VROwfw9I4Qu5LiESqJzgJnJ05Of91ipDVBLtfSdo=
Subject key identifier:   EC:2D:96:25:3D:F4:DE:41:3D:37:40:FE:EC:06:A8:C2:DA:9D:5D:03
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer:       /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial:       01A1415E845EAD8B7790C743119A8148D696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number:          1331
Signing time:             Thu 15 Oct 2026 21:01:15 +0000
Manifest this update:     Thu 15 Oct 2026 21:01:15 +0000
Manifest next update:     Fri 16 Oct 2026 21:01:15 +0000
Files and hashes:         1: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: zNftobs+nyhkMtfk8TxZaJptGL9ygsQiRCtUkY/JHD4=)
                          2: L_-Xb0Gx3YHqlx1tMQzx2NXADHY.roa (hash: 5dx2j75C/cFqrHYWYHYvkWEXYxWb1XkSbro/7cWI8AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:41:5e:84:5e:ad:8b:77:90:c7:43:11:9a:81:48:d6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
        Validity
            Not Before: Oct 15 21:01:15 2026 GMT
            Not After : Oct 16 21:01:15 2026 GMT
        Subject: CN=ec2d96253df4de413d3740feec06a8c2da9d5d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:4f:03:94:b7:da:71:72:36:11:06:35:10:
                    cd:c0:e7:22:15:3a:d6:1a:de:b7:cd:1e:b0:b5:77:
                    0f:a0:dc:03:f8:3e:38:5d:6f:55:8c:a1:81:32:15:
                    8e:3c:5e:82:62:43:cf:18:34:af:29:f9:0e:12:7a:
                    a7:24:2a:b2:32:4f:4f:19:24:d4:84:75:e6:c5:b8:
                    77:63:22:ec:ab:42:0a:0f:99:fc:62:11:62:b4:c7:
                    28:36:e2:14:c7:d6:15:6b:80:12:a6:ae:32:0f:cc:
                    78:69:54:d7:c8:24:97:ee:c3:3e:93:3c:8f:32:fc:
                    3d:77:9b:0d:73:7b:8f:88:ad:9b:9a:33:00:57:d8:
                    4f:88:2a:a8:80:1b:38:c8:47:b3:3a:e0:58:0a:eb:
                    cb:f8:6c:3c:66:50:30:4a:52:42:d7:bf:7b:82:59:
                    f7:22:58:a3:7d:39:00:ac:28:15:5e:59:90:0d:14:
                    0b:fa:1c:d7:d4:31:27:02:69:65:07:61:3e:33:a4:
                    09:0e:37:6a:f8:e1:2d:be:f7:45:e1:69:9e:f5:58:
                    55:f9:41:f6:99:43:b1:8b:4c:a3:47:1f:01:c0:2f:
                    40:47:57:ba:25:bc:6a:d7:a0:b9:c2:ca:c4:49:ac:
                    84:73:7d:07:c2:55:b5:02:d6:10:d5:3a:55:08:d3:
                    15:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2D:96:25:3D:F4:DE:41:3D:37:40:FE:EC:06:A8:C2:DA:9D:5D:03
            X509v3 Authority Key Identifier:
                keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b5:f8:bc:15:64:84:b2:13:4a:f9:e5:68:9c:56:f0:7b:4f:
         e4:1e:4a:30:4d:0d:29:6b:8b:04:1a:e9:36:37:a7:02:a1:bb:
         a7:70:21:b5:ef:40:d2:3e:69:32:30:28:dc:4d:f1:8d:af:34:
         68:c9:1e:65:74:16:f3:ce:03:a8:54:da:4b:90:62:5b:b7:46:
         a7:2b:54:0c:b2:e5:19:de:25:79:9a:7c:28:0f:df:6e:1e:b0:
         19:fb:f3:fd:05:f5:bf:c6:5e:a2:3a:b9:05:a3:38:b3:3f:22:
         00:66:96:d9:a8:9e:8d:a2:26:ff:1a:05:74:83:82:32:08:98:
         56:6b:cd:cc:38:d6:2e:0f:1b:e0:68:19:b3:15:27:24:21:e6:
         9b:48:01:32:9a:b5:f2:e0:c6:dd:1f:4d:92:5c:f1:53:f1:08:
         ed:ab:ca:38:34:f0:38:c5:89:b2:c0:bc:ec:fd:5e:9a:40:ae:
         99:c0:47:d2:bd:01:5c:96:a1:e8:b6:ee:7e:86:ab:99:25:7f:
         a8:42:5d:54:18:eb:80:1f:66:58:66:1d:e4:fc:bd:d8:9c:fc:
         a1:cc:68:9e:a4:34:c5:37:6c:92:c0:88:72:11:0d:21:b8:b4:
         0e:a6:c2:25:1b:9e:fc:1e:ce:58:1c:06:55:0a:cd:4f:f0:00:
         e2:44:f3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 02:39:47 2026 by rpki-client