Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
File:                     40Y1lMN3zViH3pB4tLLozcTTrls.mft (raw, json)
Hash identifier:          yu/rEsKLH03SV0M1Mr58XDtFxMgWQzTVqN8hYUQWQfA=
Subject key identifier:   94:76:E3:E4:E8:61:6E:0B:19:13:03:B7:D7:14:B7:C6:AD:2F:8E:21
Authority key identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
Certificate issuer:       /CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Certificate serial:       01989636EF3915C5F8177B849F91E0A5C488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
Manifest number:          046D
Signing time:             Sun 10 Aug 2025 23:00:39 +0000
Manifest this update:     Sun 10 Aug 2025 23:00:39 +0000
Manifest next update:     Mon 11 Aug 2025 23:00:39 +0000
Files and hashes:         1: 40Y1lMN3zViH3pB4tLLozcTTrls.crl (hash: F3gQ2Li/wxekrFuQ6IfXG9fbnHvjJ2jxwsiBEz9ETAk=)
                          2: nZAWWVMmtESroqhC0PS3Wx64m1g.roa (hash: qpLibwBGLw83uqsHA4XHZBFcLuSXya9DooLiBQa7gxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:36:ef:39:15:c5:f8:17:7b:84:9f:91:e0:a5:c4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
        Validity
            Not Before: Aug 10 23:00:39 2025 GMT
            Not After : Aug 11 23:00:39 2025 GMT
        Subject: CN=9476e3e4e8616e0b191303b7d714b7c6ad2f8e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7a:c0:8d:9c:db:74:71:0b:83:f7:91:7e:2e:
                    61:7f:c3:f9:ee:66:f0:8f:36:f2:ef:18:d2:09:5a:
                    e3:08:7f:7f:aa:07:0e:46:4f:5d:74:51:55:ab:d1:
                    3a:40:1b:d1:3e:e0:0f:17:29:f8:02:a4:05:ad:98:
                    0a:30:39:08:ed:6a:d8:76:40:3d:07:60:ae:23:30:
                    5b:6a:a2:b5:0a:0d:b4:74:60:9d:34:a1:e5:f1:ba:
                    cc:42:f2:f9:65:47:e5:55:d1:b5:03:4c:0f:1d:8d:
                    26:91:5b:0d:6f:4e:e0:7e:db:18:a4:a0:39:ee:56:
                    62:56:29:ea:b6:e0:c1:81:ea:71:0b:45:9f:0c:d8:
                    df:7f:78:a1:c6:46:31:a9:20:41:5b:54:82:12:46:
                    d2:73:2a:7a:78:19:7b:36:c4:bc:27:4f:74:44:a1:
                    47:6e:0b:e8:51:54:4d:e4:67:f6:08:b7:bd:85:35:
                    79:67:4c:bf:0b:aa:10:d2:19:3c:76:02:3e:7f:24:
                    0d:73:d6:13:49:c9:f7:2c:af:3f:0b:ab:7c:ad:41:
                    9c:10:b8:8b:c1:28:ee:9e:6b:26:e4:86:6b:18:35:
                    7a:7d:04:fb:e9:df:df:46:d9:0c:55:87:4f:5a:ea:
                    4c:11:c9:24:1b:36:eb:08:d6:97:a7:79:f1:88:5d:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:76:E3:E4:E8:61:6E:0B:19:13:03:B7:D7:14:B7:C6:AD:2F:8E:21
            X509v3 Authority Key Identifier:
                keyid:E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8e:18:7d:68:da:ee:50:77:55:dc:c5:8e:6f:57:dc:fa:94:
         08:74:15:c6:13:af:8c:c8:cf:5d:18:a6:b2:cc:35:78:59:b0:
         cc:e5:ac:9e:15:38:a5:b3:06:06:9c:1f:f3:42:de:04:0e:c1:
         b3:49:25:1f:7e:60:8e:6f:c5:bf:e5:08:9b:fe:5a:59:fb:82:
         a2:e7:a1:e9:2a:80:c9:b0:b5:3a:5f:3f:5d:4a:97:d8:dc:21:
         04:15:c2:a2:e3:90:7c:30:32:66:be:0d:19:01:a7:6d:9f:3c:
         43:95:5b:f1:0e:f9:d0:c2:50:44:ae:88:1e:66:6a:74:e4:8c:
         c0:f5:57:92:ec:b4:1e:b0:5e:b8:4f:5a:bd:82:77:6a:80:79:
         f6:4e:6e:62:d4:26:d0:5c:77:fe:1f:30:38:93:9b:9c:02:c2:
         d3:91:62:e8:81:e6:cf:60:81:85:c1:b3:ea:26:42:cd:58:2b:
         8c:5a:9a:36:da:00:e8:34:df:7e:d7:cf:0d:26:76:38:e5:53:
         90:c8:27:4f:96:51:3b:18:1f:0f:70:58:d1:1b:0a:4f:57:f9:
         a8:49:f8:97:e1:bd:40:a6:0d:81:97:c2:59:a3:13:2e:1a:c4:
         29:32:a6:7d:3a:51:fb:19:f2:db:40:8b:b5:0f:4c:be:94:f7:
         3b:69:d6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:10 2025 by rpki-client