Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
File:                     40Y1lMN3zViH3pB4tLLozcTTrls.mft (raw, json)
Hash identifier:          HadDDA11iBbWZnwZsppc4FzInB8npyirXpUsUKY2+VE=
Subject key identifier:   F6:3F:D3:12:7B:F1:B4:96:62:8B:2D:5A:DC:C8:43:48:9A:BF:15:D7
Authority key identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
Certificate issuer:       /CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Certificate serial:       019D9A3DF495E0900361516E78DAD22D5711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
Manifest number:          0706
Signing time:             Fri 17 Apr 2026 07:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:44 +0000
Files and hashes:         1: 40Y1lMN3zViH3pB4tLLozcTTrls.crl (hash: YsiQTWvEGCv47/FZBfsCuUY9xGvn/S7s3C6WVYLDx04=)
                          2: Yvzp8k7tse_tqbxpodE5jMc5Rds.roa (hash: XO+F/9KhQMsBIWzLbEjgPyX2zSSbeZO2QWXWRdGBXsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3d:f4:95:e0:90:03:61:51:6e:78:da:d2:2d:57:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
        Validity
            Not Before: Apr 17 07:00:44 2026 GMT
            Not After : Apr 18 07:00:44 2026 GMT
        Subject: CN=f63fd3127bf1b496628b2d5adcc843489abf15d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:92:ce:b4:66:9d:1f:71:cc:fa:d3:a5:f1:ab:
                    20:ce:18:58:b8:a8:d2:11:5d:a6:57:60:76:b0:f7:
                    fa:d1:00:af:f8:4a:9d:e4:4e:6b:71:1f:e6:24:2f:
                    d1:8b:27:ad:54:5a:0c:81:c5:ad:cb:bd:23:90:6c:
                    7d:55:3e:69:0b:aa:96:fd:60:16:58:82:1f:53:d5:
                    2c:4d:f1:9f:74:a6:95:8c:41:4e:4c:1b:6d:50:48:
                    6e:61:98:5d:55:c9:7f:e1:8f:8b:bd:9e:d6:db:2c:
                    85:80:59:39:1a:59:1c:c7:c1:b0:4d:77:13:0a:02:
                    46:70:4a:ef:ea:4a:ac:b5:6e:40:7e:c2:4d:1f:3a:
                    d8:6f:42:35:c7:51:d1:87:2a:95:1d:c0:ef:70:60:
                    d8:8f:c2:29:7c:9f:f6:e8:5e:36:ec:3b:8c:e9:fb:
                    4f:c5:77:6f:ee:d0:5a:4c:6c:4c:aa:ae:33:8b:80:
                    16:73:38:14:8e:30:96:91:32:92:43:13:d1:c8:1f:
                    fb:f3:47:66:ef:8d:a6:d8:ea:6f:91:45:b3:d1:a8:
                    6e:64:1a:92:a7:0b:5a:d3:a7:98:a9:f0:92:81:24:
                    64:6a:c9:f0:e4:75:3a:b1:f7:c0:58:62:38:a9:18:
                    af:48:04:ca:b3:bb:64:e0:ee:2a:be:26:d8:f4:fa:
                    d2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3F:D3:12:7B:F1:B4:96:62:8B:2D:5A:DC:C8:43:48:9A:BF:15:D7
            X509v3 Authority Key Identifier:
                keyid:E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b7:ce:d9:1f:3a:df:ab:ff:3a:34:b2:88:5e:99:b2:bb:3c:
         74:ec:c2:cc:bf:3e:cd:0f:e5:f6:cf:f4:ab:a2:78:bc:50:bd:
         01:d9:1e:bd:33:f1:c1:26:a0:6b:09:74:cd:4f:c3:47:62:4c:
         88:be:98:24:f3:71:ae:79:be:6a:be:d3:9f:60:c6:74:41:d2:
         28:ab:c9:e6:37:03:74:3a:f8:d3:07:db:b5:bd:e7:4e:51:b4:
         5a:de:eb:a7:41:79:21:d4:1a:e2:0c:0e:e0:d2:13:09:bd:6b:
         e3:ca:a8:da:87:99:0f:d4:bb:2c:52:02:e7:d1:67:52:a3:92:
         10:db:88:4a:11:6c:64:ea:f1:d0:27:3d:e1:1d:ae:fa:92:28:
         5e:b2:3d:57:b8:ea:f5:c1:34:1f:be:38:11:6f:e9:05:3b:a9:
         b2:8f:1d:d0:02:25:52:1c:23:a4:e0:ba:56:71:ef:94:77:2f:
         1e:d1:b6:fc:10:7f:e4:e4:46:43:cf:b4:de:89:18:fc:18:ba:
         51:c7:d6:a8:95:32:3c:74:af:cd:4c:0c:0e:72:76:78:24:9d:
         1e:fc:eb:4c:2e:a0:11:2b:95:12:ce:81:ec:fb:eb:a1:75:43:
         af:b2:cd:9a:bf:90:7a:9d:2b:f0:14:2f:b3:6f:4b:ed:ca:4a:
         bc:c4:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:37 2026 by rpki-client