Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File:                     40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier:          uu8iuCa1Tk3HCFT9Qyt9E4FiI96CWV/tz+Tx6+jhY4g=
Subject key identifier:   28:79:01:44:90:8E:64:9B:F9:D9:96:E6:43:A8:C0:42:EF:1A:89:81
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer:       /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial:       019CAB340E305764DEBBD00644BFA9735A0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number:          10D1
Signing time:             Sun 01 Mar 2026 21:00:41 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:41 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:41 +0000
Files and hashes:         1: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: FzQjnq5LVcCMkSYTtO/hZdqdmoyROBYkqJkfYxRkEvc=)
                          2: L_-Xb0Gx3YHqlx1tMQzx2NXADHY.roa (hash: 5dx2j75C/cFqrHYWYHYvkWEXYxWb1XkSbro/7cWI8AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:0e:30:57:64:de:bb:d0:06:44:bf:a9:73:5a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
        Validity
            Not Before: Mar  1 21:00:41 2026 GMT
            Not After : Mar  2 21:00:41 2026 GMT
        Subject: CN=28790144908e649bf9d996e643a8c042ef1a8981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:32:4d:a1:a4:dd:30:07:e2:e6:74:0b:04:ed:
                    01:e1:39:aa:32:2f:1e:2a:2e:75:ec:2f:e1:38:10:
                    c9:3b:db:2d:4d:26:f1:05:44:10:f8:41:24:d2:f1:
                    ff:00:9f:11:6c:2f:1e:4b:4b:22:6e:54:86:bf:0c:
                    43:4c:bf:c4:6f:e7:6e:eb:d1:39:78:bf:ab:11:f2:
                    32:af:1e:2b:b8:60:5e:18:cf:ba:0c:71:0e:ec:14:
                    b7:49:0b:37:fa:4f:7a:44:46:64:52:eb:ca:c4:21:
                    7d:4b:f5:92:11:b6:f6:73:85:df:ba:f0:4e:cd:7b:
                    dd:38:60:08:fa:d9:d2:ba:f6:80:10:1a:a1:17:20:
                    8b:89:16:71:e4:e4:66:e9:f4:ec:2f:40:7d:2e:1e:
                    03:fd:25:8e:e9:04:48:ac:ce:fa:87:57:a5:b2:f2:
                    cf:c9:d8:32:e4:4a:d5:78:20:ec:be:11:a0:b3:1a:
                    6a:d3:00:f8:65:c2:28:df:af:13:d7:70:98:b6:22:
                    31:29:8d:0f:66:f5:87:91:1a:0e:75:79:3b:57:bb:
                    cc:be:63:8e:00:88:28:9a:05:4e:ce:2a:8e:fe:7d:
                    0c:50:10:31:89:4b:cb:9f:7f:3f:47:ad:d3:e9:74:
                    d0:13:d2:d3:de:b7:6e:14:55:66:35:cb:31:a6:4f:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:79:01:44:90:8E:64:9B:F9:D9:96:E6:43:A8:C0:42:EF:1A:89:81
            X509v3 Authority Key Identifier:
                keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:07:71:37:f0:ce:c8:20:63:77:2e:96:7d:ee:2c:24:de:
         31:6e:a3:8d:3f:7f:95:48:63:04:a8:6c:f4:48:52:e6:d3:39:
         8e:7e:6b:45:25:46:22:3b:d4:bc:9b:62:b5:d0:4e:a8:bd:7f:
         77:f9:a4:26:7a:0c:68:02:1c:d7:57:9f:c8:86:11:8c:54:02:
         f7:92:db:bd:8b:9e:12:5c:99:4c:3f:47:65:de:d7:6e:0f:d5:
         12:9c:d6:fd:fa:01:82:bc:98:aa:59:fc:f1:ad:f3:1f:8c:cc:
         76:a0:14:70:f7:99:4d:14:e0:c7:f0:7b:62:6b:a9:51:d4:2e:
         31:6d:0e:71:ef:9d:a6:01:e0:56:e6:1f:d8:df:90:06:f3:58:
         fa:5e:29:ea:99:69:73:32:51:79:34:0a:2d:de:40:a0:a0:b2:
         89:37:03:f9:e3:80:8f:a0:27:b0:13:9e:29:d0:ee:04:2c:e8:
         d6:a7:25:ac:94:86:f7:19:5d:5a:80:b4:4f:ad:ca:39:e7:fa:
         62:9b:ac:ea:82:a2:9f:85:cc:aa:a4:4b:2b:bc:42:0e:dd:86:
         bb:8c:21:2c:7a:e3:17:e9:62:59:1a:38:07:37:50:37:f2:8c:
         2a:bd:3a:4b:65:e8:db:f3:ce:d7:8c:fb:6d:24:ee:17:33:bc:
         f2:fb:2e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:04 2026 by rpki-client