Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File:                     40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier:          Y2ZH2/lOYhGRt5vzsjlqAFVfvchgvKGbFUqlFNYDTfA=
Subject key identifier:   24:4C:EE:BC:C5:41:B1:84:EC:40:C8:88:6F:09:B8:30:58:7A:BA:F9
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer:       /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial:       019EBE4832820781103F24D7D6901B1A8B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number:          11E4
Signing time:             Sat 13 Jun 2026 00:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:02 +0000
Files and hashes:         1: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: 5EaPhl1mGJHU/vzPUrnUVwxxStn8JJXjmvhzy2H5Ffs=)
                          2: L_-Xb0Gx3YHqlx1tMQzx2NXADHY.roa (hash: 5dx2j75C/cFqrHYWYHYvkWEXYxWb1XkSbro/7cWI8AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:32:82:07:81:10:3f:24:d7:d6:90:1b:1a:8b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
        Validity
            Not Before: Jun 13 00:01:02 2026 GMT
            Not After : Jun 14 00:01:02 2026 GMT
        Subject: CN=244ceebcc541b184ec40c8886f09b830587abaf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:cb:88:24:3e:a3:ab:d8:38:e6:16:c3:e3:
                    54:56:a0:b4:82:3b:77:9f:f8:f1:c1:84:c4:16:c7:
                    13:5a:70:1b:2a:cb:80:55:80:03:63:4c:f4:a6:db:
                    42:61:e3:4b:ba:7e:15:9b:25:2f:23:b9:9d:6f:01:
                    09:5c:73:41:8a:00:46:59:e3:5b:3d:7d:76:20:aa:
                    94:c1:b7:35:ce:86:a7:cd:5e:b3:ab:78:b0:5a:29:
                    df:71:30:de:dd:fe:1d:c1:82:12:fa:b3:69:77:7c:
                    30:2e:fb:1a:a4:ac:4f:3d:b1:db:88:80:05:37:3a:
                    a6:a8:64:54:f1:61:98:c5:28:b2:4c:77:70:38:d0:
                    73:1f:44:70:ec:a1:cd:e2:21:84:52:89:76:0a:bf:
                    94:98:5d:b3:3b:e8:01:3f:80:b3:84:fe:de:4a:ff:
                    57:0d:38:30:ea:e4:c0:aa:6c:84:84:a3:5c:2e:47:
                    d4:79:21:a8:19:99:d8:b5:90:30:65:47:d2:9b:f2:
                    db:34:6c:06:9a:9c:97:43:f1:86:32:b5:e6:cc:13:
                    36:c1:71:ef:d3:84:20:b1:99:80:5c:54:5e:cb:ac:
                    c1:ae:78:fa:a3:09:6d:95:1e:df:bd:9f:51:1d:27:
                    10:09:05:45:fe:7e:e5:99:28:1c:13:9f:23:81:32:
                    4c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4C:EE:BC:C5:41:B1:84:EC:40:C8:88:6F:09:B8:30:58:7A:BA:F9
            X509v3 Authority Key Identifier:
                keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7b:1b:2e:a8:1d:3b:3c:92:b6:a3:b3:4a:55:2d:6f:42:cc:
         8a:9f:fb:26:38:9c:0d:f1:bf:eb:44:a2:61:2f:12:5b:1b:cf:
         eb:dd:7a:3b:78:c2:2d:17:44:37:64:3c:79:9c:11:43:78:8a:
         d8:53:11:77:b6:c8:e1:30:b4:9f:5a:ce:28:7b:03:9a:a2:c1:
         c9:56:bc:c1:e6:9f:97:12:7d:e7:de:7a:78:e3:30:ce:19:bc:
         e1:b7:df:90:7b:e8:4a:cd:2c:20:ab:00:6d:21:8c:7c:44:8a:
         81:6e:fd:7d:49:5d:c2:c7:98:be:21:ee:ce:79:f1:83:51:13:
         6d:71:b7:86:c4:fa:d5:45:ff:94:41:2b:66:60:d2:46:61:81:
         92:04:00:3b:d8:43:74:a8:23:d2:0d:4f:75:78:c7:16:e8:22:
         20:56:57:f5:30:4b:d0:23:96:54:d1:a9:79:cb:29:5d:c9:c0:
         b1:f0:8c:1e:5d:19:e6:ae:f2:eb:62:0f:ee:32:9a:2a:71:cc:
         a4:89:af:f0:93:88:b3:c6:58:56:d3:ec:ae:a0:2a:3a:85:da:
         38:a9:41:65:8a:63:00:16:39:72:41:78:85:5e:26:f0:ed:30:
         bc:15:a8:eb:69:47:37:09:ff:1e:22:24:b9:bd:e2:4d:09:6d:
         c8:d5:9e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:20:32 2026 by rpki-client