Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
File:                     41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft (raw, json)
Hash identifier:          ydN/O949w2k7Ig3MbXqeis1YVO17pbTp2p7jIHY6zlQ=
Subject key identifier:   E4:24:4B:90:75:40:DB:2C:14:84:DB:17:3D:FA:F3:35:94:19:36:13
Authority key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
Certificate issuer:       /CN=e35607a494200ff1f3d599e25fc013f38640cd46
Certificate serial:       01A0CAB4F657778C51F25A896C7381D6625C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
Manifest number:          0398
Signing time:             Tue 22 Sep 2026 20:00:52 +0000
Manifest this update:     Tue 22 Sep 2026 20:00:52 +0000
Manifest next update:     Wed 23 Sep 2026 20:00:52 +0000
Files and hashes:         1: 2QGMBl3UaUnanjS2q3I4CT5kcZg.roa (hash: gT+03r/Akhqe4ZoJErcZDzYA56UUOiJnaMjRSrb0AlM=)
                          2: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl (hash: fdNNNwd3nXCFVF+mMb2tWv1pfYQ29mgZomivuLLj7FY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:b4:f6:57:77:8c:51:f2:5a:89:6c:73:81:d6:62:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35607a494200ff1f3d599e25fc013f38640cd46
        Validity
            Not Before: Sep 22 20:00:52 2026 GMT
            Not After : Sep 23 20:00:52 2026 GMT
        Subject: CN=e4244b907540db2c1484db173dfaf33594193613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:1e:83:1c:36:84:d2:4c:8b:95:3f:d3:23:
                    3f:d7:fb:53:ae:95:47:56:58:2f:ae:57:8f:65:4c:
                    95:bf:00:22:53:fa:36:ed:fb:80:6d:e7:bd:43:81:
                    e0:4c:84:a1:5d:e8:d4:f7:a7:73:1d:4a:4d:6c:63:
                    b4:97:5f:ee:d4:f7:90:e0:fb:96:e3:3f:73:ff:43:
                    d0:4f:b3:09:a1:e8:44:27:2e:51:3d:ee:cf:2b:66:
                    c2:1d:3a:73:25:6b:82:9b:e8:4c:61:39:51:34:bd:
                    47:fc:32:fb:b0:d6:a8:9f:86:b1:73:1f:36:e4:3f:
                    69:64:67:1f:ce:8c:e9:2d:2b:97:d1:df:20:ac:6b:
                    b9:de:81:a3:44:d6:3a:07:31:4f:c4:84:f9:39:de:
                    1d:7d:d9:0f:9c:5f:e2:f8:03:49:4a:d5:e4:32:c6:
                    b5:ef:b6:95:d5:6b:85:88:a6:f3:b4:bd:f3:0e:00:
                    e6:df:33:3a:40:ff:7c:dc:79:b4:ed:c8:5a:aa:c5:
                    c0:d9:51:c8:99:67:db:c6:8a:10:66:e5:a0:3b:0a:
                    0d:6b:1e:f4:ff:85:cf:fb:34:4c:7c:fc:84:a5:95:
                    ca:18:44:c3:a8:a5:5b:40:b6:46:8b:71:5c:08:4a:
                    f5:b8:28:d2:be:24:84:a1:bf:e7:23:82:e8:f3:76:
                    11:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:24:4B:90:75:40:DB:2C:14:84:DB:17:3D:FA:F3:35:94:19:36:13
            X509v3 Authority Key Identifier:
                keyid:E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7b:ee:28:96:fb:1b:f2:9e:45:06:b7:ac:b2:9e:98:1b:06:
         6e:23:19:7f:17:cd:d5:e8:9e:5b:83:23:06:ca:9f:72:bb:6a:
         ff:08:61:c4:86:b7:56:e6:c0:70:46:25:78:19:29:e9:3b:47:
         3d:02:5a:03:3e:7a:bd:73:3c:b7:8e:3f:d9:a1:d1:bb:19:53:
         20:81:4b:4c:76:52:98:8c:87:05:1c:f7:5c:da:60:14:7e:3e:
         ba:cb:db:d8:e1:77:da:43:20:5c:48:1d:4d:aa:63:58:ef:d3:
         91:a1:e1:85:e8:48:6f:a4:17:a6:9b:4f:f4:a9:62:0b:8f:7d:
         3a:70:a6:20:39:e6:b4:b6:f5:f1:f9:14:43:a1:0f:2a:99:55:
         a7:fa:32:ed:d7:16:ef:b6:a0:c1:90:3f:a4:6e:59:73:be:9e:
         ad:58:ec:e4:cc:46:0b:de:d3:d5:9a:0c:e3:11:fd:9f:37:fe:
         7a:e5:d9:09:12:78:97:4c:0f:8e:d0:7a:b6:24:a4:27:3c:f4:
         6a:26:2e:23:e0:96:b5:3e:f9:54:4c:70:7a:3a:d7:2c:0e:8a:
         88:77:b7:6c:83:69:79:70:90:72:2c:fc:61:eb:b4:1c:ea:b2:
         54:d8:1f:b0:0e:e4:8a:89:0f:42:cb:e5:ab:50:1a:7b:ec:6d:
         5a:ee:18:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:49:37 2026 by rpki-client