Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
File:                     37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft (raw, json)
Hash identifier:          SAOghWR0nAqZnh3dxhzFj4o6wjm0bi0Pt+jFTUj1jUA=
Subject key identifier:   E6:C8:2A:4D:62:53:56:E6:0B:57:47:E6:CE:73:8E:0C:46:D3:22:E7
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Certificate issuer:       /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial:       019FA89A4F83AED686FC6E6986D5CD286D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
Manifest number:          0D73
Signing time:             Tue 28 Jul 2026 12:01:52 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:52 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:52 +0000
Files and hashes:         1: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl (hash: Mv8OByScMl8EHzND0Mm5hoSvX88U488FvlcCjusQKuY=)
                          2: gfNmYWuIvuunlCkfkDni5cxgfT0.roa (hash: SnoMtTLK31p4RRjzX3gGgwCqhz+VBN/cr3/eK2n8JQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:9a:4f:83:ae:d6:86:fc:6e:69:86:d5:cd:28:6d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
        Validity
            Not Before: Jul 28 12:01:52 2026 GMT
            Not After : Jul 29 12:01:52 2026 GMT
        Subject: CN=e6c82a4d625356e60b5747e6ce738e0c46d322e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a9:e3:f9:4a:f0:e6:da:8d:75:7b:da:7f:c6:
                    f2:08:00:7b:9c:7a:a0:36:a7:dc:c5:42:1a:81:48:
                    05:85:0a:a7:2f:c0:5d:1c:1a:70:87:cd:0a:28:a4:
                    44:aa:cb:a7:93:c5:fb:a7:e4:e4:70:e4:28:ca:54:
                    ec:18:c5:2e:61:a3:4d:b5:af:e8:2a:7c:60:b7:2f:
                    3e:c7:28:11:bc:e6:17:fb:1d:7e:67:3c:0a:62:d3:
                    f7:51:4d:37:5a:9b:a5:07:b3:2b:0d:83:0e:20:91:
                    59:79:8f:11:c8:49:02:28:c3:95:b4:0d:15:a6:5c:
                    49:59:00:fb:36:a0:52:c4:cb:66:d4:a2:58:17:aa:
                    7c:fe:ce:f8:0c:27:4c:e3:92:7a:7e:ed:de:4a:87:
                    df:78:39:6c:19:d3:0c:d0:d6:a7:8f:9d:17:83:08:
                    5c:1e:f7:ef:74:77:5c:7c:3f:53:73:46:82:51:5f:
                    41:e9:6f:77:f6:14:b4:a0:5d:2c:f4:ba:54:0c:9e:
                    ed:1e:7c:83:ca:60:19:d9:92:5d:49:1d:b4:e2:26:
                    06:8f:95:fa:74:51:5c:e9:17:22:bb:17:42:28:e0:
                    03:e4:81:97:b2:40:bc:20:7f:a5:3d:a0:98:c4:6f:
                    32:ff:06:c1:b1:f9:ea:bb:42:e2:c9:58:8b:f8:b8:
                    70:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C8:2A:4D:62:53:56:E6:0B:57:47:E6:CE:73:8E:0C:46:D3:22:E7
            X509v3 Authority Key Identifier:
                keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4b:2d:7a:26:b6:d1:1b:c5:c2:f0:c9:34:ec:44:50:9e:1b:
         e4:18:39:92:7f:86:57:c9:8f:47:77:6d:fd:b1:4c:68:be:a2:
         08:ad:34:4a:8f:46:64:8e:01:e6:58:c2:97:29:aa:5c:b5:86:
         78:d4:04:d7:d4:53:f9:45:6d:bd:b6:55:38:27:84:43:31:07:
         c7:3c:c5:70:d3:70:37:b1:c7:78:6d:8f:f3:8c:70:ad:61:e6:
         0d:90:ff:f7:d8:c9:87:2b:2c:2f:4f:8a:0c:fb:2d:a2:3f:23:
         bc:96:aa:a6:92:ae:76:4a:10:ff:7c:8c:bb:a2:65:3a:30:78:
         d7:30:8a:e9:8f:e9:ae:cb:c9:a6:3e:2a:ed:3a:ba:bf:c6:31:
         f5:07:f3:e1:3d:9b:f2:d5:d3:b7:48:a9:9d:c3:00:74:04:64:
         ab:65:d5:a4:3a:74:9b:01:c4:4c:b2:e4:34:1f:99:63:12:30:
         4a:14:b8:6c:02:bb:6a:ba:56:92:cb:29:0b:11:0e:ec:28:bb:
         5e:de:b6:03:b4:37:86:f3:9b:48:fe:c1:30:49:49:f6:f4:27:
         0b:1f:de:38:7c:e3:0c:d8:c4:b9:d2:b0:14:25:04:45:ae:3d:
         be:8d:3d:ce:1a:98:d2:59:5b:88:01:8a:d8:04:cf:c3:72:6b:
         15:86:90:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:39 2026 by rpki-client