Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
File:                     37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft (raw, json)
Hash identifier:          AeSMPpW9s0JyRcLYFw7LIx4Ls6rtvvH4frdC9cch9ho=
Subject key identifier:   7C:80:40:62:0B:CB:B1:39:45:96:C0:53:7A:E4:E0:D1:3D:0F:1E:89
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Certificate issuer:       /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial:       01A0C66A65AB19898C5CE0A1FAA17A083EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
Manifest number:          0E07
Signing time:             Tue 22 Sep 2026 00:00:56 +0000
Manifest this update:     Tue 22 Sep 2026 00:00:56 +0000
Manifest next update:     Wed 23 Sep 2026 00:00:56 +0000
Files and hashes:         1: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl (hash: PCVBcnHFSRvhNFt9jaxn0Al2I6y67V5+yzjcyzZ5hK4=)
                          2: gfNmYWuIvuunlCkfkDni5cxgfT0.roa (hash: SnoMtTLK31p4RRjzX3gGgwCqhz+VBN/cr3/eK2n8JQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:65:ab:19:89:8c:5c:e0:a1:fa:a1:7a:08:3e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
        Validity
            Not Before: Sep 22 00:00:56 2026 GMT
            Not After : Sep 23 00:00:56 2026 GMT
        Subject: CN=7c8040620bcbb1394596c0537ae4e0d13d0f1e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2c:ff:ed:69:65:b9:d7:37:d8:e8:84:68:e0:
                    54:c8:7e:7a:6a:21:d2:36:ad:24:12:40:f6:ec:93:
                    ea:a3:c6:26:d5:0d:4a:94:f6:88:83:17:12:85:2a:
                    a5:c9:d1:7a:c1:c9:d0:d8:14:e3:61:be:81:3d:e6:
                    0e:4f:d5:64:3a:20:68:63:3c:e9:a7:0d:a6:08:dc:
                    0b:b9:09:ca:d6:28:0f:42:55:b2:c8:cd:37:87:a7:
                    b0:2b:e3:f3:ed:37:d6:8d:7a:c8:12:6d:83:5d:87:
                    3f:01:d5:85:d4:bf:df:bc:90:2a:ad:4d:af:cb:c5:
                    f0:73:3c:5d:5a:61:59:0d:25:1e:98:57:4f:8b:47:
                    06:33:5c:6b:a9:51:bc:9d:36:04:d9:fc:4d:d4:01:
                    8e:a0:f1:cb:60:f0:91:53:f9:06:52:8d:d3:69:d6:
                    4c:22:44:8a:ed:49:05:6a:61:ad:01:92:24:9f:43:
                    8b:9d:ae:99:f3:6e:80:96:84:79:73:a0:d5:01:e3:
                    c8:92:c6:81:14:fb:c0:46:f0:08:f6:c9:b6:d1:95:
                    b1:14:b3:3e:ac:c8:b8:67:9b:58:10:45:b0:03:33:
                    ac:ec:cf:20:b4:0b:dd:b4:63:15:12:57:9e:c4:cf:
                    59:94:83:d7:d7:a3:96:f5:4d:8b:1c:e6:69:a9:58:
                    48:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:80:40:62:0B:CB:B1:39:45:96:C0:53:7A:E4:E0:D1:3D:0F:1E:89
            X509v3 Authority Key Identifier:
                keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:08:05:db:28:a7:66:de:ae:7b:c1:8e:55:54:be:9f:90:65:
         db:57:d6:4b:58:48:13:a8:70:c6:bc:fe:2e:7f:45:c3:71:0a:
         77:38:cf:7b:f7:b0:26:e8:92:3d:1b:aa:d7:1e:93:0f:73:cf:
         76:fe:f2:f8:72:37:17:3d:71:dc:3f:d5:a6:b8:c0:29:32:2f:
         74:e9:e1:3c:ad:e5:82:bb:22:70:14:53:ad:95:c9:0b:91:4d:
         bb:64:8e:0f:a4:7e:7e:f7:42:55:03:c8:7b:22:d7:67:19:6a:
         04:a9:93:af:a5:68:b5:7a:49:24:86:37:13:ae:b8:a2:11:e2:
         a2:97:b5:b8:57:76:46:0c:c2:03:e6:20:09:03:bc:6d:ce:00:
         d9:10:8e:ab:1c:bb:61:d0:ee:e7:3e:be:ce:92:a9:7a:cc:49:
         74:37:d2:9c:7a:0e:e0:03:c9:df:10:2c:89:ce:4a:bd:1a:9b:
         1d:41:9e:76:bd:da:47:03:51:c6:57:36:71:d6:8a:37:0e:2e:
         94:3c:e3:14:5b:a8:b4:e4:ff:99:7c:36:74:78:e6:a2:5f:07:
         9b:ac:00:e0:74:06:3b:3d:3f:48:ba:40:10:e2:13:11:e2:d1:
         7e:92:9e:87:46:f8:ec:f6:a0:9c:78:ad:59:61:7c:98:ae:57:
         03:6c:d4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:52:17 2026 by rpki-client