Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
File:                     37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json)
Hash identifier:          7F/KENftxnF9/HZYnPxX0YleIPPJaJwFi3qkuX2P3TQ=
Subject key identifier:   F5:17:14:0D:CD:4E:C9:CB:6B:4C:84:41:FD:55:66:4F:19:88:80:54
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Certificate issuer:       /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial:       019FA9E328FB8351102549F2084A96BF30AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 18:01:04 +0000
Manifest this update:     Tue 28 Jul 2026 18:01:04 +0000
Manifest next update:     Wed 29 Jul 2026 18:01:04 +0000
Files and hashes:         1: 28aRdczFMy_NGN1l2BbHpUWcrsw.roa (hash: bMy6fvXop3dbRIfN9XbRZ3EVtlEMOV2r+B3tLBXy9NY=)
                          2: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: 2MUGNwL8e5ioa72bJAxmtGUB/0tdeqitI+azvNDZGsI=)
                          3: GsSJK2WMglrPgjnIUlUN6J5KRT4.roa (hash: UXgOBaxQJIWBvmn7laZX7AqFV1FM6ImsbsA9AanhVOw=)
                          4: UONacHTOKV6tfdjsDjhmW727_2Q.roa (hash: ydhSQx8wYrCZQamEIIKw85WTZPbrar6HXueA28NPho4=)
                          5: jaGFsM0UBl8DRADBm27ud6fxPc4.roa (hash: B/rg1ki5B0ZrfcN/NiwVQUlyMUumL+prN8/wqDje5I8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e3:28:fb:83:51:10:25:49:f2:08:4a:96:bf:30:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
        Validity
            Not Before: Jul 28 18:01:04 2026 GMT
            Not After : Jul 29 18:01:04 2026 GMT
        Subject: CN=f517140dcd4ec9cb6b4c8441fd55664f19888054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:2d:d8:73:76:3c:07:5c:8a:05:db:97:ad:
                    55:ad:61:d6:04:b8:40:bf:26:89:75:4f:1b:cc:5a:
                    d0:4c:9c:a5:4f:0f:fb:d2:50:53:58:4e:6f:3e:fc:
                    40:50:35:c5:ee:63:0c:60:db:08:4f:66:e7:51:fc:
                    06:d1:87:da:05:e3:88:1f:a6:46:bd:b6:d0:88:8e:
                    55:9d:33:86:5a:65:10:ab:83:0b:a1:d0:09:df:b3:
                    bf:94:f1:aa:e3:4d:a7:6e:0e:30:4b:7e:4a:74:cd:
                    3b:6f:af:23:41:6c:59:59:26:ba:81:4c:1b:fb:9a:
                    f7:3e:8a:10:42:ba:81:6d:0c:85:39:c3:42:a7:a6:
                    b8:51:54:a0:98:36:98:64:1e:fb:d7:fd:8c:2a:63:
                    03:46:00:87:09:c2:bd:34:d0:76:0c:75:66:06:53:
                    c8:88:5e:b5:45:b5:7d:d8:1e:45:cb:78:7d:09:4a:
                    df:e7:56:6f:2d:89:fc:35:df:27:aa:93:04:14:d7:
                    e7:cc:03:37:a6:fc:48:51:39:ba:82:64:e3:cb:86:
                    ed:b0:7f:2b:fc:3a:e1:5a:53:44:95:3a:6d:f4:ab:
                    21:a6:44:29:3e:f1:b7:d7:4f:a7:2a:ff:d8:a2:40:
                    3f:31:4f:e6:cd:6d:41:1d:7b:b0:fa:7a:71:b6:b2:
                    c6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:17:14:0D:CD:4E:C9:CB:6B:4C:84:41:FD:55:66:4F:19:88:80:54
            X509v3 Authority Key Identifier:
                keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e6:ed:15:7c:60:5e:97:1c:ac:4d:ee:c6:8c:9c:b6:95:ac:
         24:cd:9a:be:40:02:c4:e1:bf:68:a4:47:ec:77:81:99:4d:6d:
         54:34:92:16:67:8b:e0:34:fc:09:df:27:2c:39:a3:9a:d8:db:
         e6:8b:96:f6:03:53:35:65:74:88:67:24:32:fc:42:74:cc:b6:
         74:43:06:07:b2:3d:71:2b:0b:9e:bb:0e:42:30:33:d8:0e:c9:
         00:a8:a3:27:43:de:49:ef:0e:66:a9:3d:7e:86:0f:a7:c2:ad:
         6a:d3:b8:58:4d:45:83:f1:5f:33:60:04:c7:47:5b:91:3a:9f:
         f0:ff:83:38:dd:58:04:34:e0:a6:4a:c8:a4:7f:eb:1f:b3:2f:
         6d:fe:c4:1f:2a:a5:9e:ba:b7:ff:17:10:06:a2:17:76:d2:9e:
         50:6b:67:29:b5:4b:a7:7d:9d:5d:ee:bc:b3:cd:63:e4:8c:ca:
         ca:da:24:50:eb:01:ec:c5:97:73:1d:9b:99:e6:31:ae:45:77:
         af:8e:a8:b6:51:4b:5a:46:71:2d:8b:c0:b6:8a:ed:50:27:c3:
         12:01:31:a8:06:c5:89:f6:a9:ad:5a:13:5a:c4:5e:bb:9b:0f:
         d1:41:bd:5c:10:d7:b9:89:ee:5d:be:ca:14:24:c9:28:a6:8a:
         50:ff:45:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:28:12 2026 by rpki-client