Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
File:                     37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json)
Hash identifier:          YFU/Ib5mfNm8XN4j3JBw/O1+xED++yJuMXdhqDphup0=
Subject key identifier:   E3:B5:8F:DA:6C:DC:B7:C4:51:26:2B:5C:24:E7:9A:87:70:C3:76:2E
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Certificate issuer:       /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial:       019EBE4821CB9ABF45A131F128A5AECA3137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 00:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:58 +0000
Files and hashes:         1: 28aRdczFMy_NGN1l2BbHpUWcrsw.roa (hash: bMy6fvXop3dbRIfN9XbRZ3EVtlEMOV2r+B3tLBXy9NY=)
                          2: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: S6Wz4s78d60juryGN4SsqbDCUPog8GaaGN8ktUS8ChA=)
                          3: GsSJK2WMglrPgjnIUlUN6J5KRT4.roa (hash: UXgOBaxQJIWBvmn7laZX7AqFV1FM6ImsbsA9AanhVOw=)
                          4: UONacHTOKV6tfdjsDjhmW727_2Q.roa (hash: ydhSQx8wYrCZQamEIIKw85WTZPbrar6HXueA28NPho4=)
                          5: jaGFsM0UBl8DRADBm27ud6fxPc4.roa (hash: B/rg1ki5B0ZrfcN/NiwVQUlyMUumL+prN8/wqDje5I8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:21:cb:9a:bf:45:a1:31:f1:28:a5:ae:ca:31:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
        Validity
            Not Before: Jun 13 00:00:58 2026 GMT
            Not After : Jun 14 00:00:58 2026 GMT
        Subject: CN=e3b58fda6cdcb7c451262b5c24e79a8770c3762e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d3:34:17:c9:03:dd:99:d2:7d:ac:29:f6:6f:
                    ec:39:59:b5:ad:5e:87:ef:ca:20:08:8b:6e:fd:a8:
                    66:01:a8:bf:2f:98:64:cc:12:2a:e5:7c:43:05:c8:
                    b6:d3:87:a7:43:a2:46:68:70:d5:2b:e1:55:5d:2f:
                    b3:34:e7:8c:62:b5:74:f8:d5:e0:e5:fd:c3:d4:91:
                    18:51:18:71:c7:b6:a1:38:ca:db:7f:1a:81:19:87:
                    9b:89:76:92:a7:9b:fc:31:18:ee:c1:28:09:01:c5:
                    c6:d5:fb:c2:b4:9e:88:07:50:51:b5:58:5e:58:94:
                    50:17:b0:33:66:05:b4:5d:7d:41:f2:8e:96:2a:4b:
                    41:fb:e2:8b:4a:3a:f8:02:8c:b9:57:da:0f:90:91:
                    34:bb:b2:10:7c:f3:cc:c6:c0:a4:29:a9:a2:66:3e:
                    7f:07:50:24:0c:f8:f0:d6:3c:8d:ba:05:06:5f:c6:
                    87:d9:33:e7:b5:6b:cc:c4:7c:61:41:76:36:20:b4:
                    b5:c2:7b:be:97:5e:3a:7d:c6:d8:c8:ac:71:37:19:
                    39:86:2f:4e:2c:92:bc:a6:43:53:50:82:e0:c3:e4:
                    35:e3:9d:fe:f5:c6:28:49:7e:3c:53:e5:44:40:27:
                    a8:a5:18:40:e7:02:e7:47:bc:7d:be:2d:ca:28:3a:
                    b6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B5:8F:DA:6C:DC:B7:C4:51:26:2B:5C:24:E7:9A:87:70:C3:76:2E
            X509v3 Authority Key Identifier:
                keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4b:d0:1c:82:54:70:9e:dd:0d:3a:f0:56:97:cb:44:d0:73:
         97:85:99:04:f7:6f:52:58:a7:b2:e2:8e:57:bc:02:aa:04:3b:
         69:75:2e:ef:1d:2f:5c:42:2f:c0:e9:ed:38:a8:92:14:bf:6a:
         a2:bf:88:45:60:b6:35:bf:94:83:ee:87:3e:a1:1c:18:5d:c3:
         c5:91:c7:ad:3e:3c:ec:12:79:ac:0b:22:4a:fc:93:07:c6:7d:
         9a:ef:34:32:09:02:4d:ea:0a:ec:8c:25:2b:62:3f:af:cf:91:
         32:04:fd:98:56:fd:75:19:f0:83:04:54:db:d1:0c:01:bb:df:
         0f:a3:db:44:ff:17:b7:23:38:35:69:95:ad:bc:77:8f:cf:c7:
         b3:8c:a3:a0:14:0e:4e:1c:03:69:5f:0a:25:4e:79:b5:bc:17:
         12:84:04:bb:cd:5f:ff:00:6f:7f:46:86:94:64:ea:a7:02:d0:
         2f:b2:83:9f:69:2b:96:9d:2b:60:0a:67:21:e9:6a:3c:c8:48:
         b9:ca:35:fc:a9:b9:df:7a:6b:0a:a0:12:f0:4a:5c:c8:f9:9e:
         98:c5:f4:e8:8e:97:ee:b4:3f:09:7d:7f:a8:e8:ec:2c:d9:5d:
         72:97:2b:91:30:90:fa:77:96:c2:94:e2:4e:ce:3c:9e:49:b0:
         a3:e9:de:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:17 2026 by rpki-client