Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft
File:                     937JWiBMO1gCWeG0L6kOF8b0NdY.mft (raw, json)
Hash identifier:          hs1UBAoAEsY+yJrDV8fwZd+8SCGEnOgE97j0DZrt2DA=
Subject key identifier:   8D:09:52:23:50:AD:47:B2:6A:82:D8:C0:85:80:18:36:87:23:04:F3
Authority key identifier: F7:7E:C9:5A:20:4C:3B:58:02:59:E1:B4:2F:A9:0E:17:C6:F4:35:D6
Certificate issuer:       /CN=f77ec95a204c3b580259e1b42fa90e17c6f435d6
Certificate serial:       019F848C6A286AA545B37D5232F7B018451A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/937JWiBMO1gCWeG0L6kOF8b0NdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft
Manifest number:          CF
Signing time:             Tue 21 Jul 2026 12:00:22 +0000
Manifest this update:     Tue 21 Jul 2026 12:00:22 +0000
Manifest next update:     Wed 22 Jul 2026 12:00:22 +0000
Files and hashes:         1: 937JWiBMO1gCWeG0L6kOF8b0NdY.crl (hash: Au2lK++IGTjsVHClhQP9Fyoe/NVmzcOFGk4u+n2VXV0=)
                          2: XqcpVCeX0-cvU-SqoEfBG7M0CYI.roa (hash: Um6sqZHxrN2dTouXpZfutLZlTxwDMybqIAW6glre92s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/937JWiBMO1gCWeG0L6kOF8b0NdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:8c:6a:28:6a:a5:45:b3:7d:52:32:f7:b0:18:45:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77ec95a204c3b580259e1b42fa90e17c6f435d6
        Validity
            Not Before: Jul 21 12:00:22 2026 GMT
            Not After : Jul 22 12:00:22 2026 GMT
        Subject: CN=8d09522350ad47b26a82d8c085801836872304f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:18:84:cd:36:37:48:e5:5a:e9:2f:92:da:ab:
                    af:08:80:0a:93:76:25:27:cb:8b:dc:ef:dd:4f:2b:
                    20:40:a7:c0:40:43:2e:06:e9:a0:ba:6e:ba:90:72:
                    8a:45:8c:47:02:b9:89:ab:d3:07:d4:d3:c1:bf:93:
                    8b:d9:14:19:ac:aa:9c:57:94:e4:da:d8:1d:9f:8f:
                    a5:3e:b4:78:a4:33:81:18:cc:7b:66:b2:ed:4d:66:
                    73:1e:75:d2:82:ef:23:3e:5f:16:27:29:7d:cf:14:
                    b2:71:48:90:48:cf:7e:3a:65:25:3f:41:c4:f6:18:
                    a1:9f:2b:a0:38:94:25:ac:b5:cf:cf:f6:e4:29:2b:
                    14:e0:75:81:bf:41:23:b5:5d:d7:ab:f2:e3:b5:4c:
                    90:55:2a:50:85:66:87:4a:15:c2:1a:7f:96:80:d0:
                    09:d8:ac:01:cf:20:f0:56:61:8c:bd:1b:a5:82:70:
                    6c:7f:8a:ff:3f:46:0b:e3:b7:80:8a:58:62:44:50:
                    68:01:2a:b6:e9:38:cb:2c:69:23:52:af:bb:73:ea:
                    67:f6:56:a5:a2:97:61:e8:4b:66:0b:b2:e9:83:a4:
                    e1:31:53:ec:c7:63:c0:2b:b5:85:e5:6d:c4:7d:09:
                    68:7e:20:de:11:0c:7e:06:63:8e:73:bc:39:73:f2:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:09:52:23:50:AD:47:B2:6A:82:D8:C0:85:80:18:36:87:23:04:F3
            X509v3 Authority Key Identifier:
                keyid:F7:7E:C9:5A:20:4C:3B:58:02:59:E1:B4:2F:A9:0E:17:C6:F4:35:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/937JWiBMO1gCWeG0L6kOF8b0NdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b6:2b:c1:ad:d1:19:b3:2a:df:62:44:4a:16:fd:8a:8a:31:
         3e:ab:3b:69:57:13:9c:1b:70:12:35:ea:8b:86:61:58:c4:22:
         5c:a0:ad:0a:4a:fd:ae:5b:14:3c:a2:ac:54:fe:dd:e9:5b:42:
         4a:d4:e8:85:b2:e3:c7:c8:16:10:c9:3b:27:33:2e:4a:17:52:
         6b:0f:c4:ed:52:14:f7:d0:50:65:01:43:47:10:a6:97:d0:a8:
         13:7a:d4:95:23:f3:77:6f:10:90:b6:42:8c:15:40:2c:c0:73:
         e9:ac:62:1e:32:88:6f:0b:d1:18:94:f4:d5:84:83:e1:8d:1b:
         b0:d4:44:54:db:f6:0b:87:96:a4:36:e1:59:7f:cb:ad:09:d7:
         71:49:ca:91:86:16:91:d8:57:8e:f6:4a:28:e3:ce:44:d1:2a:
         0f:50:65:65:9d:57:53:6d:86:ea:0b:40:db:f6:5b:3b:49:54:
         fd:a3:61:39:b2:58:b1:9d:46:0f:53:1f:85:71:94:cf:f7:3e:
         d4:79:ce:39:25:9c:15:b5:37:06:e4:6f:0d:3f:38:ce:ef:13:
         80:24:eb:98:1e:c6:4d:cb:c5:80:65:f9:2b:e2:7f:f6:6a:d0:
         21:56:42:5e:ca:c5:f9:26:c1:f4:d0:6d:20:ca:3e:3b:ab:b5:
         33:52:74:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:05:35 2026 by rpki-client