Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
File:                     37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft (raw, json)
Hash identifier:          q0naDfzLlV+lzneGrQZ7Mwla2Bwz8puLbXmP0Zlgazw=
Subject key identifier:   70:38:5B:C3:C7:7E:4E:BE:CE:88:60:DA:E3:9F:D5:39:85:94:07:78
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Certificate issuer:       /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial:       019E3004B3B4A229BA103F5ED836FEB44579
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
Manifest number:          0CB0
Signing time:             Sat 16 May 2026 09:01:14 +0000
Manifest this update:     Sat 16 May 2026 09:01:14 +0000
Manifest next update:     Sun 17 May 2026 09:01:14 +0000
Files and hashes:         1: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl (hash: 71Wu1GFp1tR/UZrqlWGjuBGTdHJm06vpXcdfzkhyv7c=)
                          2: gfNmYWuIvuunlCkfkDni5cxgfT0.roa (hash: SnoMtTLK31p4RRjzX3gGgwCqhz+VBN/cr3/eK2n8JQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:b3:b4:a2:29:ba:10:3f:5e:d8:36:fe:b4:45:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
        Validity
            Not Before: May 16 09:01:14 2026 GMT
            Not After : May 17 09:01:14 2026 GMT
        Subject: CN=70385bc3c77e4ebece8860dae39fd53985940778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:32:1a:73:74:bc:88:8b:15:5e:48:89:de:
                    ed:6e:2e:98:46:01:2f:84:d9:3b:1b:d0:c6:e5:a6:
                    9a:52:e3:ec:0a:f6:ea:e6:18:d5:89:13:f2:e6:e2:
                    65:4d:a4:09:e2:03:8b:ed:bb:e0:cb:5e:8b:80:f3:
                    39:9a:d2:50:c9:e1:6b:f0:71:b2:d5:9d:b8:98:b7:
                    59:71:f6:52:ce:64:77:30:3d:6d:e7:48:41:58:36:
                    f3:08:41:26:a5:a1:9c:c3:55:d9:36:bd:40:b4:29:
                    5e:28:19:e2:d9:b1:87:80:54:cf:c9:8c:71:c8:7f:
                    24:33:04:2c:ab:5f:e5:af:b0:be:3f:83:ff:2f:d0:
                    ae:f4:38:27:81:d8:ba:bf:59:25:c7:20:8d:58:84:
                    91:ed:23:2f:66:78:40:75:a4:62:f2:76:10:c2:78:
                    51:01:fe:f8:54:e0:08:8e:03:c3:41:ef:ca:c1:6f:
                    07:bb:3e:e2:f0:d7:22:45:ff:00:08:81:ef:86:cb:
                    46:4a:39:41:62:39:da:1e:bd:15:84:55:2b:20:0b:
                    bb:9c:7a:25:ad:d1:39:fb:8a:28:d0:36:10:1b:3c:
                    5d:50:26:1b:6f:6c:c2:a4:67:ef:c3:ff:d7:2a:7c:
                    22:20:96:34:c9:36:4e:92:56:fc:fe:ae:d5:60:04:
                    ab:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:38:5B:C3:C7:7E:4E:BE:CE:88:60:DA:E3:9F:D5:39:85:94:07:78
            X509v3 Authority Key Identifier:
                keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:87:5b:6c:9f:84:5f:40:f7:c3:bf:b5:f4:18:ac:09:aa:d9:
         1d:09:9e:28:00:6d:78:d1:06:7d:a9:03:e0:09:d7:f1:3a:32:
         46:82:60:39:6a:54:7d:a5:fe:1f:4c:00:bd:21:c5:d4:e1:14:
         4d:ec:e0:ef:ee:47:f6:de:6b:de:38:63:e2:20:f7:34:ec:84:
         1d:ed:98:d6:2e:fe:6c:0b:c2:f8:0b:16:95:35:1f:d1:5a:d8:
         22:34:42:97:6b:ba:ba:b0:8f:21:21:85:97:20:22:d8:d7:13:
         83:3e:3c:30:2e:c7:53:46:1f:94:db:2d:9f:e5:35:f7:0a:48:
         ae:a5:3a:22:77:09:12:46:ef:bd:7e:ba:83:3b:f9:15:59:45:
         86:07:93:7d:2f:3f:b4:5d:32:4d:71:96:d0:56:b0:99:f9:78:
         4f:01:60:a5:e0:13:24:e4:5f:fe:1f:0c:33:41:45:32:c7:10:
         ac:e8:37:3e:67:f4:a8:80:1f:c4:95:1f:a8:30:79:8f:94:cc:
         fa:97:b1:34:b5:e8:40:d4:8c:c6:81:71:4c:29:32:6a:3f:ae:
         5d:10:d7:ab:ce:c9:86:19:27:a5:2f:21:58:8f:fb:3f:50:4f:
         98:48:75:28:f7:10:e1:2f:9c:ba:9f:35:31:ef:5d:4a:d0:4e:
         c3:97:a3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:49 2026 by rpki-client