Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
File:                     37H24AFTpJGGEbFLawP2gS7YikM.mft (raw, json)
Hash identifier:          OmU37hhA53zqsV8W/tY9VOq1Fo9T7UqOk4CZX9uNAqI=
Subject key identifier:   28:19:4A:46:EA:84:7C:87:60:DF:A2:5D:5B:4F:1C:98:1F:08:37:40
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Certificate issuer:       /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial:       01A103929DC0AB8CD8AB46167E862900CB32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
Manifest number:          1394
Signing time:             Sat 03 Oct 2026 21:01:42 +0000
Manifest this update:     Sat 03 Oct 2026 21:01:42 +0000
Manifest next update:     Sun 04 Oct 2026 21:01:42 +0000
Files and hashes:         1: 37H24AFTpJGGEbFLawP2gS7YikM.crl (hash: c+P1HfilHWlfJu44beMnk7o/yNCYOYQBYW3Gr0rYzxs=)
                          2: _nu4AgdKyCMg5x3LfQVMwvf9JfE.roa (hash: wZ+QOk95biZDKWTdOhLdR/nTi12VXBXYcUjUw39y42Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:92:9d:c0:ab:8c:d8:ab:46:16:7e:86:29:00:cb:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
        Validity
            Not Before: Oct  3 21:01:42 2026 GMT
            Not After : Oct  4 21:01:42 2026 GMT
        Subject: CN=28194a46ea847c8760dfa25d5b4f1c981f083740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3e:8b:90:5c:9f:27:40:97:c5:c1:39:a5:7f:
                    62:d3:7a:fa:91:34:b2:e9:30:b8:1f:f4:4f:72:7b:
                    41:3c:0d:ab:3e:ee:ed:1a:a1:c7:bd:a7:7f:47:66:
                    4d:9a:df:56:09:b4:76:f6:54:fb:27:03:8e:81:67:
                    d2:f9:18:9a:85:10:2f:35:20:91:08:c5:34:19:e3:
                    c1:56:e1:bf:42:90:b2:08:5a:f9:25:50:23:38:0b:
                    aa:7d:42:69:eb:90:8b:4d:91:73:58:18:a8:ad:d1:
                    a8:29:c6:14:c6:36:cc:88:37:87:02:51:eb:82:23:
                    20:be:71:da:12:52:02:a7:97:c9:ce:a4:31:e6:a2:
                    a3:28:bd:ab:3f:70:e5:32:83:3d:62:dd:5b:f4:6a:
                    88:cf:06:47:c9:a8:90:07:8a:bd:23:c6:5c:f5:4c:
                    0a:67:8e:3a:e6:e1:27:6c:b9:3b:4a:3a:45:01:6d:
                    3e:e6:d0:00:95:43:7d:f5:8c:b3:6d:1d:0b:95:ca:
                    08:e9:26:e7:c7:71:39:1d:91:fc:2d:f4:95:8b:a2:
                    8a:58:13:b4:b4:c8:05:ee:97:ab:47:4c:68:2f:66:
                    d8:09:59:c9:a8:61:3d:2e:1a:48:8a:4c:13:1c:e9:
                    cb:d2:fd:f7:26:92:c1:22:a3:99:b8:1a:a6:2d:0a:
                    a8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:19:4A:46:EA:84:7C:87:60:DF:A2:5D:5B:4F:1C:98:1F:08:37:40
            X509v3 Authority Key Identifier:
                keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:23:6a:4c:ab:62:dd:05:ed:47:a2:c7:da:8f:94:c3:9a:63:
         24:52:86:e5:9c:7c:9f:0b:af:b0:55:c1:f4:e5:f2:79:3b:75:
         7d:e4:7d:ba:fe:68:79:f5:46:18:c8:18:8c:00:2f:f4:74:65:
         83:ba:74:0f:48:23:ae:9d:24:84:57:f4:58:ef:f0:17:f5:98:
         b1:c9:88:9e:2f:f0:1b:3a:f1:76:59:25:cc:4d:08:f5:39:0c:
         48:91:06:2e:d8:eb:00:b2:52:f5:38:04:fe:f8:d8:ef:6f:07:
         f4:0e:ea:a6:4f:79:c7:ca:ee:06:71:32:e8:3f:b0:36:89:aa:
         7d:66:a9:8d:a2:6e:01:eb:69:1a:6d:b1:0a:f5:5c:22:4c:95:
         54:b7:08:9f:4d:78:ae:c3:15:5d:f8:f3:3c:3f:7b:d4:0e:af:
         e0:bd:d8:b4:0a:7d:94:e0:ef:ac:f5:75:47:33:97:ea:fa:2b:
         9f:3a:1d:ac:2d:0c:b1:81:05:ad:93:11:a0:07:09:7d:aa:e6:
         11:22:87:11:84:26:ec:ce:8a:86:af:63:15:e0:8d:ef:5d:18:
         fe:fa:93:8c:1c:4c:74:be:c4:0d:f3:8b:57:52:ae:70:87:59:
         f4:40:cd:95:c6:62:7f:b0:1e:fa:e2:45:2f:08:99:8c:72:b6:
         98:87:ac:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDkp3Aq4zYq0YWfoYpAMsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYjFmNmUwMDE1M2E0OTE4NjExYjE0YjZiMDNmNjgxMmVk
ODhhNDMwHhcNMjYxMDAzMjEwMTQyWhcNMjYxMDA0MjEwMTQyWjAzMTEwLwYDVQQD
EygyODE5NGE0NmVhODQ3Yzg3NjBkZmEyNWQ1YjRmMWM5ODFmMDgzNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz6LkFyfJ0CXxcE5pX9i03r6kTSy
6TC4H/RPcntBPA2rPu7tGqHHvad/R2ZNmt9WCbR29lT7JwOOgWfS+RiahRAvNSCR
CMU0GePBVuG/QpCyCFr5JVAjOAuqfUJp65CLTZFzWBiordGoKcYUxjbMiDeHAlHr
giMgvnHaElICp5fJzqQx5qKjKL2rP3DlMoM9Yt1b9GqIzwZHyaiQB4q9I8Zc9UwK
Z4465uEnbLk7SjpFAW0+5tAAlUN99YyzbR0LlcoI6Sbnx3E5HZH8LfSVi6KKWBO0
tMgF7perR0xoL2bYCVnJqGE9LhpIikwTHOnL0v33JpLBIqOZuBqmLQqoIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgZSkbqhHyHYN+iXVtPHJgfCDdAMB8GA1UdIwQY
MBaAFN+x9uABU6SRhhGxS2sD9oEu2IpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzdIMjRBRlRwSkdHRWJGTGF3UDJnUzdZaWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS81Mzc5ZTUtM2Q4NS00MWIxLTlkNzEt
ODEwNjI3ZmIyNjcxLzEvMzdIMjRBRlRwSkdHRWJGTGF3UDJnUzdZaWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS81Mzc5ZTUtM2Q4NS00MWIxLTlkNzEtODEwNjI3ZmIyNjcx
LzEvMzdIMjRBRlRwSkdHRWJGTGF3UDJnUzdZaWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtiNqTKti
3QXtR6LH2o+Uw5pjJFKG5Zx8nwuvsFXB9OXyeTt1feR9uv5oefVGGMgYjAAv9HRl
g7p0D0gjrp0khFf0WO/wF/WYscmIni/wGzrxdlklzE0I9TkMSJEGLtjrALJS9TgE
/vjY728H9A7qpk95x8ruBnEy6D+wNomqfWapjaJuAetpGm2xCvVcIkyVVLcIn014
rsMVXfjzPD971A6v4L3YtAp9lODvrPV1RzOX6vornzodrC0MsYEFrZMRoAcJfarm
ESKHEYQm7M6Khq9jFeCN710Y/vqTjBxMdL7EDfOLV1KucIdZ9EDNlcZif7Ae+uJF
LwiZjHK2mIes9A==
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:52:16 2026 by rpki-client