Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
File:                     g37WYCvCfxlqSe5LMGoPpt7p0p0.mft (raw, json)
Hash identifier:          FFtQenCfBXC0UIwH59Q8NLDNm6uHrnaUBibwR3sB4SE=
Subject key identifier:   03:63:30:90:23:6F:E0:47:F0:5B:45:D8:C0:6D:A9:74:86:05:7F:8B
Authority key identifier: 83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
Certificate issuer:       /CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Certificate serial:       019FA11706F28CFD1BB3DE0857F0B501740C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
Manifest number:          0B41
Signing time:             Mon 27 Jul 2026 01:01:08 +0000
Manifest this update:     Mon 27 Jul 2026 01:01:08 +0000
Manifest next update:     Tue 28 Jul 2026 01:01:08 +0000
Files and hashes:         1: g37WYCvCfxlqSe5LMGoPpt7p0p0.crl (hash: hI0XxB3Jmyubg2MndbjxtS+AJufvvUYp8Yn30GbtL3Y=)
                          2: s4KA3DwYrQJUsZJrjPBP7stbDkA.roa (hash: C4D/As4F5fcHYHPJJ6R95R5HyZ/76PW92tetLSNxy3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:17:06:f2:8c:fd:1b:b3:de:08:57:f0:b5:01:74:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
        Validity
            Not Before: Jul 27 01:01:08 2026 GMT
            Not After : Jul 28 01:01:08 2026 GMT
        Subject: CN=03633090236fe047f05b45d8c06da97486057f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:a6:40:26:7d:f6:67:64:09:d0:14:72:0d:
                    50:ae:78:fb:2e:1e:ed:5f:26:54:70:b0:69:8a:e9:
                    52:e4:24:18:e9:ea:45:44:72:97:4b:5a:52:94:c4:
                    55:62:7d:6f:ee:98:0f:7f:ed:d4:3d:a2:a6:36:2a:
                    6f:ec:18:7e:35:4f:5f:76:8d:90:b8:ed:e5:f9:6f:
                    9a:d4:7d:74:a1:a2:e3:c5:9b:3a:60:29:6f:26:f5:
                    a2:78:03:15:f6:20:05:19:4b:42:ce:02:1b:4d:25:
                    e5:32:4c:fa:09:4a:57:6c:0b:2b:4e:c8:bc:41:ac:
                    c2:92:dc:4d:50:92:4a:b0:b5:c7:07:75:32:6f:1c:
                    ee:69:15:12:d2:45:37:c4:7b:84:68:ec:21:65:3c:
                    39:eb:86:85:7b:fb:78:1d:d0:ca:89:27:b2:35:73:
                    77:ad:e2:30:48:26:cf:09:dc:c0:bd:0f:c7:77:b2:
                    67:c0:a2:f0:9a:3c:e7:3f:94:79:9f:1e:6d:3e:28:
                    55:5f:8a:3b:55:46:1d:47:0c:cc:e2:ff:92:1a:a4:
                    58:c9:5a:21:58:15:d5:cf:5d:b3:7e:5e:1f:a7:fe:
                    c6:33:36:f0:dd:d8:c7:e8:8b:cf:ac:02:2d:c5:a4:
                    9a:7a:0a:4f:57:28:7e:bc:07:3c:aa:36:6e:25:fd:
                    88:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:63:30:90:23:6F:E0:47:F0:5B:45:D8:C0:6D:A9:74:86:05:7F:8B
            X509v3 Authority Key Identifier:
                keyid:83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:99:2b:1e:84:3b:ef:d3:60:34:31:44:51:d9:35:ef:5c:de:
         dd:82:c3:38:c7:ef:95:93:8d:74:9f:ec:53:14:52:5a:f7:b8:
         9e:ed:1b:d9:2f:74:59:d7:36:ca:43:18:60:89:4f:9d:48:88:
         5f:b0:7f:00:e2:16:d5:5e:92:89:ed:8e:c9:16:d6:29:c9:b6:
         c0:0b:3e:c1:00:67:23:4a:40:39:ee:6d:b4:31:7d:9d:28:a6:
         fe:10:71:96:0f:e0:41:ed:f3:f5:70:58:c8:76:b9:ff:24:d2:
         c6:0d:0e:19:c3:ed:52:4a:f8:be:fe:ed:35:a0:32:95:52:ee:
         42:16:bb:1a:07:88:7f:32:40:60:42:6f:54:ac:77:fb:7a:4e:
         4b:b8:51:da:98:e1:2a:bf:aa:84:0d:8b:c9:84:c3:a4:53:9f:
         22:7a:dc:e6:1c:d6:b6:85:76:4e:b7:9f:15:a7:b3:bc:0c:a1:
         e1:0d:6b:59:2f:7f:c4:dc:4f:ad:f3:9f:18:d7:8e:95:f1:83:
         b9:dc:55:a2:72:93:08:2f:2b:31:44:e9:92:cc:cc:3e:59:1b:
         be:aa:08:33:64:51:b1:40:b1:1b:4a:42:6e:88:e9:37:fa:e5:
         9f:8b:cd:99:1f:dc:dc:1d:57:4b:40:b3:61:f0:01:12:4f:52:
         72:eb:b0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:55:46 2026 by rpki-client