Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.mft
File:                     37vW4jRjws_nksNuCJDwORjvR3Y.mft (raw, json)
Hash identifier:          WIo1nJg66cjendvkxejrU7eMnM6TbWDfqgaU3UAYNe4=
Subject key identifier:   AF:39:BF:8D:10:9F:FB:7C:B2:34:FC:FB:AF:CF:46:A4:39:BB:66:E1
Authority key identifier: DF:BB:D6:E2:34:63:C2:CF:E7:92:C3:6E:08:90:F0:39:18:EF:47:76
Certificate issuer:       /CN=dfbbd6e23463c2cfe792c36e0890f03918ef4776
Certificate serial:       01A02055F8B4B23D1EA8FB191AEB2C8230F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37vW4jRjws_nksNuCJDwORjvR3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.mft
Manifest number:          8A
Signing time:             Thu 20 Aug 2026 18:01:40 +0000
Manifest this update:     Thu 20 Aug 2026 18:01:40 +0000
Manifest next update:     Fri 21 Aug 2026 18:01:40 +0000
Files and hashes:         1: 37vW4jRjws_nksNuCJDwORjvR3Y.crl (hash: 4w0yRHUzDPJ3aRTwygwJN5sOWkQ2HdAdIl/UPkGp3CI=)
                          2: HEpXx1GuDm6pFVtpLnHtxNpMO9Y.roa (hash: tNzUz8TO8cxTdfFMpjwmZvhvqK90TMGjLBcjKoUnlmA=)
                          3: Q3FlZaHbfe97Ya2ctinsMhbMg6k.roa (hash: B8ovH3yxhb7kee2E2Jk3h0+UXovqy1ie9A9tiJC+spQ=)
                          4: _o3RG8HCxg3kYi7SWKCECN8Dc-s.roa (hash: l4HEiSIeS1Uze7gfCNfYBbS9icVIyNRT57lfLSvDPr4=)
                          5: mNljW1fiHUWF5_4n9iHPA5F7x-o.roa (hash: R/ng7QspQtSVVmsYFGHTQso1tP46kygFVqwngENuGDA=)
                          6: nqjEED_CDPZlYI6-L69dtEKf0YA.roa (hash: Z0BAi8q6X2llUNO1mxSzOF3Vs0/hSR2lV4VlcJ+fceE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37vW4jRjws_nksNuCJDwORjvR3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:55:f8:b4:b2:3d:1e:a8:fb:19:1a:eb:2c:82:30:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfbbd6e23463c2cfe792c36e0890f03918ef4776
        Validity
            Not Before: Aug 20 18:01:40 2026 GMT
            Not After : Aug 21 18:01:40 2026 GMT
        Subject: CN=af39bf8d109ffb7cb234fcfbafcf46a439bb66e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:88:b9:c1:25:c5:ab:57:89:f6:bf:42:ba:c3:
                    b7:46:15:7c:30:40:d3:d3:c6:f6:f3:54:eb:6f:d1:
                    0e:82:cb:a5:e2:e5:5d:44:b2:25:18:b7:87:57:e5:
                    8e:58:b7:bd:bd:de:18:30:8c:32:87:6d:03:a6:77:
                    68:6e:dd:e0:4c:66:2b:6b:e7:69:8c:9a:3d:f5:c3:
                    0c:1e:4d:3d:f1:d8:b2:93:e1:a8:b4:f8:ba:50:17:
                    a2:92:ea:87:dd:3c:5a:b6:f2:a0:2f:4a:e9:e5:06:
                    2c:09:75:13:56:b8:21:91:01:c6:1a:af:66:ac:7e:
                    0c:74:20:41:fa:ba:71:79:90:24:70:56:f0:de:5f:
                    4a:53:8c:57:9a:61:be:ea:cf:71:54:80:e6:e0:9f:
                    30:33:e9:dd:56:15:51:e4:c6:4b:97:6c:9d:65:70:
                    b7:09:00:71:ce:2e:6b:75:cc:c2:6d:b8:13:0a:1b:
                    83:5c:69:67:e3:1c:27:de:db:46:46:4e:6b:c8:49:
                    c9:ee:cf:24:62:91:4d:23:6a:d0:b5:61:1d:63:a8:
                    d5:93:f9:c2:9c:10:6f:05:41:af:b6:b1:f2:b5:33:
                    08:21:1b:20:00:8c:19:9a:86:b8:88:46:00:b6:4f:
                    13:2a:f6:71:d7:04:b8:2f:65:38:a5:09:63:ce:37:
                    1e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:39:BF:8D:10:9F:FB:7C:B2:34:FC:FB:AF:CF:46:A4:39:BB:66:E1
            X509v3 Authority Key Identifier:
                keyid:DF:BB:D6:E2:34:63:C2:CF:E7:92:C3:6E:08:90:F0:39:18:EF:47:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37vW4jRjws_nksNuCJDwORjvR3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8d:52:a3:0e:89:1a:8f:f3:66:8d:e0:23:72:db:fa:63:16:
         30:3c:1e:8f:b5:50:4f:a8:0b:9a:72:d0:1e:cc:ca:c8:d8:70:
         5b:87:da:ee:3a:b0:9b:f4:74:9d:da:04:c2:a4:be:70:f4:26:
         07:58:2e:48:b8:cd:a6:51:51:20:90:51:a3:dc:2d:c1:06:4d:
         af:aa:a9:12:41:6f:e6:1c:6d:de:eb:75:d9:46:0e:e8:7e:5d:
         9b:11:31:60:2b:6d:2b:6f:76:86:b9:96:d2:9f:42:5e:10:b8:
         7a:cb:8b:0a:81:46:75:20:d9:a3:48:7e:fb:d6:7f:83:71:00:
         1d:f6:ca:51:7b:3e:bb:33:fe:2e:2c:a3:49:93:48:13:23:07:
         ab:79:60:60:c5:cb:f6:bc:93:86:5e:cb:74:53:3b:4b:64:0f:
         f2:37:96:83:fd:08:68:49:87:66:a0:27:27:c9:d7:e4:8b:03:
         9f:65:26:67:99:5d:18:42:c4:90:d8:71:2f:9e:f8:61:ff:9b:
         64:f1:e4:45:f0:8b:46:da:8e:1b:8a:fa:51:ac:ca:0c:28:65:
         f2:b0:47:10:0a:c8:39:a7:fe:5d:f7:45:95:06:75:db:ab:b9:
         07:1d:a2:2e:52:8c:b9:6f:c3:61:20:14:5c:95:6e:90:16:b6:
         fd:b8:0d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:14 2026 by rpki-client