Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.mft
File:                     37vW4jRjws_nksNuCJDwORjvR3Y.mft (raw, json)
Hash identifier:          0WSOJ/FVSSYi1XLNkEHFRPx5AYiTMZwn/HNLagWznC8=
Subject key identifier:   60:71:ED:C7:81:84:A0:3F:6D:D9:A8:E4:DE:FA:AE:3B:70:04:3B:13
Authority key identifier: DF:BB:D6:E2:34:63:C2:CF:E7:92:C3:6E:08:90:F0:39:18:EF:47:76
Certificate issuer:       /CN=dfbbd6e23463c2cfe792c36e0890f03918ef4776
Certificate serial:       019F36A9F71455EF2C68742A344D96E29EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37vW4jRjws_nksNuCJDwORjvR3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.mft
Manifest number:          11
Signing time:             Mon 06 Jul 2026 09:02:16 +0000
Manifest this update:     Mon 06 Jul 2026 09:02:16 +0000
Manifest next update:     Tue 07 Jul 2026 09:02:16 +0000
Files and hashes:         1: 37vW4jRjws_nksNuCJDwORjvR3Y.crl (hash: bRnJK7Nfo5hucWL+tboR8XlkAS/8NR+zEHutEjPQeYo=)
                          2: HEpXx1GuDm6pFVtpLnHtxNpMO9Y.roa (hash: tNzUz8TO8cxTdfFMpjwmZvhvqK90TMGjLBcjKoUnlmA=)
                          3: Q3FlZaHbfe97Ya2ctinsMhbMg6k.roa (hash: B8ovH3yxhb7kee2E2Jk3h0+UXovqy1ie9A9tiJC+spQ=)
                          4: _o3RG8HCxg3kYi7SWKCECN8Dc-s.roa (hash: l4HEiSIeS1Uze7gfCNfYBbS9icVIyNRT57lfLSvDPr4=)
                          5: mNljW1fiHUWF5_4n9iHPA5F7x-o.roa (hash: R/ng7QspQtSVVmsYFGHTQso1tP46kygFVqwngENuGDA=)
                          6: nqjEED_CDPZlYI6-L69dtEKf0YA.roa (hash: Z0BAi8q6X2llUNO1mxSzOF3Vs0/hSR2lV4VlcJ+fceE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37vW4jRjws_nksNuCJDwORjvR3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 09:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:36:a9:f7:14:55:ef:2c:68:74:2a:34:4d:96:e2:9e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfbbd6e23463c2cfe792c36e0890f03918ef4776
        Validity
            Not Before: Jul  6 09:02:16 2026 GMT
            Not After : Jul  7 09:02:16 2026 GMT
        Subject: CN=6071edc78184a03f6dd9a8e4defaae3b70043b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:8e:54:e5:15:33:66:22:a9:6f:19:47:1b:
                    ff:36:58:10:c8:0d:ac:82:5e:b7:c7:34:4c:06:b7:
                    9f:4e:38:4f:9a:7e:6d:e4:fa:00:61:39:ae:94:31:
                    77:10:80:a4:d8:09:16:05:36:d7:b8:3b:d4:9f:74:
                    d0:ee:99:7e:0a:53:51:77:66:d5:76:f3:a5:29:4f:
                    39:f8:85:08:7e:c5:e6:09:e1:c6:a2:b6:c0:5c:ab:
                    d0:ed:67:41:00:48:57:5e:0c:04:29:ac:98:67:ed:
                    5f:5c:28:c3:6c:c3:84:36:e6:51:9b:63:64:ef:9a:
                    19:5b:42:2b:ec:d1:fa:5d:d2:80:fa:4c:fb:77:bc:
                    5c:a6:71:62:fb:a1:7a:c0:22:c5:c3:d4:63:2f:e1:
                    d4:80:b1:68:39:0a:5e:b4:b4:cf:2a:67:74:96:aa:
                    fb:0c:21:65:b4:83:53:20:2f:d9:c2:79:c8:23:3c:
                    e2:d8:8d:65:ad:d9:60:f6:70:81:87:ac:90:90:57:
                    dd:90:41:55:eb:25:ac:89:92:a9:14:bd:67:b6:f7:
                    ff:8e:d4:86:f4:6f:50:f4:44:af:a8:4f:ab:e7:f7:
                    c4:49:58:b7:e0:47:9c:f3:4a:73:01:c4:dd:84:d4:
                    5d:4e:76:b8:9d:0b:d5:55:e0:7b:a5:7e:3f:da:8f:
                    a3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:71:ED:C7:81:84:A0:3F:6D:D9:A8:E4:DE:FA:AE:3B:70:04:3B:13
            X509v3 Authority Key Identifier:
                keyid:DF:BB:D6:E2:34:63:C2:CF:E7:92:C3:6E:08:90:F0:39:18:EF:47:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37vW4jRjws_nksNuCJDwORjvR3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a7:b6:73:b1:b6:88:49:48:be:eb:76:53:fa:0e:52:e2:ae:
         27:78:cf:d5:a1:91:41:c4:60:f1:9f:0f:74:b8:c7:e9:29:4d:
         a2:a4:25:d3:24:9c:9a:7b:87:32:6c:75:42:86:db:51:e5:3f:
         b9:97:18:83:bd:76:35:9b:2c:05:ff:f8:d3:3c:fb:c2:df:ef:
         8c:be:34:6b:7e:e8:ff:6e:a6:54:dd:67:93:54:9d:e7:0c:a0:
         04:e5:24:32:20:8d:94:01:ca:81:c8:43:1f:48:06:49:4c:f8:
         d9:f7:93:0e:16:d7:ec:9d:46:c1:ec:fa:cf:f7:b8:a2:a0:de:
         64:3f:ba:e7:72:72:a0:2b:00:45:00:ac:4b:db:58:df:0e:3c:
         9e:88:e6:ad:3c:20:9c:79:69:55:90:6f:3f:88:3c:a8:1c:76:
         5c:43:97:92:8f:58:bf:07:b7:17:b3:f1:39:91:19:e4:d4:e8:
         d8:72:39:ae:a2:62:44:82:7c:a7:93:ae:0d:a2:59:8d:3f:53:
         56:37:a9:98:ac:46:02:ac:4f:dc:a7:fc:21:1a:d0:e2:6f:db:
         21:97:0d:33:97:69:8a:d7:ae:ea:4e:db:b7:db:5e:3d:29:5a:
         bd:79:2b:68:82:43:a1:e1:08:5f:69:48:43:16:73:0f:b2:8f:
         a2:79:f0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:04:13 2026 by rpki-client