Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
File:                     37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json)
Hash identifier:          0GD/PFX4lPOUahtlnH01U0HFNuUXrRuwWg2anq+5t3w=
Subject key identifier:   A9:53:8D:C3:87:D0:F7:FF:F5:7E:1F:1D:A2:A8:41:16:72:E7:FD:B3
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Certificate issuer:       /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial:       01A11116CE5884B71B4822C0D822A3DFE6ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
Manifest number:          1A8D
Signing time:             Tue 06 Oct 2026 12:01:09 +0000
Manifest this update:     Tue 06 Oct 2026 12:01:09 +0000
Manifest next update:     Wed 07 Oct 2026 12:01:09 +0000
Files and hashes:         1: 28aRdczFMy_NGN1l2BbHpUWcrsw.roa (hash: bMy6fvXop3dbRIfN9XbRZ3EVtlEMOV2r+B3tLBXy9NY=)
                          2: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: tQra4zyY2tMxkBxtZ81Iw1nwpo7NFjcoraC32tgDbas=)
                          3: GsSJK2WMglrPgjnIUlUN6J5KRT4.roa (hash: UXgOBaxQJIWBvmn7laZX7AqFV1FM6ImsbsA9AanhVOw=)
                          4: UONacHTOKV6tfdjsDjhmW727_2Q.roa (hash: ydhSQx8wYrCZQamEIIKw85WTZPbrar6HXueA28NPho4=)
                          5: jaGFsM0UBl8DRADBm27ud6fxPc4.roa (hash: B/rg1ki5B0ZrfcN/NiwVQUlyMUumL+prN8/wqDje5I8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 12:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:16:ce:58:84:b7:1b:48:22:c0:d8:22:a3:df:e6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
        Validity
            Not Before: Oct  6 12:01:09 2026 GMT
            Not After : Oct  7 12:01:09 2026 GMT
        Subject: CN=a9538dc387d0f7fff57e1f1da2a8411672e7fdb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:99:ce:90:2f:4e:dc:48:ae:a4:63:34:b0:
                    35:a1:30:12:c3:1e:37:5e:2c:30:d1:d9:92:ef:7d:
                    39:e4:73:06:dc:bd:d7:0e:09:b5:95:4b:c2:8d:0f:
                    95:0f:6f:10:6c:e6:1c:e6:94:80:f2:0a:08:de:71:
                    08:9d:3d:9f:96:3d:82:57:be:d7:bf:c7:7d:26:99:
                    fe:0f:21:96:23:6e:5c:8a:ba:48:78:d1:90:06:64:
                    6b:47:87:72:c4:5e:8c:08:06:ea:fd:80:e9:fd:c5:
                    dc:c5:24:ab:5b:f2:85:c0:a0:20:c3:03:d0:36:d5:
                    9c:22:79:f3:5a:6b:8e:87:ee:87:2c:d6:05:06:73:
                    44:6e:00:e4:21:e5:dd:69:75:08:02:74:b0:5d:c2:
                    e6:1a:00:10:f5:7a:cf:32:d2:47:0d:d7:3e:1a:b8:
                    ec:2f:50:c9:b6:c0:a1:a7:a2:c0:8c:42:98:7b:a6:
                    bb:d9:8d:11:68:d9:e5:48:40:7f:81:fa:27:08:e3:
                    af:f7:62:7a:92:6d:9e:46:96:bc:d5:df:a7:fa:ce:
                    65:7b:47:0b:48:ad:1e:db:2d:96:5c:a2:6b:d9:6f:
                    b5:e2:5c:eb:e9:91:24:9a:aa:bf:df:19:45:af:61:
                    d4:68:eb:c6:42:98:96:ec:83:f8:4e:71:be:9c:3c:
                    93:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:53:8D:C3:87:D0:F7:FF:F5:7E:1F:1D:A2:A8:41:16:72:E7:FD:B3
            X509v3 Authority Key Identifier:
                keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:70:2b:59:87:e4:0c:4b:4c:32:a6:d5:2d:a9:2e:dd:ac:5d:
         28:d7:fe:98:15:c3:fc:6e:c5:91:f4:dc:b6:c1:09:e7:be:f1:
         40:a4:1b:21:98:7c:31:7c:02:87:f3:cc:98:1b:cb:6c:83:44:
         30:63:a3:ed:ba:79:05:db:b3:3f:7d:cb:69:37:f1:50:82:5c:
         0a:b4:ae:5d:fc:33:fe:19:22:38:41:be:19:d4:5a:ef:08:bf:
         b8:22:59:25:33:f8:29:1e:d6:35:d2:96:f6:2c:9d:87:99:e2:
         45:bb:e9:00:0d:7b:f3:bd:75:af:a7:09:1a:e2:bd:bd:12:61:
         54:8d:66:9c:68:fc:8b:e6:6d:05:c6:81:2e:ef:8a:6e:18:0b:
         14:9e:89:85:13:ba:9a:c5:89:d9:49:d0:05:ed:02:21:a5:11:
         b7:b5:a7:c3:37:47:ac:eb:00:43:c9:f2:60:6e:53:00:44:1e:
         d6:88:fe:e3:59:06:a0:9f:20:67:b8:20:3c:4b:ed:c9:6f:8d:
         64:6c:ad:2c:06:3c:ec:4c:8b:72:63:4f:6b:3a:c7:00:3c:cf:
         44:d0:19:50:ae:d3:1f:26:54:b2:c2:cc:55:dc:c6:f6:82:a9:
         73:d3:46:be:cd:5d:6f:0a:01:c9:c1:b6:24:18:05:45:7d:aa:
         c2:da:81:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:55:34 2026 by rpki-client