Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
File:                     37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json)
Hash identifier:          Kb1zmj0GioP8SvU/yIEDIEsBs4MfL4PUT53ks0Ho+nA=
Subject key identifier:   B7:5E:D6:C5:FF:F4:41:6D:17:06:3E:20:CA:FE:86:56:F4:78:68:F1
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Certificate issuer:       /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial:       01A114F3D9C367F246952799D80555C2B16E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
Manifest number:          1A8F
Signing time:             Wed 07 Oct 2026 06:01:27 +0000
Manifest this update:     Wed 07 Oct 2026 06:01:27 +0000
Manifest next update:     Thu 08 Oct 2026 06:01:27 +0000
Files and hashes:         1: 28aRdczFMy_NGN1l2BbHpUWcrsw.roa (hash: bMy6fvXop3dbRIfN9XbRZ3EVtlEMOV2r+B3tLBXy9NY=)
                          2: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: KqIQnoeq8R0Y1Cd6qTrsjhc0Y6yyQG/ROStBxFRtTZ0=)
                          3: GsSJK2WMglrPgjnIUlUN6J5KRT4.roa (hash: UXgOBaxQJIWBvmn7laZX7AqFV1FM6ImsbsA9AanhVOw=)
                          4: UONacHTOKV6tfdjsDjhmW727_2Q.roa (hash: ydhSQx8wYrCZQamEIIKw85WTZPbrar6HXueA28NPho4=)
                          5: jaGFsM0UBl8DRADBm27ud6fxPc4.roa (hash: B/rg1ki5B0ZrfcN/NiwVQUlyMUumL+prN8/wqDje5I8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:f3:d9:c3:67:f2:46:95:27:99:d8:05:55:c2:b1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
        Validity
            Not Before: Oct  7 06:01:27 2026 GMT
            Not After : Oct  8 06:01:27 2026 GMT
        Subject: CN=b75ed6c5fff4416d17063e20cafe8656f47868f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:42:3a:cc:17:46:59:b7:b1:03:b6:20:9c:
                    96:e9:c1:1d:d4:2c:70:5d:87:ed:12:f5:be:6d:aa:
                    f5:e2:99:be:31:c5:e4:1b:55:55:d4:4d:d9:25:08:
                    35:b5:a7:4c:3b:43:30:d0:b0:b5:36:ba:ac:95:9d:
                    ca:94:d8:06:23:07:1b:e7:62:e7:fc:90:27:61:6b:
                    1a:3e:12:fe:38:48:f0:53:6e:01:b3:1b:83:fd:a9:
                    e6:14:cb:ee:e8:3c:79:2f:14:d8:28:20:21:5e:e6:
                    15:1a:3c:d4:99:d6:b0:e9:57:4c:81:03:1b:fd:ca:
                    94:de:70:43:aa:73:19:8e:4b:17:a0:0a:fc:8b:13:
                    15:fa:51:60:5b:82:27:03:16:69:19:93:e7:f2:69:
                    76:0f:83:bd:86:12:be:ea:aa:be:92:fe:8d:a2:07:
                    5c:52:f4:5d:29:02:7a:32:1c:89:e7:99:9d:ed:28:
                    37:0d:e8:79:2a:b0:85:74:0a:0f:16:50:61:c7:c0:
                    74:59:83:0e:83:0e:19:f5:4a:c8:6a:8b:a2:13:f7:
                    da:98:27:d1:a8:a6:d2:cc:06:99:ad:09:fa:93:42:
                    5e:3b:28:6a:77:9b:3d:79:da:10:fb:39:8e:3a:ae:
                    03:ad:90:a0:00:04:05:4a:c7:46:e5:68:18:ff:d0:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5E:D6:C5:FF:F4:41:6D:17:06:3E:20:CA:FE:86:56:F4:78:68:F1
            X509v3 Authority Key Identifier:
                keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:8e:eb:5a:63:52:78:5d:15:6a:2e:9b:d7:21:57:60:23:02:
         68:ac:6c:11:be:d7:97:58:be:65:ac:e2:11:d2:fa:0a:e8:c0:
         29:70:01:ff:f2:2d:0c:58:53:1e:00:3f:73:51:33:1f:b7:10:
         1a:51:96:ec:9a:76:38:ee:a1:2f:08:58:3c:16:b1:65:be:49:
         dd:80:b7:2f:6c:64:e0:02:7d:c6:ab:82:80:b7:82:1e:13:4f:
         18:1a:93:e8:d2:26:97:0d:63:fc:66:82:f8:fe:ae:25:23:21:
         76:0e:d2:3c:0b:0c:19:40:37:63:78:c8:a4:b2:ec:15:74:6b:
         c4:40:87:bc:5a:bf:d7:ca:2a:76:6b:ce:ce:f7:f5:23:93:1e:
         e4:6b:69:6b:31:e1:cb:90:fa:5a:c9:f9:31:32:73:c8:1a:48:
         50:62:7f:6d:8e:be:31:a0:aa:e8:37:b7:14:7e:ce:4e:e1:9a:
         9e:ad:16:5f:8b:ab:38:ff:ec:51:82:03:e5:fa:95:27:1b:04:
         cb:5f:bf:06:62:7c:43:b6:77:e4:c3:b6:fa:54:9e:71:c4:5b:
         db:13:39:1e:6e:69:5b:8e:82:82:7f:fe:ba:41:c0:23:5f:41:
         9f:5f:ed:70:0e:e4:58:92:fc:43:cc:79:67:b6:ad:7c:6b:05:
         13:bc:e5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:26:11 2026 by rpki-client