Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft
File:                     937JWiBMO1gCWeG0L6kOF8b0NdY.mft (raw, json)
Hash identifier:          BSw9b/3JNS+28Ckag2eTg8CNJh2oG2hjSVeOJNRGsU8=
Subject key identifier:   B9:8F:B8:4A:CF:51:75:4D:F8:D8:FE:A3:7E:1B:F1:F6:64:AA:E5:21
Authority key identifier: F7:7E:C9:5A:20:4C:3B:58:02:59:E1:B4:2F:A9:0E:17:C6:F4:35:D6
Certificate issuer:       /CN=f77ec95a204c3b580259e1b42fa90e17c6f435d6
Certificate serial:       01A0CAEBD4A085D73A43B3550924D5752AF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/937JWiBMO1gCWeG0L6kOF8b0NdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft
Manifest number:          0178
Signing time:             Tue 22 Sep 2026 21:00:48 +0000
Manifest this update:     Tue 22 Sep 2026 21:00:48 +0000
Manifest next update:     Wed 23 Sep 2026 21:00:48 +0000
Files and hashes:         1: 937JWiBMO1gCWeG0L6kOF8b0NdY.crl (hash: 9wIGnBmqBmhoBoVb1INF0jhU0QHgttSxJBG7+agu5DQ=)
                          2: XqcpVCeX0-cvU-SqoEfBG7M0CYI.roa (hash: Um6sqZHxrN2dTouXpZfutLZlTxwDMybqIAW6glre92s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/937JWiBMO1gCWeG0L6kOF8b0NdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:eb:d4:a0:85:d7:3a:43:b3:55:09:24:d5:75:2a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77ec95a204c3b580259e1b42fa90e17c6f435d6
        Validity
            Not Before: Sep 22 21:00:48 2026 GMT
            Not After : Sep 23 21:00:48 2026 GMT
        Subject: CN=b98fb84acf51754df8d8fea37e1bf1f664aae521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:42:ad:74:0a:12:49:a0:fe:c2:93:f0:7c:
                    da:d4:fa:7f:0a:68:38:37:ce:f5:1b:52:74:a3:01:
                    f2:e4:ea:d5:ce:0c:3e:00:93:53:86:46:fe:0f:ff:
                    7c:10:b3:6b:05:83:3e:b5:fa:68:77:11:89:3a:06:
                    db:46:23:38:ab:4a:30:30:ae:cc:2d:8c:fa:18:b9:
                    82:1b:27:3c:d0:4e:cb:2b:01:e6:da:5f:4d:18:05:
                    49:8e:96:01:17:3f:65:f5:c3:72:31:3e:35:da:5b:
                    db:79:dd:94:33:ab:b3:a3:d4:30:a3:25:4a:2a:a4:
                    60:b5:16:a7:c2:13:83:bc:bf:55:87:7c:4b:fd:97:
                    db:e2:53:be:c2:d2:0c:1c:6d:84:09:e3:3c:90:2d:
                    08:cf:54:42:36:ae:29:68:26:44:ce:14:60:f0:57:
                    73:19:dc:ae:38:17:ae:5f:f4:bb:f4:de:04:e0:d8:
                    23:be:d3:33:c7:28:e9:e1:07:09:f8:0b:74:0c:0f:
                    52:d0:e2:57:59:95:87:2a:bc:b9:09:e2:1e:9c:41:
                    c2:3c:b5:8d:1f:24:0b:e7:ec:2e:7f:88:92:0e:f5:
                    31:3c:06:4b:2a:66:e2:4b:56:76:59:90:48:21:b0:
                    02:06:1d:8d:83:6f:50:37:1a:d0:39:02:79:7d:c4:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8F:B8:4A:CF:51:75:4D:F8:D8:FE:A3:7E:1B:F1:F6:64:AA:E5:21
            X509v3 Authority Key Identifier:
                keyid:F7:7E:C9:5A:20:4C:3B:58:02:59:E1:B4:2F:A9:0E:17:C6:F4:35:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/937JWiBMO1gCWeG0L6kOF8b0NdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d2:00:e1:12:b4:fe:a4:8b:48:0b:ed:88:2e:50:b5:ca:d0:
         67:40:37:8d:cd:2f:9a:e0:46:28:c7:25:37:66:ad:48:fc:a5:
         c0:38:67:f9:c9:bb:b9:0e:19:89:00:1f:49:0a:97:59:ef:7c:
         1b:aa:70:15:e8:69:b0:6a:d9:89:c0:01:75:a5:d7:36:f7:1c:
         05:f9:fe:59:fe:56:05:4a:2f:12:8f:3a:81:fc:42:e9:9b:55:
         fa:39:36:4b:ab:32:13:46:c4:d3:8c:0e:97:7d:ad:7a:4f:2a:
         13:03:bb:90:42:7a:d8:66:cd:9a:2e:f4:ff:67:a8:05:43:51:
         ec:8f:6e:21:67:78:da:86:d4:76:4a:8d:fe:da:92:1b:27:e8:
         3f:6b:d6:90:93:99:d3:55:dc:5c:a1:24:b8:ca:2b:61:dc:a7:
         a3:72:5d:c6:f0:58:20:4b:c6:a9:7f:0e:b7:4d:93:8c:bc:66:
         bc:d2:17:f6:09:e4:83:c2:e2:44:5b:0b:b3:da:be:15:e8:3b:
         83:fc:8a:65:90:60:d9:75:2c:c4:ed:78:95:c2:ec:59:af:9f:
         1d:5d:ca:73:d6:7c:95:0d:a3:35:e0:72:91:48:5b:4e:f9:6d:
         1a:e0:08:7a:7a:70:3f:b9:c4:e5:c3:bd:f9:66:d3:90:79:ca:
         7b:15:fc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:40:58 2026 by rpki-client