Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
File:                     37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft (raw, json)
Hash identifier:          vpfYzHaDnKtRbk+KjDmVr9kAu5TxIAzwmOmEjceOQVc=
Subject key identifier:   8D:91:04:93:4F:E2:C7:EF:1A:AE:7E:3E:56:69:82:37:23:7C:AE:D6
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Certificate issuer:       /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial:       019F8F7F956A75D1E54FB40E4FF007E40886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
Manifest number:          0D66
Signing time:             Thu 23 Jul 2026 15:02:10 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:10 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:10 +0000
Files and hashes:         1: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl (hash: q+8vtA3ZEPzEi/xebTIZHPffhUw7FL+STL5NjnTVw1Y=)
                          2: gfNmYWuIvuunlCkfkDni5cxgfT0.roa (hash: SnoMtTLK31p4RRjzX3gGgwCqhz+VBN/cr3/eK2n8JQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:95:6a:75:d1:e5:4f:b4:0e:4f:f0:07:e4:08:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
        Validity
            Not Before: Jul 23 15:02:10 2026 GMT
            Not After : Jul 24 15:02:10 2026 GMT
        Subject: CN=8d9104934fe2c7ef1aae7e3e56698237237caed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:29:b2:2a:e0:07:b3:44:28:63:af:4d:92:
                    35:da:dd:47:09:d2:a2:c8:14:4d:1b:40:f0:5a:34:
                    49:32:c6:c2:bb:21:86:94:ad:1f:18:82:98:55:db:
                    aa:ec:ff:3a:ea:4b:f4:39:07:1b:19:52:37:a8:e3:
                    0a:18:eb:6f:81:f3:b9:9a:8c:e4:37:e8:d0:79:a1:
                    db:a6:72:07:f5:db:3f:4d:68:f9:89:a0:1d:63:5b:
                    28:cf:37:74:42:6e:76:56:5c:a4:8b:62:59:aa:18:
                    da:d4:1b:e6:de:51:83:9b:01:7f:aa:8a:87:2e:b8:
                    2c:fd:55:77:3f:36:25:8a:c3:48:be:8d:df:3b:23:
                    3b:49:83:0d:51:c5:12:6f:2e:92:31:7f:87:4c:c2:
                    af:57:95:19:4c:82:ac:af:7a:52:db:83:5c:1f:81:
                    9a:3f:cf:cd:82:75:da:b9:af:d8:08:b5:b2:56:e3:
                    8a:4e:e5:cd:e4:ef:fd:53:fd:fe:73:ce:d3:c9:ab:
                    b1:49:c3:54:a2:77:9e:c1:5f:bc:c9:1d:de:2b:76:
                    a4:54:b7:86:f7:37:5e:bc:ef:01:b7:17:54:e1:41:
                    cb:4f:3c:2e:17:54:17:c6:fb:d0:d0:15:cc:a5:96:
                    1f:db:db:c0:66:76:fe:7f:fa:ef:fd:58:42:b8:a5:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:91:04:93:4F:E2:C7:EF:1A:AE:7E:3E:56:69:82:37:23:7C:AE:D6
            X509v3 Authority Key Identifier:
                keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:aa:65:5c:ef:f4:ac:e4:85:d7:dc:97:da:3c:07:ca:20:c0:
         40:ad:8a:3f:85:e1:3e:81:57:93:30:f2:75:a5:6b:e8:73:54:
         71:ac:24:57:67:05:d8:a2:e6:df:e6:e6:ac:ec:19:45:af:77:
         c6:57:b6:16:85:e6:72:c1:02:3d:db:30:ca:da:f1:f2:4c:d9:
         e4:3c:f1:2d:9d:0f:51:1c:ec:6c:aa:db:b2:37:1c:1d:93:6e:
         63:e9:9a:8e:48:c6:f5:74:5c:82:f2:da:49:ba:23:e5:13:2d:
         a7:2e:23:8c:ee:2c:c7:71:47:03:ce:b5:b8:7f:58:3f:e2:9c:
         ee:b2:95:1c:7c:d0:04:53:57:fb:fb:f6:0e:0b:da:49:e9:ea:
         33:a4:16:62:ca:15:68:a0:e7:72:87:d6:f5:49:e7:d0:91:0f:
         b8:70:60:b0:c1:15:b6:f1:b2:16:d4:80:ad:21:54:21:a7:59:
         e7:34:9c:ee:24:19:39:ad:b2:dd:8b:70:e7:b9:4b:2b:85:3b:
         16:f7:63:82:2a:50:c5:ab:69:3c:c1:7a:60:5a:51:26:33:06:
         1d:12:8a:a2:f8:57:fa:55:64:01:4b:85:e6:c2:12:2f:0c:de:
         74:56:f7:b0:99:d7:77:e4:e6:16:4d:8c:15:67:2c:59:ba:f6:
         3f:cd:a5:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf5VqddHlT7QOT/AH5AiGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYjhkOTE0MDUwMmM5ZTAzNTMwNTE4OWJmNjU4MjM0ZGIx
NGY1NGMwHhcNMjYwNzIzMTUwMjEwWhcNMjYwNzI0MTUwMjEwWjAzMTEwLwYDVQQD
Eyg4ZDkxMDQ5MzRmZTJjN2VmMWFhZTdlM2U1NjY5ODIzNzIzN2NhZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEopsirgB7NEKGOvTZI12t1HCdKi
yBRNG0DwWjRJMsbCuyGGlK0fGIKYVduq7P866kv0OQcbGVI3qOMKGOtvgfO5mozk
N+jQeaHbpnIH9ds/TWj5iaAdY1sozzd0Qm52Vlyki2JZqhja1Bvm3lGDmwF/qoqH
Lrgs/VV3PzYlisNIvo3fOyM7SYMNUcUSby6SMX+HTMKvV5UZTIKsr3pS24NcH4Ga
P8/NgnXaua/YCLWyVuOKTuXN5O/9U/3+c87TyauxScNUoneewV+8yR3eK3akVLeG
9zdevO8BtxdU4UHLTzwuF1QXxvvQ0BXMpZYf29vAZnb+f/rv/VhCuKWSyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2RBJNP4sfvGq5+PlZpgjcjfK7WMB8GA1UdIwQY
MBaAFN+42RQFAsngNTBRib9lgjTbFPVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzdqWkZBVUN5ZUExTUZHSnYyV0NOTnNVOVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82MmE5NDctY2ZiOC00ZDNkLWIzMDgt
NDFlNzNjMWViYWUxLzEvMzdqWkZBVUN5ZUExTUZHSnYyV0NOTnNVOVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82MmE5NDctY2ZiOC00ZDNkLWIzMDgtNDFlNzNjMWViYWUx
LzEvMzdqWkZBVUN5ZUExTUZHSnYyV0NOTnNVOVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKplXO/0
rOSF19yX2jwHyiDAQK2KP4XhPoFXkzDydaVr6HNUcawkV2cF2KLm3+bmrOwZRa93
xle2FoXmcsECPdswytrx8kzZ5DzxLZ0PURzsbKrbsjccHZNuY+majkjG9XRcgvLa
Sboj5RMtpy4jjO4sx3FHA861uH9YP+Kc7rKVHHzQBFNX+/v2DgvaSenqM6QWYsoV
aKDncofW9Unn0JEPuHBgsMEVtvGyFtSArSFUIadZ5zSc7iQZOa2y3Ytw57lLK4U7
FvdjgipQxatpPMF6YFpRJjMGHRKKovhX+lVkAUuF5sISLwzedFb3sJnXd+TmFk2M
FWcsWbr2P82lTA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:30 2026 by rpki-client