Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
File:                     37H24AFTpJGGEbFLawP2gS7YikM.mft (raw, json)
Hash identifier:          qJ12WJug+JynOdzMaQV5oqGdgyet3TlgzJfWwD/w15g=
Subject key identifier:   4C:49:F8:6D:50:72:A9:53:2C:76:C8:41:48:8E:1F:D4:AE:B8:5F:4F
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Certificate issuer:       /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial:       019E1FB5D4F7EA0DC4884160C896E80060FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
Manifest number:          1214
Signing time:             Wed 13 May 2026 05:01:10 +0000
Manifest this update:     Wed 13 May 2026 05:01:10 +0000
Manifest next update:     Thu 14 May 2026 05:01:10 +0000
Files and hashes:         1: 37H24AFTpJGGEbFLawP2gS7YikM.crl (hash: L6k9LueZJSL84CJ1KxZGcvZ4/CXg46giVqh+GqmnZeg=)
                          2: FhwS6oj1IU2dmxLLYCr_Dh9nNPg.roa (hash: gw4ySzsoHkhiHwNr6SgUSv5IRZbxDqYLsZYznQCEK64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:d4:f7:ea:0d:c4:88:41:60:c8:96:e8:00:60:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
        Validity
            Not Before: May 13 05:01:10 2026 GMT
            Not After : May 14 05:01:10 2026 GMT
        Subject: CN=4c49f86d5072a9532c76c841488e1fd4aeb85f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:88:dd:e4:6c:8a:4e:76:ab:6d:52:f8:6a:eb:
                    93:a7:5d:16:b0:1a:d6:b6:87:62:19:de:ea:aa:d6:
                    03:a4:4f:eb:d6:e3:79:62:45:69:3f:20:aa:c2:3a:
                    c8:3a:ed:c9:1c:3d:08:7c:78:8a:dc:29:e3:72:7d:
                    e7:88:91:6f:a9:e5:74:3b:b2:65:0d:1b:e6:40:7c:
                    d3:7f:d2:ce:76:d2:23:e2:4a:96:32:4c:61:57:8f:
                    2b:63:9d:0b:16:23:3c:a3:c5:3b:3f:0c:30:79:52:
                    d1:d1:a7:55:32:77:11:ed:99:28:c7:80:4f:58:10:
                    4d:f9:4f:47:f4:87:a2:a7:18:a3:0b:db:4a:19:ae:
                    cc:68:87:8b:ca:a1:b5:4f:08:65:78:21:43:11:ac:
                    b0:f7:ab:56:c1:27:e3:07:d0:90:5f:b0:90:4e:16:
                    19:3c:f9:ba:4c:ad:92:72:90:c8:65:d3:1f:72:5c:
                    54:b6:80:75:d2:77:f3:99:87:93:eb:bc:cb:97:97:
                    b0:28:59:32:1d:a1:6d:77:54:bd:c9:fa:03:40:38:
                    fe:e6:67:a5:cd:bd:1f:23:d5:97:b3:81:80:56:1c:
                    60:bd:18:35:7f:4c:ab:08:38:f5:49:8b:44:31:f4:
                    b1:b6:9d:a2:07:bb:1a:03:0d:11:52:45:0f:c6:67:
                    1c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:49:F8:6D:50:72:A9:53:2C:76:C8:41:48:8E:1F:D4:AE:B8:5F:4F
            X509v3 Authority Key Identifier:
                keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a0:d3:97:46:e5:19:9f:9a:c9:90:6f:e5:e8:e5:6c:6a:bc:
         15:df:1b:0a:27:81:fd:c4:dc:90:02:bf:c3:ca:9b:ab:3e:9d:
         35:d4:a6:08:51:24:15:d8:90:e1:00:e1:1f:b3:30:50:9e:49:
         9f:a4:8b:79:e3:e5:d4:58:30:61:d8:98:41:e6:44:c4:3f:ac:
         e1:44:28:1e:98:77:0e:20:a6:7d:73:89:15:61:8d:fb:29:8f:
         86:5d:5a:4a:08:eb:ed:64:ef:23:cf:04:b2:4b:c1:ba:39:c1:
         2d:45:21:d9:e6:f5:9c:9c:7f:33:fe:a8:4f:e7:f0:0c:9b:10:
         2d:92:ff:d2:0e:15:49:da:a0:b2:a3:ff:93:fe:8c:e4:9c:23:
         b5:ab:eb:e7:22:c3:b5:20:d0:f6:32:ae:3b:83:99:88:a3:12:
         1a:54:1d:ba:23:7d:ec:49:33:76:37:50:1d:14:77:f2:4f:06:
         dd:c2:19:e3:3c:8d:0e:dd:6c:e8:69:9f:51:33:71:1d:2f:b1:
         be:4a:29:43:7e:d4:48:c1:79:b6:79:1c:75:5a:2e:79:ad:2d:
         e9:a0:6d:d8:0f:0c:07:4d:22:49:e5:70:0e:d3:e7:d3:7a:c6:
         b7:ff:78:08:3b:ca:9f:4f:09:fb:bd:8d:44:29:bb:69:61:72:
         c6:c6:fe:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:52:43 2026 by rpki-client