Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File:                     27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier:          VAZZPdRef+ppiIrbnsO9ET+1NvRoe4aO2mEit4tAnVw=
Subject key identifier:   37:C5:10:38:71:5C:17:22:A4:E6:41:F0:BD:55:D0:8B:2F:20:88:C9
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer:       /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial:       019F913565EDDFC2C94BCDB2647CBFABFACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number:          0DC0
Signing time:             Thu 23 Jul 2026 23:00:23 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:23 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:23 +0000
Files and hashes:         1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: QcBoj7gFe72jyT9RLquUYydbYdG8kfijXgmzNY8c7vM=)
                          2: DfHWpmAWUgCCErY8uLt82E-U1FA.roa (hash: +Qi5uESsKdV2qG1rG182kIlHI1TpCDtCPoj/zgTI3/E=)
                          3: GYZtGu5A6w6f_D9QSqwvacnqffU.roa (hash: k+vGwyv3QPG/+s72nT5RSbpgXn+mZD4c8cr8T4ADKms=)
                          4: U98gDyS6dRj9SjIXrnN3pWc2zgE.roa (hash: HsrUh8+O8DlJnCmiqH/w8bVErohPR7VfDdSGvWsJKvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:65:ed:df:c2:c9:4b:cd:b2:64:7c:bf:ab:fa:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
        Validity
            Not Before: Jul 23 23:00:23 2026 GMT
            Not After : Jul 24 23:00:23 2026 GMT
        Subject: CN=37c51038715c1722a4e641f0bd55d08b2f2088c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b3:89:be:b7:cf:36:25:a9:56:39:b4:a4:56:
                    13:69:4a:24:26:e5:33:88:ed:d7:7a:36:ff:97:b1:
                    3c:e5:ff:c3:f3:b9:2d:a8:91:3f:7d:ce:1b:80:50:
                    1a:a1:f1:8d:27:0e:c7:85:ef:15:e2:bc:39:55:6a:
                    04:f7:17:f9:30:63:f4:8b:0c:cf:0c:6a:37:3f:ba:
                    f3:c4:7d:19:42:b9:39:10:6f:05:6a:7f:52:a8:72:
                    5a:ca:c7:5d:4a:0b:37:ff:73:91:0b:c9:98:f5:26:
                    e8:6f:54:55:eb:55:c7:de:25:fd:a1:4a:12:49:9a:
                    39:c0:70:d9:d7:c8:65:fb:78:08:f9:82:e3:42:db:
                    3a:fe:33:f8:8b:03:6d:c4:27:98:15:64:2b:a8:fa:
                    1a:6e:e0:ac:ef:83:eb:3f:30:5f:d4:f5:8f:eb:61:
                    3b:4f:ba:0c:6d:5a:1b:3a:a8:83:96:a8:5c:f3:b0:
                    40:08:8a:dc:a0:5e:9c:de:2c:89:63:7c:97:da:22:
                    e9:11:6c:5e:fe:b3:24:67:70:f2:bd:d3:e1:64:9d:
                    9c:b8:a9:5b:66:17:1b:7f:ac:38:09:70:ff:0b:8a:
                    8a:30:be:cd:1a:47:e1:64:f3:94:4a:b9:57:ef:3c:
                    a2:f1:b0:80:e4:d9:3b:88:c0:45:08:ec:a5:55:f2:
                    77:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C5:10:38:71:5C:17:22:A4:E6:41:F0:BD:55:D0:8B:2F:20:88:C9
            X509v3 Authority Key Identifier:
                keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:bb:5d:66:38:14:40:c5:59:ea:c6:05:16:cc:78:aa:2a:5e:
         5a:8b:da:63:9e:11:64:99:2c:89:36:9b:ef:dc:82:87:3d:5b:
         df:91:18:45:d2:70:1c:79:cb:67:87:2a:c6:56:ab:0a:9e:90:
         36:b9:6d:39:6a:7d:b7:b5:fb:08:3a:b8:d1:48:91:c1:c9:28:
         e9:47:3b:20:0f:bc:3a:59:6c:be:2d:8a:59:8c:10:05:09:34:
         c7:ff:c5:0d:b5:34:22:c8:f1:57:dc:2d:20:91:43:5a:cf:10:
         a8:d5:dd:b4:14:db:e1:bc:18:64:ad:c0:01:2f:36:90:b5:4c:
         37:31:e9:f3:8d:f9:a1:a6:66:69:4c:74:a6:41:da:f4:7f:f2:
         dd:a5:9d:72:62:f2:39:ee:26:83:1d:b2:4f:7c:32:0e:0a:c8:
         06:7f:3e:38:90:bf:c9:3b:c4:30:81:22:30:5b:05:3a:82:5c:
         52:73:0d:63:ee:3b:13:3a:0d:4a:86:6e:b7:f7:88:35:62:2e:
         f1:32:fd:bf:68:a9:d8:f2:eb:b1:b5:3a:49:2b:39:15:19:59:
         8f:b8:07:d2:ff:83:eb:cc:6c:80:a7:f9:cc:1b:33:e1:13:de:
         ed:f0:d4:bc:d8:39:01:7e:35:88:52:6f:8c:b8:ff:1d:3c:25:
         3c:4e:4d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:16:41 2026 by rpki-client