Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
File:                     afURWpSbKIPEzDxJX_uJk97Z2F0.mft (raw, json)
Hash identifier:          5rK+ifvoDazI0bHZTbU9Ab/yuTrYWtdFLiqeFi2sUfs=
Subject key identifier:   DC:23:43:B4:B1:B2:26:A3:EE:4A:C2:FC:C9:35:61:74:07:40:8A:9D
Authority key identifier: 69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
Certificate issuer:       /CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Certificate serial:       01A08A5579BAD27A4720E1E5CF0380F44AAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
Manifest number:          0465
Signing time:             Thu 10 Sep 2026 08:00:52 +0000
Manifest this update:     Thu 10 Sep 2026 08:00:52 +0000
Manifest next update:     Fri 11 Sep 2026 08:00:52 +0000
Files and hashes:         1: F0NU8SzenQKyHyDow73tXbiGwdo.roa (hash: iOBS39tMhlNuj1wPQ/s8NHjEci7w9ozCqefNCKugJMg=)
                          2: afURWpSbKIPEzDxJX_uJk97Z2F0.crl (hash: nK8raBiM+k5n+Bo0T3koy2l2hzzEBO6GTdZLRAJE3gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:55:79:ba:d2:7a:47:20:e1:e5:cf:03:80:f4:4a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
        Validity
            Not Before: Sep 10 08:00:52 2026 GMT
            Not After : Sep 11 08:00:52 2026 GMT
        Subject: CN=dc2343b4b1b226a3ee4ac2fcc935617407408a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:65:ca:0e:85:bd:a9:ee:56:7e:a6:bd:3c:
                    9a:4b:cb:fd:06:6e:0f:66:67:2e:b5:36:61:7a:ad:
                    9a:91:f7:5a:51:84:b1:05:2f:5c:6e:c8:67:a4:21:
                    bd:a7:1a:c6:b4:d8:c4:d2:99:3a:4d:c6:ed:37:e7:
                    03:86:c6:f1:af:af:4d:85:44:7b:8d:77:2c:1d:de:
                    93:9e:7e:3d:f4:d2:35:e0:07:00:ba:52:f4:3a:15:
                    f4:bc:1c:95:08:ff:ae:a2:9b:6e:ce:17:6c:34:7c:
                    b1:75:27:c8:09:0e:0b:f2:74:d8:f2:93:a0:a9:86:
                    59:6b:af:78:f2:3d:8a:15:78:81:bf:ae:1b:47:8b:
                    a1:5a:0c:84:f1:c2:8f:a8:a6:56:4e:15:a2:43:33:
                    57:87:57:b6:25:03:a2:91:f1:57:10:b1:d8:e2:eb:
                    eb:ea:b3:c6:e9:5d:f0:b4:19:ff:da:52:bf:86:20:
                    da:51:11:e4:69:1b:ce:ea:de:fb:69:57:ce:23:21:
                    29:2d:f9:d8:0c:3e:ff:65:5f:9b:3c:1b:68:70:99:
                    5a:7f:bd:c5:e5:59:cf:7f:5c:45:8d:ac:0f:1a:50:
                    ba:18:fe:09:09:5c:db:38:a0:ad:5f:fb:56:fc:da:
                    6f:b8:77:db:83:88:e2:37:88:f8:b0:d5:26:88:4f:
                    23:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:23:43:B4:B1:B2:26:A3:EE:4A:C2:FC:C9:35:61:74:07:40:8A:9D
            X509v3 Authority Key Identifier:
                keyid:69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:3b:0b:63:50:48:28:54:12:78:d4:32:b4:a9:11:c2:8e:0c:
         e5:77:9a:31:e3:ea:bb:7f:3b:84:e6:ac:7c:eb:8e:a6:94:ca:
         a0:40:37:15:1b:9e:07:28:00:f7:23:4c:f4:cf:a4:ae:eb:95:
         9f:5c:3e:84:d3:2c:86:de:48:00:44:8b:98:40:59:9b:0f:f5:
         ed:f5:3f:5a:d7:0e:af:00:ab:30:8d:0c:b1:9c:18:e8:3c:14:
         d4:3e:79:47:19:ac:b9:85:a5:8d:6c:ae:c9:5d:45:04:43:8d:
         d9:c1:f7:a2:08:e9:b0:7f:73:a9:d0:87:ab:c0:66:bc:00:b9:
         09:ad:78:d1:e2:55:a2:bc:31:00:23:9f:ba:17:eb:db:60:4e:
         6a:cc:6c:1b:0d:c7:aa:96:b1:f8:f6:fe:d9:7f:cc:73:cf:52:
         02:46:15:51:9a:f1:f2:48:d4:ca:ad:f3:27:f0:bb:4f:bc:43:
         de:76:55:e0:c8:86:9c:98:12:cd:12:65:3c:c2:3f:97:3a:e2:
         69:2c:a8:55:43:7b:54:d8:ec:26:c8:3c:17:3f:e9:8f:45:0a:
         b9:e8:1b:d8:9d:4c:21:b6:84:c9:9d:8d:fa:19:41:c8:2a:96:
         03:1f:dc:0c:04:01:3c:b6:ca:37:86:76:ff:cb:c1:6d:7e:5c:
         17:01:04:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:26:18 2026 by rpki-client