Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
File:                     afURWpSbKIPEzDxJX_uJk97Z2F0.mft (raw, json)
Hash identifier:          GrlibOe7jxQ8PQFDXtYCjbKW6ZaM0Ga/mYhHKbcuGVs=
Subject key identifier:   7E:52:C9:73:E2:EC:A8:E5:45:E7:B6:99:09:4B:9F:B8:4C:9B:40:B4
Authority key identifier: 69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
Certificate issuer:       /CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Certificate serial:       019CE5916462C278044C087F606AD987E23C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
Manifest number:          0282
Signing time:             Fri 13 Mar 2026 05:00:36 +0000
Manifest this update:     Fri 13 Mar 2026 05:00:36 +0000
Manifest next update:     Sat 14 Mar 2026 05:00:36 +0000
Files and hashes:         1: F0NU8SzenQKyHyDow73tXbiGwdo.roa (hash: iOBS39tMhlNuj1wPQ/s8NHjEci7w9ozCqefNCKugJMg=)
                          2: afURWpSbKIPEzDxJX_uJk97Z2F0.crl (hash: xeCGkcJwFnXOI09IPCRD9Hdk1s2FuqkSwk+/1wIoK2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:91:64:62:c2:78:04:4c:08:7f:60:6a:d9:87:e2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
        Validity
            Not Before: Mar 13 05:00:36 2026 GMT
            Not After : Mar 14 05:00:36 2026 GMT
        Subject: CN=7e52c973e2eca8e545e7b699094b9fb84c9b40b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:c0:18:de:69:13:f5:c9:a3:20:8a:a8:81:
                    20:f7:49:f7:c6:2a:d6:0e:d6:12:9f:02:8c:0a:88:
                    fe:b6:f8:bf:fa:1a:f1:dd:c3:5b:9d:cd:07:8f:08:
                    f2:c4:67:38:5f:10:7d:63:88:e9:93:bc:06:fc:aa:
                    d5:03:f0:4b:d1:59:46:61:1d:55:ff:18:91:5e:d8:
                    25:2e:9e:20:64:a8:c9:54:79:ae:57:a1:a3:0a:a1:
                    20:fe:67:5a:94:da:f2:8b:bc:79:ed:40:f2:a8:e8:
                    93:99:69:13:95:51:b1:f5:01:8d:be:8a:8f:1f:b9:
                    08:c2:b2:2d:cd:05:32:bb:41:aa:69:73:77:48:00:
                    d0:0c:a7:6f:e4:9f:c2:a4:a4:17:b3:a5:05:c1:0e:
                    2f:fb:02:d4:d4:3a:d6:3a:13:fc:65:ce:b7:4d:42:
                    29:4a:61:30:8c:77:0b:0e:57:1f:ab:c7:62:68:fc:
                    a2:29:41:ea:11:3b:78:58:7c:a6:a2:2a:ea:bd:cb:
                    eb:a6:1a:b5:f8:df:4c:bf:29:66:92:8d:e8:e4:14:
                    94:cc:46:50:2d:4a:87:0d:cb:2a:d5:46:f3:30:b2:
                    aa:30:ab:86:0f:52:78:da:b9:50:26:66:8a:b3:91:
                    6e:4e:95:9c:08:d0:69:ff:64:48:5a:fa:b4:76:82:
                    77:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:52:C9:73:E2:EC:A8:E5:45:E7:B6:99:09:4B:9F:B8:4C:9B:40:B4
            X509v3 Authority Key Identifier:
                keyid:69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5b:79:d4:80:8c:ae:fb:09:b8:60:5b:3d:a8:ba:54:64:2c:
         19:e4:a6:26:78:ca:fd:4a:bc:94:43:01:06:e0:15:f1:fe:a3:
         f1:b0:96:05:22:62:de:a9:07:90:27:91:39:96:35:3b:7c:bf:
         64:ad:b6:b2:9a:42:f4:de:11:74:34:8b:92:de:12:3a:0f:bb:
         6f:09:7f:1a:9a:98:d2:54:60:63:02:fa:55:fb:5a:b5:7b:d1:
         bb:14:6f:fe:81:5d:67:fb:e8:af:41:b6:15:88:45:f7:85:9a:
         10:a9:4a:57:75:5f:33:d6:af:27:e9:2b:28:bb:e2:43:a0:01:
         a4:07:ec:22:9c:11:94:3c:fc:8a:53:21:f8:b3:3e:e6:22:ba:
         cf:91:b4:d2:ce:dc:ba:9e:68:eb:41:22:21:35:83:46:2c:ce:
         1e:1e:f0:99:1a:85:c2:da:fa:56:a8:08:cf:4d:d8:d0:29:5c:
         eb:61:5c:39:c7:44:e2:eb:e4:48:b2:56:8d:b9:ac:de:c6:aa:
         fd:49:05:91:a0:5f:da:dd:00:b4:31:34:9e:d9:28:da:b7:2a:
         da:39:14:68:b8:90:2e:a3:48:5c:1e:69:89:fb:77:a4:d5:10:
         72:d4:c6:b5:5f:5a:d1:6b:cd:70:02:0f:a8:5c:bc:6f:17:d1:
         08:e5:0a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:51:23 2026 by rpki-client