Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
File:                     afURWpSbKIPEzDxJX_uJk97Z2F0.mft (raw, json)
Hash identifier:          5RwI68rSsvv/W3rEkJqWEJlJBCBpaRtlkuO7NSgRmQw=
Subject key identifier:   ED:1C:BC:BD:52:7A:49:2B:01:78:B1:04:02:24:F3:C7:D9:A0:AC:5A
Authority key identifier: 69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
Certificate issuer:       /CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Certificate serial:       019F93243A81D95F6BFC0ABF563297B4FCE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
Manifest number:          03E5
Signing time:             Fri 24 Jul 2026 08:00:52 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:52 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:52 +0000
Files and hashes:         1: F0NU8SzenQKyHyDow73tXbiGwdo.roa (hash: iOBS39tMhlNuj1wPQ/s8NHjEci7w9ozCqefNCKugJMg=)
                          2: afURWpSbKIPEzDxJX_uJk97Z2F0.crl (hash: sGlvd9a2xxLMEqYsECOY//w/jVjvLbkh8i12k9ugTb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:3a:81:d9:5f:6b:fc:0a:bf:56:32:97:b4:fc:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
        Validity
            Not Before: Jul 24 08:00:52 2026 GMT
            Not After : Jul 25 08:00:52 2026 GMT
        Subject: CN=ed1cbcbd527a492b0178b1040224f3c7d9a0ac5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:57:08:16:c4:1c:68:06:fa:53:c8:d5:f1:a0:
                    c1:7c:8d:07:e0:78:72:38:bf:af:f4:54:b2:6e:68:
                    d4:df:b5:03:9d:93:ec:4a:ab:f7:7c:12:c5:6b:8e:
                    ee:3e:4c:e6:a0:5d:cc:d6:eb:8d:80:56:8a:76:ed:
                    1d:6a:cd:08:fd:3d:67:6f:e5:af:b8:78:6f:1a:a4:
                    c5:06:66:f8:95:d2:66:1d:fa:d4:5b:64:22:45:ef:
                    90:9a:3f:46:a7:98:f3:29:bd:92:b3:2d:6b:3b:6c:
                    be:77:44:2d:07:17:b0:5f:9c:a9:08:0e:79:37:2d:
                    9a:b2:88:25:77:ea:a7:f8:ae:3e:1a:50:95:dd:f1:
                    12:03:c1:f6:ba:c4:a5:af:b8:35:2f:bf:a3:ae:0f:
                    81:23:6c:e4:a7:57:bd:93:6e:e4:6d:c4:6d:2b:97:
                    52:2c:cb:d2:c3:11:8f:49:24:3c:c0:4b:aa:46:ad:
                    b9:b5:70:d0:8f:46:b2:91:e5:09:7a:c2:fd:cc:87:
                    85:71:08:ad:8c:44:49:8c:f5:3d:31:31:a4:68:65:
                    bb:5f:0a:7a:48:4c:d5:98:fa:a1:bf:9f:86:ab:1b:
                    89:09:79:ec:5e:a3:24:03:27:63:dd:b8:5d:f2:9d:
                    77:d3:76:13:9d:a6:51:9d:55:cb:06:0f:d1:69:a4:
                    ce:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1C:BC:BD:52:7A:49:2B:01:78:B1:04:02:24:F3:C7:D9:A0:AC:5A
            X509v3 Authority Key Identifier:
                keyid:69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a3:dc:43:5f:09:9e:40:5d:b2:8e:2f:d6:01:8d:64:9a:5d:
         56:6f:a2:29:0b:65:6c:d8:09:ae:5a:f1:1b:e0:43:66:b2:54:
         01:dd:ca:2f:76:26:68:1f:1f:ed:21:58:d1:ad:dd:ca:9d:13:
         09:b3:87:04:6b:24:67:7b:92:c5:81:75:1e:96:da:0f:c3:6f:
         f4:a9:9f:ea:26:85:76:de:41:1d:78:e5:f0:23:5d:6f:de:bc:
         3e:0e:94:d1:82:f5:f5:54:cb:21:d1:c5:6d:03:53:7f:83:7b:
         31:fb:de:56:49:68:44:29:4c:e6:2b:36:f3:61:dd:9c:51:00:
         fd:e8:03:71:0e:cb:df:8c:d3:f7:d8:ec:f6:d8:f9:c9:d5:b9:
         64:b0:18:1b:58:a5:d1:8b:05:a7:2b:1b:60:c3:44:eb:81:6a:
         90:26:4a:ed:1f:41:80:f4:f8:4a:36:9b:2a:d0:c5:ea:ae:3b:
         aa:dd:c4:8e:1e:54:d9:21:d2:43:40:ef:9b:82:76:a3:ac:cb:
         c5:02:eb:b5:94:bc:68:6d:50:9a:80:83:2b:bd:f2:eb:96:a3:
         d1:aa:f6:b6:ee:37:9a:02:17:41:e2:1f:ad:ee:83:dc:09:ab:
         90:42:a1:d7:f0:e3:14:e6:b5:15:09:19:e1:f6:b7:4a:2b:26:
         1a:1b:2b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:29 2026 by rpki-client