Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
File:                     afURWpSbKIPEzDxJX_uJk97Z2F0.mft (raw, json)
Hash identifier:          JmuBjXXP7Ar46rv2APxBB19lgrSYOMrdwZOT5sDVqAo=
Subject key identifier:   62:B3:21:36:88:31:6C:E3:74:52:82:62:D0:B7:5E:8E:F4:AB:6F:F4
Authority key identifier: 69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
Certificate issuer:       /CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Certificate serial:       01A0CBFE428AF72E70DBA5C78BE545C167E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
Manifest number:          0487
Signing time:             Wed 23 Sep 2026 02:00:33 +0000
Manifest this update:     Wed 23 Sep 2026 02:00:33 +0000
Manifest next update:     Thu 24 Sep 2026 02:00:33 +0000
Files and hashes:         1: F0NU8SzenQKyHyDow73tXbiGwdo.roa (hash: iOBS39tMhlNuj1wPQ/s8NHjEci7w9ozCqefNCKugJMg=)
                          2: afURWpSbKIPEzDxJX_uJk97Z2F0.crl (hash: 8lYejD981sPYIY27MTA0ovNCFFuAyCmEDuA/g+9Xxo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:fe:42:8a:f7:2e:70:db:a5:c7:8b:e5:45:c1:67:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
        Validity
            Not Before: Sep 23 02:00:33 2026 GMT
            Not After : Sep 24 02:00:33 2026 GMT
        Subject: CN=62b3213688316ce374528262d0b75e8ef4ab6ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:f9:38:bd:3d:6b:1e:c2:42:77:20:3c:94:
                    f9:7a:f7:a6:af:99:fd:cc:9f:76:6a:c9:d1:c5:09:
                    d8:87:f0:62:7f:30:a5:08:1d:67:4e:68:1a:12:60:
                    7f:7c:ff:14:39:4b:96:db:e6:7b:90:9d:ec:b1:16:
                    7d:19:00:0c:85:b8:f5:9c:81:c5:9b:dd:6d:45:96:
                    5f:ce:51:09:9a:39:54:95:fc:bd:f0:8e:34:01:0d:
                    44:3a:91:c2:50:7e:f9:c1:8e:02:85:0f:77:ff:56:
                    6e:10:1f:bb:bc:6e:a3:9f:df:1e:6a:4d:e5:eb:aa:
                    57:85:8b:d9:ad:31:a4:67:cb:cd:f2:80:51:4e:2e:
                    c0:13:49:28:7c:53:bb:32:34:04:0e:14:7a:ff:45:
                    39:14:0e:b4:6a:6d:31:58:08:f1:f4:2a:99:d5:01:
                    39:7d:8c:d9:61:a1:98:ea:fa:b0:ef:b0:18:71:ec:
                    20:6e:b1:5e:60:27:62:6d:0f:35:9a:a1:26:1c:ae:
                    cf:da:29:2f:fb:bd:38:2f:80:5a:42:bc:81:2d:21:
                    ef:21:c8:a3:52:52:9b:fb:d5:4e:ff:96:73:85:77:
                    ce:2e:a3:6b:a2:d8:74:fa:36:eb:fd:3d:ba:be:3a:
                    20:06:b9:ca:7f:6d:36:cd:cf:f7:f1:09:be:47:ac:
                    5d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B3:21:36:88:31:6C:E3:74:52:82:62:D0:B7:5E:8E:F4:AB:6F:F4
            X509v3 Authority Key Identifier:
                keyid:69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:76:ff:db:1d:fe:f7:e6:fd:dd:ea:9c:6c:d8:fb:0d:64:fc:
         b3:00:b8:a1:01:7c:2e:37:46:37:be:c0:6c:57:dd:89:34:9f:
         e5:b5:5c:be:cd:d9:cb:16:f1:58:e5:a7:b9:c4:02:a1:ab:95:
         e0:03:31:13:ee:59:39:c5:5d:4f:5d:52:ed:9e:34:2b:2f:41:
         a6:e9:82:3e:7b:72:45:8b:8d:7d:28:7e:21:f7:1d:32:1e:c6:
         5b:79:f9:00:ea:6d:42:b5:e6:1f:69:04:29:2c:a2:de:48:ee:
         2b:3a:c4:48:e3:49:69:b0:2d:13:de:08:89:43:b9:ad:5d:d8:
         6b:a6:6a:73:9f:d9:9c:74:42:62:25:e1:1d:12:26:77:a0:3c:
         f7:d8:17:71:b8:e5:11:42:8b:79:ee:9d:9e:1a:bd:4f:04:d7:
         44:08:f2:b8:12:5a:40:cd:bc:2c:d0:4e:e7:8c:43:b7:35:32:
         62:d1:ca:ff:36:a0:b8:a5:fe:10:b2:a7:0b:bc:a4:c0:23:86:
         25:a4:da:25:2c:90:2f:94:27:a0:e7:4e:3f:4c:66:3d:a7:0b:
         e7:3d:e9:f8:4b:50:24:c9:7d:57:f8:54:0e:cd:68:d5:6b:c6:
         da:8f:27:3a:1f:9d:4f:4f:ca:a3:ea:bd:4d:a2:76:31:48:e9:
         8d:e8:df:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:32:59 2026 by rpki-client