Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
File:                     afURWpSbKIPEzDxJX_uJk97Z2F0.mft (raw, json)
Hash identifier:          pdxubmZnLpyk5LIl2PLpibLo8R15fMrN+kiRhsihpsk=
Subject key identifier:   8D:50:F4:CC:93:EA:2A:3F:4A:DC:F2:F4:5B:73:FF:76:CE:1F:11:9D
Authority key identifier: 69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
Certificate issuer:       /CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Certificate serial:       019FAA51045CEB818258E847A3B3A8CB6FD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
Manifest number:          03F1
Signing time:             Tue 28 Jul 2026 20:01:03 +0000
Manifest this update:     Tue 28 Jul 2026 20:01:03 +0000
Manifest next update:     Wed 29 Jul 2026 20:01:03 +0000
Files and hashes:         1: F0NU8SzenQKyHyDow73tXbiGwdo.roa (hash: iOBS39tMhlNuj1wPQ/s8NHjEci7w9ozCqefNCKugJMg=)
                          2: afURWpSbKIPEzDxJX_uJk97Z2F0.crl (hash: Vuf3NojaCxB4xF7+AH0NVl9J9KxlwL7aGnIE69NUhG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:51:04:5c:eb:81:82:58:e8:47:a3:b3:a8:cb:6f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
        Validity
            Not Before: Jul 28 20:01:03 2026 GMT
            Not After : Jul 29 20:01:03 2026 GMT
        Subject: CN=8d50f4cc93ea2a3f4adcf2f45b73ff76ce1f119d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:cb:75:49:b3:43:93:34:dc:ed:f7:97:e3:
                    c1:62:de:dc:1b:fa:ec:c7:58:4e:91:ae:d5:9b:f1:
                    96:6f:11:3f:71:ec:91:a5:29:71:aa:58:87:35:22:
                    49:dd:f0:e2:2a:e3:52:bc:22:ad:1f:a4:45:bb:86:
                    af:37:e2:71:83:af:ea:5a:3e:3d:97:5f:c0:d4:0d:
                    45:31:12:4b:27:d5:28:12:33:06:f6:3a:33:a5:d7:
                    0a:ad:5f:b5:36:fb:be:29:a8:f3:81:f4:2a:67:2a:
                    79:87:f1:11:e6:9e:9d:d9:12:fc:79:55:51:a7:76:
                    0e:e8:27:56:fc:da:26:86:a0:88:f2:5f:2a:ab:5e:
                    82:6c:f7:76:62:b1:dc:c7:8f:27:3f:99:58:5a:77:
                    91:6e:f8:6c:eb:b9:f7:0d:39:b8:9c:17:43:c9:ce:
                    2a:dc:b4:3f:fd:4d:e6:e5:97:91:0e:b0:52:da:37:
                    83:48:14:30:39:af:a6:72:da:ce:d4:e1:ff:a7:3a:
                    3f:25:27:4a:ef:bc:36:a8:0e:c6:59:0a:a8:50:cb:
                    db:cc:8e:8a:80:33:cc:e0:98:7f:99:28:a8:dd:06:
                    98:de:f0:30:5a:bb:0f:b3:1f:15:53:f2:24:60:87:
                    e4:d2:38:3a:aa:42:54:14:49:53:13:1b:a3:e0:05:
                    ac:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:50:F4:CC:93:EA:2A:3F:4A:DC:F2:F4:5B:73:FF:76:CE:1F:11:9D
            X509v3 Authority Key Identifier:
                keyid:69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3b:ce:58:68:ed:ee:b8:5d:2b:9a:24:2c:99:65:41:9f:c8:
         c6:1b:b0:8e:fa:72:b6:e6:81:3c:5c:f8:99:b0:a4:2f:fc:26:
         6d:ef:54:fd:35:01:47:24:2b:b1:60:a7:18:5f:3d:f4:30:b7:
         61:84:7e:b8:19:10:94:4f:ac:8c:c6:de:6b:94:b0:3b:7f:aa:
         57:b5:ac:1c:22:af:2b:30:57:8b:56:47:8a:15:13:f1:45:55:
         1d:28:99:f5:90:22:5c:2e:15:33:dc:c9:32:ae:b3:8b:60:72:
         60:42:57:fb:07:dd:fa:67:c9:a5:c8:67:11:8c:51:9d:3f:3d:
         5e:f7:a9:e8:9a:43:3d:1b:f9:60:ae:f9:86:83:76:53:2b:37:
         79:94:4e:76:d2:cc:7c:24:88:94:f3:0f:46:5f:62:67:d1:85:
         bc:64:da:4f:ec:e6:e3:ff:3b:5f:98:f3:7e:f1:97:bc:ed:d9:
         1a:c1:26:ba:ef:7a:db:39:7f:90:bc:ca:14:ba:f4:f0:92:57:
         59:a4:47:8f:09:d6:6d:6f:68:6d:e5:de:04:28:b6:5f:65:49:
         74:80:ff:c1:7e:92:24:12:82:d1:f5:8c:af:dd:d1:da:f1:16:
         e5:fe:07:1a:55:ff:e4:ab:c9:e1:67:de:1b:47:5d:3a:9d:c8:
         07:de:2f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:36 2026 by rpki-client