Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft
File:                     AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft (raw, json)
Hash identifier:          BXp+Nug8Vwe+ZwEFbQ/UZU+sv67yOlkD2vmRfFqu+k0=
Subject key identifier:   55:70:AE:04:1A:26:9D:E4:D4:7D:27:18:0F:4D:B5:1B:AD:26:6A:C2
Authority key identifier: 02:05:BA:1D:94:37:94:CA:D9:D7:BE:8C:6E:CF:B2:BA:CD:C8:50:5B
Certificate issuer:       /CN=0205ba1d943794cad9d7be8c6ecfb2bacdc8505b
Certificate serial:       01A16D924BC5717E378E9D7D6BE565A890B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AgW6HZQ3lMrZ176Mbs-yus3IUFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft
Manifest number:          01A6
Signing time:             Sat 24 Oct 2026 11:01:06 +0000
Manifest this update:     Sat 24 Oct 2026 11:01:06 +0000
Manifest next update:     Sun 25 Oct 2026 11:01:06 +0000
Files and hashes:         1: AgW6HZQ3lMrZ176Mbs-yus3IUFs.crl (hash: FWCRhnlFcNypRx8CZzPYkbKM75eW4Roz1S8ErEBMt88=)
                          2: AheurXSAwG3K8xjvCSAB_OgXDkE.asa (hash: 37Fmeaq+GhOVQi6i9jELNgyV9qWcf6gQUQ1iLmTpfG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AgW6HZQ3lMrZ176Mbs-yus3IUFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6d:92:4b:c5:71:7e:37:8e:9d:7d:6b:e5:65:a8:90:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0205ba1d943794cad9d7be8c6ecfb2bacdc8505b
        Validity
            Not Before: Oct 24 11:01:06 2026 GMT
            Not After : Oct 25 11:01:06 2026 GMT
        Subject: CN=5570ae041a269de4d47d27180f4db51bad266ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a2:f6:18:a0:5b:03:e1:92:4f:f1:30:05:b0:
                    c0:aa:20:33:c9:5a:07:81:67:64:42:a3:01:cd:48:
                    bb:ec:18:6d:4d:b6:f8:f4:c6:3b:73:4c:71:ed:13:
                    93:fc:fc:9d:1c:f1:72:bd:4d:85:33:05:ce:7d:c4:
                    09:fa:7d:82:cd:16:a9:dd:b6:d5:29:97:e2:9d:a3:
                    70:ac:76:7a:ad:1c:37:de:63:b4:89:c1:d1:c8:9b:
                    43:61:9d:ee:1b:8f:e5:f0:b4:b6:ee:a4:53:1a:06:
                    ec:60:cd:31:a0:d8:33:d9:64:ce:00:ed:8f:e3:77:
                    92:04:af:0a:c1:b3:34:6b:d1:01:44:47:a6:68:8a:
                    d3:79:57:b2:75:a5:89:55:f0:48:68:40:fc:fc:f8:
                    39:45:03:60:49:cb:98:9a:b0:43:f3:a9:3d:a5:db:
                    c3:c5:98:33:9d:0c:e8:94:24:56:c0:fc:63:8b:35:
                    ce:50:19:d0:a5:af:e9:8f:aa:de:21:3a:94:39:d6:
                    4e:bb:96:39:66:d6:c5:c2:5f:8d:e6:c7:1b:45:f7:
                    b9:60:ba:be:30:10:c9:b2:74:28:b0:6b:6a:d2:62:
                    87:be:34:a1:2e:80:36:1e:87:5e:a9:4d:13:ee:03:
                    1d:f2:eb:f2:b0:fb:bc:f1:1a:1a:52:5f:ef:04:79:
                    b5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:70:AE:04:1A:26:9D:E4:D4:7D:27:18:0F:4D:B5:1B:AD:26:6A:C2
            X509v3 Authority Key Identifier:
                keyid:02:05:BA:1D:94:37:94:CA:D9:D7:BE:8C:6E:CF:B2:BA:CD:C8:50:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgW6HZQ3lMrZ176Mbs-yus3IUFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d5:34:14:c1:95:b2:bd:be:17:4c:3f:3a:99:6e:ab:88:9b:
         69:d9:17:7f:83:38:83:2d:ff:ef:a0:17:99:1f:4d:fe:a8:7c:
         1a:f8:a2:3d:b5:07:2d:17:35:5d:69:66:00:c3:07:10:86:74:
         2a:7c:3a:69:e7:8d:b5:a5:2a:6d:26:ed:ea:ef:28:d2:37:fb:
         b3:1a:01:35:fd:43:d5:ec:82:2c:fa:a6:9e:3d:8d:33:21:76:
         0f:7b:ba:3a:21:88:17:d5:90:2e:a1:35:d2:93:db:04:30:14:
         ad:f0:35:ac:c9:64:a4:16:20:7d:54:7f:ae:e5:44:ee:ac:2b:
         fa:4b:97:65:9e:63:eb:f4:6b:4f:7d:e0:88:57:4d:91:5c:0b:
         a1:1b:94:f3:e1:34:18:d5:6f:ac:4c:1a:cd:9c:cf:6d:85:53:
         d7:53:aa:e6:15:7a:b6:d3:10:d4:b4:dc:ed:a9:1c:22:67:49:
         a8:5d:22:e4:63:64:50:9a:33:b3:72:4a:1d:e2:33:f9:a2:ed:
         a6:54:98:30:85:34:0b:c7:33:88:d4:93:7c:f3:50:46:73:ab:
         0b:cb:f0:6b:8e:be:75:a7:a2:98:51:f6:0f:e3:9e:bc:6a:0d:
         31:a3:28:44:b0:9e:23:c9:c6:b5:fb:7c:ab:52:d6:82:e8:db:
         33:21:97:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:44:13 2026 by rpki-client