Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File:                     AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier:          hagq7D9RGiv+pQ05uxXT2Ta4pnuf3FszxZapFfRkzxE=
Subject key identifier:   93:34:25:D2:4B:12:53:5E:02:5E:6D:78:61:BE:81:37:F8:FF:27:E6
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer:       /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial:       019E3072AB8B628510BE9061618C32753892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number:          0C42
Signing time:             Sat 16 May 2026 11:01:21 +0000
Manifest this update:     Sat 16 May 2026 11:01:21 +0000
Manifest next update:     Sun 17 May 2026 11:01:21 +0000
Files and hashes:         1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: ZQmt6haavF/533CM9piB8+7OsHgpKh1FozLYVI6W71c=)
                          2: JNDctSQyCVHEUhqnByChAmEncfg.roa (hash: yXoH/sBRxwLt/qpjNEIKQniBORvNxA7f4SJGosPqLLA=)
                          3: Po5Z-3veMvoIAK-aDVEx1e-ce5U.roa (hash: AD5FiCgalWTH4X8YjTKjmnDvWNssEsjzxmI0GCJAqfo=)
                          4: oSVqebziTAnWxzzhjCN56NayiOI.roa (hash: 4+N1yl+V3Z8u2Y+zTUu1AT9E1jyRz8O9S8sbZjaoH7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:ab:8b:62:85:10:be:90:61:61:8c:32:75:38:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
        Validity
            Not Before: May 16 11:01:21 2026 GMT
            Not After : May 17 11:01:21 2026 GMT
        Subject: CN=933425d24b12535e025e6d7861be8137f8ff27e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:d6:05:1e:8e:dd:71:58:db:17:9f:52:cd:
                    cd:cc:84:ac:33:58:37:bc:7e:a7:2e:75:d5:c0:38:
                    aa:67:00:b2:7d:51:d2:0b:0d:c1:65:e3:a8:a9:bf:
                    a8:58:7b:c0:27:52:6a:25:41:ca:7a:58:78:a9:98:
                    b3:7d:37:a6:4b:57:08:68:e8:e4:aa:54:e4:0a:4d:
                    8f:84:f4:35:6d:a3:22:cb:84:ee:a8:b5:ca:36:3d:
                    88:1b:b2:c5:f5:89:b2:99:fe:7b:9d:20:8b:6a:20:
                    d4:8a:b3:9b:6b:e2:21:b5:d4:77:4e:4d:0e:ab:ef:
                    af:b5:11:55:7d:a6:70:e1:f5:c7:13:e7:d9:32:31:
                    fc:a7:39:47:3e:bd:44:31:dd:73:9c:08:99:0d:15:
                    e4:24:39:86:4d:1a:5b:94:bc:8f:2b:6c:06:78:10:
                    43:38:c8:59:ac:be:12:3c:93:89:b7:55:25:5b:a7:
                    7e:9b:2d:8c:63:75:39:d6:c7:23:f8:50:36:b6:84:
                    f1:ee:ac:18:2f:6e:f6:7c:46:2b:21:9a:d5:6c:e0:
                    19:d6:1b:71:f7:ba:1e:fd:7d:20:ab:d1:3a:e6:31:
                    7c:94:9f:9c:f9:65:ef:02:2d:5c:8e:68:dc:c3:39:
                    ba:f1:fc:a4:9b:58:8b:49:b0:b5:59:d4:c7:66:55:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:34:25:D2:4B:12:53:5E:02:5E:6D:78:61:BE:81:37:F8:FF:27:E6
            X509v3 Authority Key Identifier:
                keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:42:27:5a:ed:2e:ba:72:94:d8:00:89:12:a4:f2:03:66:f2:
         50:46:df:5c:2e:41:4f:5f:98:b3:04:64:b9:59:41:9c:f7:8b:
         06:14:96:28:9a:b3:68:90:7b:d6:bd:7d:94:34:c4:d7:54:ff:
         a5:42:9f:06:61:26:0f:c1:7d:12:e5:18:c7:3a:97:b1:93:71:
         82:7a:19:0d:9f:75:ec:37:bc:c7:5a:73:fa:8d:06:1d:57:e9:
         39:9f:c2:bf:83:e1:46:31:ee:02:78:2c:68:1f:7d:f0:5c:9d:
         20:95:35:b6:74:40:d4:78:4e:1c:33:10:d4:49:8a:11:8f:88:
         e4:c2:97:3b:45:ca:d8:80:79:5f:15:cc:11:36:36:f6:fb:7b:
         8f:e9:45:fb:7f:12:15:96:8a:a2:1d:6d:ae:57:c6:34:03:5d:
         2e:f7:c9:aa:9c:c6:44:7f:e2:22:a0:90:0c:a4:6e:6c:51:d2:
         4f:e9:5b:61:0e:da:78:4e:dd:c3:df:4d:b8:49:16:fa:96:d6:
         1d:3d:63:58:ee:82:f1:65:89:3d:e5:83:ab:30:01:4d:0e:38:
         a7:bc:4a:05:9d:bd:dc:dc:00:a4:6b:69:ee:bf:7f:60:9b:c6:
         33:d4:c8:49:80:38:50:0f:b9:6e:73:21:85:b5:59:3d:d6:c9:
         ea:82:1f:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcquLYoUQvpBhYYwydTiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNmIwNmI1ZDBmZjEwMDBlMTBjNDI3NmVlYTA4ODBhZjIw
OWQ3YTIwHhcNMjYwNTE2MTEwMTIxWhcNMjYwNTE3MTEwMTIxWjAzMTEwLwYDVQQD
Eyg5MzM0MjVkMjRiMTI1MzVlMDI1ZTZkNzg2MWJlODEzN2Y4ZmYyN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3bWBR6O3XFY2xefUs3NzISsM1g3
vH6nLnXVwDiqZwCyfVHSCw3BZeOoqb+oWHvAJ1JqJUHKelh4qZizfTemS1cIaOjk
qlTkCk2PhPQ1baMiy4TuqLXKNj2IG7LF9Ymymf57nSCLaiDUirOba+IhtdR3Tk0O
q++vtRFVfaZw4fXHE+fZMjH8pzlHPr1EMd1znAiZDRXkJDmGTRpblLyPK2wGeBBD
OMhZrL4SPJOJt1UlW6d+my2MY3U51scj+FA2toTx7qwYL272fEYrIZrVbOAZ1htx
97oe/X0gq9E65jF8lJ+c+WXvAi1cjmjcwzm68fykm1iLSbC1WdTHZlV6VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJM0JdJLElNeAl5teGG+gTf4/yfmMB8GA1UdIwQY
MBaAFABrBrXQ/xAA4QxCdu6giAryCdeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQt
NTdjOTU1YzljODVkLzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQtNTdjOTU1YzljODVk
LzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkInWu0u
unKU2ACJEqTyA2byUEbfXC5BT1+YswRkuVlBnPeLBhSWKJqzaJB71r19lDTE11T/
pUKfBmEmD8F9EuUYxzqXsZNxgnoZDZ917De8x1pz+o0GHVfpOZ/Cv4PhRjHuAngs
aB998FydIJU1tnRA1HhOHDMQ1EmKEY+I5MKXO0XK2IB5XxXMETY29vt7j+lF+38S
FZaKoh1trlfGNANdLvfJqpzGRH/iIqCQDKRubFHST+lbYQ7aeE7dw99NuEkW+pbW
HT1jWO6C8WWJPeWDqzABTQ44p7xKBZ293NwApGtp7r9/YJvGM9TISYA4UA+5bnMh
hbVZPdbJ6oIfIw==
-----END CERTIFICATE-----
Generated at Sat May 16 17:12:42 2026 by rpki-client