Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File:                     AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier:          qkVxa1GNgAtKGApb1/i0UnLV1jYR/aqf6td5xWfObZk=
Subject key identifier:   5C:04:D4:70:6B:CA:AA:9E:FF:AC:0B:3C:9A:93:54:D4:BC:C0:8F:32
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer:       /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial:       01A1103AE14AAF25941AE176E8557DB2768E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number:          0DBF
Signing time:             Tue 06 Oct 2026 08:00:56 +0000
Manifest this update:     Tue 06 Oct 2026 08:00:56 +0000
Manifest next update:     Wed 07 Oct 2026 08:00:56 +0000
Files and hashes:         1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: j8/GlI3fMQNQEt6Exz9fB8RtSpb2d5/6VH3b1gs3hvU=)
                          2: JNDctSQyCVHEUhqnByChAmEncfg.roa (hash: yXoH/sBRxwLt/qpjNEIKQniBORvNxA7f4SJGosPqLLA=)
                          3: Po5Z-3veMvoIAK-aDVEx1e-ce5U.roa (hash: AD5FiCgalWTH4X8YjTKjmnDvWNssEsjzxmI0GCJAqfo=)
                          4: oSVqebziTAnWxzzhjCN56NayiOI.roa (hash: 4+N1yl+V3Z8u2Y+zTUu1AT9E1jyRz8O9S8sbZjaoH7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:3a:e1:4a:af:25:94:1a:e1:76:e8:55:7d:b2:76:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
        Validity
            Not Before: Oct  6 08:00:56 2026 GMT
            Not After : Oct  7 08:00:56 2026 GMT
        Subject: CN=5c04d4706bcaaa9effac0b3c9a9354d4bcc08f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:45:94:d0:db:0a:87:b0:fb:08:74:6e:ec:c3:
                    57:bd:2b:c8:98:7a:0f:6d:8a:88:f9:63:64:4f:de:
                    e0:85:30:6a:20:ff:a0:ed:ce:f2:19:67:9d:bb:ca:
                    6d:52:a8:d2:f5:aa:76:db:b8:9f:48:18:92:04:30:
                    93:bd:b1:79:87:83:f9:4c:82:ed:46:18:e1:5c:4e:
                    84:07:4a:21:fa:e4:82:69:3c:42:f4:9e:4f:6b:fe:
                    40:f8:5a:79:c9:71:93:b7:07:b4:53:cd:84:05:8f:
                    4b:f6:cd:83:87:4c:f7:ae:38:86:80:94:72:81:b0:
                    e9:15:bc:3f:b2:63:7d:91:de:1e:09:12:48:83:44:
                    16:5b:7f:68:04:c7:d8:fc:49:ca:15:0b:5b:2d:11:
                    37:88:bf:6c:30:0e:af:5c:c4:15:d2:08:4d:f6:a6:
                    79:21:53:5a:6d:d0:73:a0:6e:fc:8e:dd:44:46:7d:
                    b8:da:ca:78:a8:51:9d:06:66:26:29:f7:f6:03:b1:
                    aa:73:5e:6b:4a:77:46:f4:c5:d0:a0:37:73:dc:74:
                    65:d2:b1:00:ce:bb:c0:a8:a2:28:d9:1b:f0:69:8e:
                    74:a4:12:6f:18:20:d3:4c:ce:64:3d:e1:ec:b9:f9:
                    db:ad:14:dc:d8:13:88:82:da:9b:b5:d3:80:32:ca:
                    07:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:04:D4:70:6B:CA:AA:9E:FF:AC:0B:3C:9A:93:54:D4:BC:C0:8F:32
            X509v3 Authority Key Identifier:
                keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:eb:86:40:9a:24:b3:15:e3:53:61:7c:58:91:b7:10:2a:cc:
         06:c5:9a:45:76:80:64:ba:4f:b1:25:d6:38:38:66:a8:3a:1d:
         11:f3:69:84:32:b7:5f:86:4c:a6:6f:1c:d1:4d:27:ba:b8:cc:
         03:6c:bb:52:cd:11:f1:3e:76:50:73:2b:af:0b:05:8f:e2:df:
         b4:1b:c5:c0:42:d5:0e:7a:ba:13:fb:3c:16:b5:0a:2a:9f:79:
         42:da:f7:bb:3e:73:31:3b:b8:eb:b4:3b:a4:03:90:26:09:ca:
         c6:4a:29:60:c8:62:f8:c7:d0:1e:ec:e0:c9:dc:60:60:8a:77:
         57:4f:59:aa:bc:9b:b5:c7:1a:31:8e:15:df:68:0a:fc:83:cd:
         6d:dd:8a:04:ed:a9:ed:95:1a:63:7d:20:a6:d4:8a:0d:82:72:
         b0:a5:d9:7f:f4:99:22:e1:f2:9b:51:02:8d:1b:68:ff:41:d5:
         8c:8a:95:dd:39:08:49:b7:47:ab:c9:4f:a2:2d:28:ba:6c:b5:
         49:d5:51:0d:f1:f5:87:fd:3c:d8:7e:dc:38:9f:18:2b:99:0f:
         89:37:fe:e8:1f:8f:e1:6c:fa:1f:c9:d9:69:7b:f6:6b:12:18:
         62:c6:47:92:04:60:a4:09:aa:c7:88:14:93:c7:c3:5b:8d:1d:
         10:b0:f4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:30:31 2026 by rpki-client