Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File:                     AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier:          Ftk1HQffyhrLJ5SxwXQUiIF6ZMQnujIY5IQiYlnvMX4=
Subject key identifier:   6E:A7:65:DF:21:F5:16:1D:32:40:42:E0:72:FA:01:B3:50:00:76:13
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer:       /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial:       01A001DD1182AB60E85E367D7646D7921297
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number:          0D33
Signing time:             Fri 14 Aug 2026 20:01:00 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:00 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:00 +0000
Files and hashes:         1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: MiQlhwcFG3SNWTcPTx9mrM/Gw4hLWsjvo4D32INNntk=)
                          2: JNDctSQyCVHEUhqnByChAmEncfg.roa (hash: yXoH/sBRxwLt/qpjNEIKQniBORvNxA7f4SJGosPqLLA=)
                          3: Po5Z-3veMvoIAK-aDVEx1e-ce5U.roa (hash: AD5FiCgalWTH4X8YjTKjmnDvWNssEsjzxmI0GCJAqfo=)
                          4: oSVqebziTAnWxzzhjCN56NayiOI.roa (hash: 4+N1yl+V3Z8u2Y+zTUu1AT9E1jyRz8O9S8sbZjaoH7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:11:82:ab:60:e8:5e:36:7d:76:46:d7:92:12:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
        Validity
            Not Before: Aug 14 20:01:00 2026 GMT
            Not After : Aug 15 20:01:00 2026 GMT
        Subject: CN=6ea765df21f5161d324042e072fa01b350007613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:1e:d4:24:19:92:d6:6a:38:7b:9e:eb:ba:
                    71:84:7d:74:32:6b:d3:b7:a5:7e:96:84:62:9b:ab:
                    7d:bf:03:89:34:57:91:ed:fb:09:1a:dc:34:0f:a7:
                    59:25:3d:76:4b:fa:9e:ea:a3:b5:89:a7:e7:5a:8e:
                    10:20:92:2c:c2:48:3d:f7:c2:92:69:d2:40:a7:47:
                    be:ff:4d:95:c8:62:15:52:66:11:a2:ce:9a:98:3a:
                    ae:32:49:fb:51:ce:71:37:b0:59:26:06:ab:60:54:
                    97:94:07:46:ee:68:1f:41:da:37:7f:b0:83:aa:46:
                    16:b5:4e:cd:3b:f6:a9:44:e0:4b:a4:ae:96:07:42:
                    66:5d:f8:98:ca:f8:7e:ec:33:06:d2:c1:80:a0:ac:
                    00:55:18:64:bf:fa:c5:2e:6a:4f:da:1d:de:bd:aa:
                    f8:c3:af:b3:cb:f5:4b:3a:a0:7a:33:c9:d2:de:83:
                    6d:a4:e9:d7:3b:08:61:f4:80:d0:81:7f:87:4f:78:
                    c1:25:d3:37:46:89:8f:03:db:97:52:0e:7c:04:df:
                    7a:0f:05:c8:0e:4f:94:30:52:ce:6d:d5:a8:5a:c4:
                    9f:77:67:73:b1:65:9f:b9:c8:e4:1f:58:0f:3e:25:
                    f6:de:ad:68:e3:a7:bf:9e:73:07:f9:d3:1f:48:7c:
                    21:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A7:65:DF:21:F5:16:1D:32:40:42:E0:72:FA:01:B3:50:00:76:13
            X509v3 Authority Key Identifier:
                keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ba:cd:4a:03:53:3b:b5:47:a9:ab:ff:55:a7:06:35:f1:39:
         ed:bb:87:18:ce:59:62:10:29:57:96:66:19:ff:22:10:01:2f:
         87:9a:43:40:72:56:9b:34:25:83:9d:b0:d9:95:7c:48:4d:a9:
         a2:53:b3:08:3d:1e:f7:dd:47:ee:c0:49:13:98:fb:f8:8c:15:
         cc:a0:28:a6:0d:0d:3e:8f:68:23:f9:58:7b:6c:1b:02:ac:81:
         d0:83:ac:34:2a:ab:f9:df:2b:99:21:b1:23:11:51:03:a0:3f:
         c1:27:74:58:03:aa:8f:ec:92:e1:ea:5d:d0:6c:ea:66:c5:f0:
         b8:df:40:4d:84:88:b0:c2:df:ec:68:8e:8f:70:1f:32:69:ff:
         bb:4a:8f:a6:b2:23:55:ec:6a:eb:9a:98:d1:5b:1a:5f:15:63:
         17:ba:75:56:f6:b2:40:38:45:ef:48:ae:04:1c:07:fa:c5:62:
         bb:5b:b8:c1:b2:9a:f6:4a:42:ae:3f:fd:b2:fb:45:3a:7d:c3:
         62:56:7d:24:db:4c:f3:5b:91:da:63:9c:b3:63:79:d4:bf:fc:
         5c:55:f8:f1:70:17:f0:eb:fb:e3:46:f2:77:82:04:92:b0:90:
         f8:4d:c3:1e:64:ce:26:cf:f8:71:4f:14:ca:31:5f:9f:1c:bd:
         b5:83:c6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:33:04 2026 by rpki-client