Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File:                     agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier:          l/r2Au4AFyHtjVXhyuGTyOMaERkCKP2/ufpAn58j7ao=
Subject key identifier:   74:46:34:18:9A:D8:BF:B9:45:31:DC:6E:9D:EA:35:1D:2B:93:EA:E1
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer:       /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial:       019E4EEA6EB5A60A49D375A9977C96607D32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number:          0C14
Signing time:             Fri 22 May 2026 09:00:46 +0000
Manifest this update:     Fri 22 May 2026 09:00:46 +0000
Manifest next update:     Sat 23 May 2026 09:00:46 +0000
Files and hashes:         1: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: 6yEtvf7NV9x5HheUOYHzPWvs8nn1s8RKE7cWY3eiGco=)
                          2: hTRi4HtTpCkolgUuQDDvPG_VyIs.roa (hash: 0FlUN5CzPW1X1y6ikdRfKAaNuwCJRvtbLFmH3Xzp8cI=)
                          3: wDgy_dfCRG9cDmytDHPeiO1ky38.roa (hash: zBbuMIpRBO8AxXuh3KIVCJ9BZ6863IbMys75IrzppoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4e:ea:6e:b5:a6:0a:49:d3:75:a9:97:7c:96:60:7d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
        Validity
            Not Before: May 22 09:00:46 2026 GMT
            Not After : May 23 09:00:46 2026 GMT
        Subject: CN=744634189ad8bfb94531dc6e9dea351d2b93eae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d7:00:a9:4c:dd:c2:f2:d5:12:51:53:05:ac:
                    40:7d:a6:9b:27:00:d6:eb:ee:f2:72:66:30:1f:02:
                    07:06:c1:0d:3f:07:d9:76:d9:e1:c6:1b:90:1c:ac:
                    c8:5d:fb:4e:80:d8:e8:41:96:10:9a:df:df:cf:5f:
                    1f:5c:ff:9a:de:94:23:f3:84:7b:40:55:bf:6c:6e:
                    16:23:09:9a:f0:96:05:b4:98:fe:c8:2b:16:fc:1c:
                    2a:55:e1:78:4f:7f:94:de:45:7a:f6:cf:a2:dc:0e:
                    8a:5d:50:48:b7:ad:7b:94:c1:15:fd:c3:97:b7:0f:
                    e0:98:36:c6:18:7f:3c:9f:65:01:29:7f:5e:6e:a4:
                    2f:51:e0:99:bb:5f:bf:ba:0d:be:1b:1b:dc:ed:1b:
                    8a:87:e6:1b:58:c4:9d:d9:48:bc:b0:10:49:0b:34:
                    55:99:a8:b6:ba:14:61:d5:01:6d:a1:f9:07:b9:a3:
                    17:d1:00:ab:7b:5f:97:9a:19:7b:2e:9e:0f:5a:60:
                    98:25:8b:10:07:1a:d6:18:84:0f:9f:6c:bf:eb:0a:
                    99:a2:8e:7b:15:fe:9c:04:db:e3:88:d6:e2:94:be:
                    ec:f6:5b:5a:f5:a9:88:dc:d9:26:08:cd:42:df:7d:
                    c6:d5:aa:1e:ee:31:8c:42:81:7a:60:b2:de:cc:26:
                    c5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:46:34:18:9A:D8:BF:B9:45:31:DC:6E:9D:EA:35:1D:2B:93:EA:E1
            X509v3 Authority Key Identifier:
                keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:02:2a:a2:72:1b:7b:04:9c:6c:6b:1f:91:aa:f1:58:70:e4:
         44:75:7c:1b:2b:8d:d5:96:03:66:69:7a:ee:af:84:19:04:4b:
         65:e5:ae:f0:ac:be:5d:75:a8:a9:ea:13:27:39:f4:a7:33:82:
         d1:1b:58:80:61:7d:9e:ff:d4:97:03:bc:20:ab:69:9b:01:85:
         7e:c5:ff:70:89:b7:bb:85:54:bc:35:da:9b:a3:3a:be:f0:6a:
         1f:4f:48:33:84:a3:ec:d2:df:4c:fc:18:8d:01:cd:08:c2:95:
         fa:d3:77:4a:be:7b:92:7c:3b:9d:c2:6b:8c:31:f1:b5:4f:fc:
         26:65:ba:33:2f:4f:12:11:3f:51:3b:54:c0:a3:5f:57:90:56:
         af:01:ae:18:79:24:b9:80:01:12:45:04:dc:6e:87:ec:5b:8d:
         1f:ab:61:89:4d:ea:ff:2e:36:98:4f:59:a1:dd:2f:d9:53:64:
         86:8c:2e:e7:aa:af:07:c0:6d:e3:fc:27:fa:8e:43:a7:f9:f2:
         43:b8:ab:d8:04:31:44:87:72:b6:7f:be:d2:0c:45:cf:81:e4:
         15:aa:0a:5a:55:57:a2:8f:9d:ec:ec:81:39:3b:d6:31:fe:92:
         4c:ae:17:25:86:96:5e:fc:75:d2:9d:1e:71:ac:c8:a5:8d:09:
         7f:7b:72:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5O6m61pgpJ03Wpl3yWYH0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMDE2ZGFkMjczMDQ3YjE4ODg2NjkxNDg1ZGVkZDk3MTcx
YzRkNjgwHhcNMjYwNTIyMDkwMDQ2WhcNMjYwNTIzMDkwMDQ2WjAzMTEwLwYDVQQD
Eyg3NDQ2MzQxODlhZDhiZmI5NDUzMWRjNmU5ZGVhMzUxZDJiOTNlYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dcAqUzdwvLVElFTBaxAfaabJwDW
6+7ycmYwHwIHBsENPwfZdtnhxhuQHKzIXftOgNjoQZYQmt/fz18fXP+a3pQj84R7
QFW/bG4WIwma8JYFtJj+yCsW/BwqVeF4T3+U3kV69s+i3A6KXVBIt617lMEV/cOX
tw/gmDbGGH88n2UBKX9ebqQvUeCZu1+/ug2+Gxvc7RuKh+YbWMSd2Ui8sBBJCzRV
mai2uhRh1QFtofkHuaMX0QCre1+Xmhl7Lp4PWmCYJYsQBxrWGIQPn2y/6wqZoo57
Ff6cBNvjiNbilL7s9lta9amI3NkmCM1C333G1aoe7jGMQoF6YLLezCbFzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRGNBia2L+5RTHcbp3qNR0rk+rhMB8GA1UdIwQY
MBaAFGoBba0nMEexiIZpFIXe3ZcXHE1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMt
Yzk1MjgwNDkzMmMyLzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMtYzk1MjgwNDkzMmMy
LzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0wIqonIb
ewScbGsfkarxWHDkRHV8GyuN1ZYDZml67q+EGQRLZeWu8Ky+XXWoqeoTJzn0pzOC
0RtYgGF9nv/UlwO8IKtpmwGFfsX/cIm3u4VUvDXam6M6vvBqH09IM4Sj7NLfTPwY
jQHNCMKV+tN3Sr57knw7ncJrjDHxtU/8JmW6My9PEhE/UTtUwKNfV5BWrwGuGHkk
uYABEkUE3G6H7FuNH6thiU3q/y42mE9Zod0v2VNkhowu56qvB8Bt4/wn+o5Dp/ny
Q7ir2AQxRIdytn++0gxFz4HkFaoKWlVXoo+d7OyBOTvWMf6STK4XJYaWXvx10p0e
cazIpY0Jf3ty/w==
-----END CERTIFICATE-----
Generated at Fri May 22 15:13:25 2026 by rpki-client