Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File:                     AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier:          UFd92G618rtVOAlbBiYutvX87m8PEIKxJSux9sIOx3U=
Subject key identifier:   09:70:61:7F:BD:50:61:D8:E5:F2:2E:E4:7A:A6:55:8E:C8:0F:FC:8D
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer:       /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial:       01A0859CA98412FD060B41CB258C74AEA348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number:          1A4A
Signing time:             Wed 09 Sep 2026 10:00:31 +0000
Manifest this update:     Wed 09 Sep 2026 10:00:31 +0000
Manifest next update:     Thu 10 Sep 2026 10:00:31 +0000
Files and hashes:         1: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (hash: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4=)
                          2: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: 7+0yTA1a/lq3XC0h5tVoAQYYAZZo3gSGr2wXZ5ceww0=)
                          3: KqW4k975xNj0cUtZycmmIX1XgM4.roa (hash: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k=)
                          4: NurrzfLeVosuCbdskOR80jmR2QQ.roa (hash: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 10:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:85:9c:a9:84:12:fd:06:0b:41:cb:25:8c:74:ae:a3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
        Validity
            Not Before: Sep  9 10:00:31 2026 GMT
            Not After : Sep 10 10:00:31 2026 GMT
        Subject: CN=0970617fbd5061d8e5f22ee47aa6558ec80ffc8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:1f:df:07:70:19:d1:71:e0:d3:bd:66:32:
                    38:3d:25:5f:ac:e1:26:30:6f:c2:1f:b4:69:3e:be:
                    e6:d8:d1:51:06:51:de:e8:8a:5f:9e:3c:5a:41:64:
                    72:89:8a:a7:52:94:8a:1d:02:f8:48:84:5c:ab:6d:
                    c7:f8:22:42:cc:09:bb:7f:55:a6:4e:f6:5e:e6:f7:
                    93:09:35:ad:53:d4:d5:ad:fd:5f:21:0c:53:3e:db:
                    cf:50:d9:b4:a6:80:0b:79:e6:1c:73:8f:9a:5c:09:
                    06:ee:42:fc:77:8b:b5:d7:83:51:73:eb:81:3f:78:
                    d5:35:82:b6:c2:c9:30:ae:30:a8:c6:1d:c0:79:8a:
                    91:61:57:d2:a7:cc:34:a0:5c:7c:0f:fe:82:69:4b:
                    24:29:d7:9f:3a:3a:77:bb:e6:ec:e2:84:86:10:b7:
                    e7:c8:80:0a:4e:df:70:0c:9d:2f:a0:43:49:c7:3a:
                    a9:ef:5f:45:4b:00:64:36:96:db:79:fd:97:52:c9:
                    38:bf:c5:5b:21:75:f3:65:90:83:fb:d3:0c:4a:d1:
                    7b:fd:28:52:5d:9b:cf:2b:87:f1:a0:df:24:60:2e:
                    dc:69:50:98:cf:f7:43:9f:13:50:57:12:5c:3e:3c:
                    03:88:4b:f9:f0:28:a7:2a:e2:61:77:94:9e:34:70:
                    6c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:70:61:7F:BD:50:61:D8:E5:F2:2E:E4:7A:A6:55:8E:C8:0F:FC:8D
            X509v3 Authority Key Identifier:
                keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:44:3d:0f:33:c7:5a:93:f5:92:4c:cf:a0:65:d4:8e:ee:e1:
         74:c7:75:e9:cd:05:ee:8b:32:d0:de:20:45:df:0e:45:72:eb:
         a8:4e:71:19:e1:7b:33:7d:51:23:9b:16:87:f0:20:6c:fd:6c:
         82:18:5b:21:fd:da:b9:c2:37:13:f5:58:35:e9:26:a6:14:e3:
         96:a0:0a:12:31:29:26:56:69:55:4d:e7:d3:91:19:18:2f:0c:
         12:00:2c:36:64:6a:63:79:de:e3:76:67:65:1b:3d:5b:c7:a5:
         f1:f4:12:c2:97:36:fd:86:a8:d6:9d:6d:ae:01:e9:26:26:5c:
         28:d9:d7:4e:65:cf:72:d1:d0:4b:6a:30:da:bd:5d:e1:85:32:
         e9:49:59:8d:7c:7d:9d:f6:54:cf:82:ea:35:69:e3:77:21:c3:
         fb:33:1f:19:3b:5e:47:da:d9:1a:f8:6d:f0:e0:57:e1:35:53:
         a9:49:59:a4:5c:d9:13:57:eb:71:9b:2a:1b:84:d4:45:50:26:
         fe:2a:6d:dc:77:78:2a:78:06:21:8d:4d:72:aa:30:29:a4:0d:
         f8:f8:a3:e3:fc:c0:33:93:0a:3e:a6:10:c9:31:af:53:ed:a1:
         c3:5e:7d:c2:41:7e:87:f8:7e:e2:52:14:fd:b5:81:98:bb:fd:
         40:f7:c1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:18:52 2026 by rpki-client