Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
File:                     AguJY5thIAOqgSvktlIbVnhFao4.mft (raw, json)
Hash identifier:          BVJq7hm0gw0Hnl99NmYiNofUnxceP1+e+oQecfHqK+Q=
Subject key identifier:   49:E7:3D:DB:0C:4E:C9:61:16:F8:5B:28:64:58:8B:02:E2:10:97:EB
Authority key identifier: 02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
Certificate issuer:       /CN=020b89639b612003aa812be4b6521b5678456a8e
Certificate serial:       01A00093B8AE3ECF294677FF8AD1AFCC1506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
Manifest number:          0761
Signing time:             Fri 14 Aug 2026 14:01:16 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:16 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:16 +0000
Files and hashes:         1: AguJY5thIAOqgSvktlIbVnhFao4.crl (hash: keSqfFjUmDlqOn42tqNGGTemxG6zbF9S0e3nYFMde1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:b8:ae:3e:cf:29:46:77:ff:8a:d1:af:cc:15:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020b89639b612003aa812be4b6521b5678456a8e
        Validity
            Not Before: Aug 14 14:01:16 2026 GMT
            Not After : Aug 15 14:01:16 2026 GMT
        Subject: CN=49e73ddb0c4ec96116f85b2864588b02e21097eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c9:cc:da:4a:4b:ec:17:84:bb:97:47:6c:97:
                    26:f5:01:a0:ee:30:cb:31:57:9f:eb:2d:f6:b2:e9:
                    aa:ba:19:50:85:cb:97:7b:27:10:c5:41:ef:11:7f:
                    b2:a8:9a:29:15:a7:df:d1:6e:42:92:ec:9f:70:dc:
                    2d:46:f1:13:f9:05:db:0f:7c:bc:21:a2:d2:2d:96:
                    a4:f0:c9:8f:48:97:f6:bf:73:dc:5e:74:e5:89:5a:
                    28:c0:8d:74:a2:9e:d9:ef:72:9c:0e:46:c2:f7:38:
                    77:92:a8:f2:fe:a0:d8:cf:bf:29:58:ed:57:3d:58:
                    80:aa:62:f9:ce:7d:55:8d:7d:91:bf:66:59:ea:43:
                    c3:57:c4:a7:a7:47:ec:f0:78:17:a4:9e:38:25:ca:
                    be:d9:ac:6f:bd:8f:5a:56:88:30:67:40:80:59:d0:
                    3a:56:d7:d8:48:fe:f3:d0:e1:f5:0c:0a:b0:7d:10:
                    7e:68:c5:3f:92:5e:69:e1:30:68:fc:89:47:05:cd:
                    62:39:b6:34:be:3d:f9:f5:20:39:5d:3f:ce:28:64:
                    1f:f5:c4:23:60:60:df:2a:e7:62:56:9f:36:4c:91:
                    b3:25:a6:a5:e6:db:2a:6a:52:da:b1:bf:9c:7a:3f:
                    3d:51:02:6d:9e:b0:64:c7:f3:f4:3e:be:01:0b:bd:
                    d9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E7:3D:DB:0C:4E:C9:61:16:F8:5B:28:64:58:8B:02:E2:10:97:EB
            X509v3 Authority Key Identifier:
                keyid:02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:93:6c:ba:c5:cc:86:c4:4a:58:e7:3f:bf:d0:44:b5:0a:00:
         c1:bf:9e:35:64:7c:90:05:c3:d3:d3:11:98:68:92:97:5b:6a:
         f5:4b:f6:dc:27:fc:47:79:a4:88:85:13:c5:3a:c6:c2:e2:e3:
         ca:b8:a1:8a:08:94:df:9f:37:41:ec:97:16:31:f5:23:10:bc:
         7c:c4:2c:65:5a:2f:c5:7d:75:7a:26:62:c3:52:3d:86:4c:50:
         75:7d:dd:59:a0:36:e1:c0:b0:59:81:f8:0b:8c:70:2e:37:a6:
         56:09:02:81:4c:32:73:85:f4:55:f1:f1:d4:9a:7d:87:6b:4b:
         8f:06:8b:21:b5:54:0e:3e:6e:c6:bc:49:96:d3:1c:a6:aa:66:
         f6:d9:0d:3b:f4:47:5d:0e:00:ea:21:35:0d:1e:75:b7:39:ff:
         52:cd:d2:3f:f3:cf:3e:5e:5c:dd:3b:ec:87:2d:e6:25:82:84:
         f3:0d:25:93:7c:89:81:c5:c9:fd:fc:2e:84:eb:45:c2:8c:76:
         ce:66:06:f2:22:6a:b7:eb:58:f8:d8:69:e3:e3:db:93:85:b2:
         12:16:81:11:a3:d6:a5:ba:bd:03:e4:7d:b0:6b:9f:59:05:ba:
         9b:7c:06:49:58:4d:6d:7d:17:77:1f:c6:2f:1e:8d:dc:5a:98:
         5b:6e:97:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:54 2026 by rpki-client