Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File:                     AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier:          15ts39pvOVSd0wzqLTSqtYg9o46zryAQZHM5qtXtsyk=
Subject key identifier:   5F:2B:94:98:3B:4A:98:E7:6F:6D:3A:98:92:7E:6F:06:06:62:56:0D
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer:       /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial:       01A001017515E09C69EA1305A2C4BBAA4410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number:          1470
Signing time:             Fri 14 Aug 2026 16:01:07 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:07 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:07 +0000
Files and hashes:         1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: MaGCUeXFfU9QgthtZS6cEs2SN+y87AuIgQNQcCHQzp4=)
                          2: ePG6DY0S1g_n3-izjvFmaMzFYtA.roa (hash: 4EtCOL5WPsRvbWzQ4J4E2mOMMK8/QB99r0YCzdv5MzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:75:15:e0:9c:69:ea:13:05:a2:c4:bb:aa:44:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
        Validity
            Not Before: Aug 14 16:01:07 2026 GMT
            Not After : Aug 15 16:01:07 2026 GMT
        Subject: CN=5f2b94983b4a98e76f6d3a98927e6f060662560d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5b:47:0b:8b:fe:c5:95:c4:37:31:cd:7f:b7:
                    35:62:1b:dc:b0:c0:a6:04:b3:bc:e4:92:b7:bc:f1:
                    00:4c:74:e9:63:56:34:b0:b5:e9:16:93:6f:76:66:
                    8a:db:ec:2c:f7:44:8d:73:bd:86:96:9d:33:e0:88:
                    ef:f3:f6:a0:d0:db:16:dd:cd:d8:c4:22:7f:20:af:
                    e5:c6:a8:57:d0:51:07:bc:26:f8:c4:f9:4a:9d:ec:
                    32:65:a2:96:0a:0a:34:68:70:15:db:cf:4e:fe:04:
                    33:78:ce:f2:4d:87:e4:3a:8c:6e:84:a8:9e:68:af:
                    a9:23:15:6f:99:dd:7d:f0:f6:e5:a9:cd:3f:82:8a:
                    0e:6c:0b:45:f6:71:a4:f0:ba:80:8d:d3:6f:51:f9:
                    1b:f0:92:a9:6e:5a:8d:f9:e4:d4:b6:ef:3b:f3:cf:
                    1d:93:c7:d7:23:30:c7:62:be:6f:cb:a1:75:ce:34:
                    b1:c4:16:28:33:12:cc:85:0c:3e:1f:8a:7a:87:f5:
                    17:19:49:1b:cf:d3:2f:e6:4b:10:3e:06:eb:e9:8f:
                    98:d4:16:a0:07:b3:2a:0d:7d:99:ff:c8:ae:57:d6:
                    5c:55:42:45:e0:f3:39:a6:bc:92:84:24:ed:fb:28:
                    7c:5d:5a:3d:a2:84:f1:45:95:d5:1b:f6:be:6e:38:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2B:94:98:3B:4A:98:E7:6F:6D:3A:98:92:7E:6F:06:06:62:56:0D
            X509v3 Authority Key Identifier:
                keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d1:17:79:3b:bf:94:40:53:fb:56:0e:30:36:ea:9b:01:8b:
         b6:db:a3:75:45:18:fc:09:82:e9:03:5b:fd:4b:e8:b3:3b:40:
         87:b3:62:fa:bb:d0:a0:89:41:a7:1c:e8:b6:20:34:b8:21:3f:
         41:8e:38:cc:c1:f0:aa:9e:87:d4:46:24:bb:44:9d:af:bc:67:
         67:74:f5:d8:fc:bc:a2:2d:21:70:23:3b:99:70:60:52:7a:6e:
         cf:53:0e:29:9b:ab:f2:92:09:2a:ae:53:93:ef:58:39:6b:cd:
         d3:6a:af:1b:12:a6:cb:86:f3:84:1e:a0:97:07:c6:53:02:da:
         fb:e8:27:50:ab:0a:21:a1:a1:69:74:e1:72:fd:c2:73:60:ad:
         a4:8d:bc:af:4a:8f:56:c0:f3:79:83:3d:1d:06:f7:c2:ac:fc:
         0d:5f:75:cb:41:1a:5c:19:31:ab:8a:36:ec:37:73:97:a3:2e:
         fa:47:93:75:7a:2d:30:71:b1:e8:86:f6:b9:f7:20:f0:35:8f:
         4e:97:ad:ec:ee:34:2e:3f:c5:8b:80:0e:68:4f:51:8c:ea:89:
         18:7c:3f:94:94:af:01:79:69:98:6b:39:d3:98:b5:c3:6d:9a:
         44:56:6c:7a:1e:b7:1c:76:3d:f1:63:a5:34:0b:d0:49:30:0a:
         a0:bf:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:08 2026 by rpki-client