Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File:                     AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier:          tNDu4DqbtLjZ48uGSRmMtiVj+yrYYUquYCRPtn/nGkg=
Subject key identifier:   55:BE:BD:D2:52:0C:47:1F:2E:AF:CD:6E:08:A4:F4:61:54:0A:5D:A5
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer:       /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial:       019E318561231385C0A33180B6580F785573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number:          1380
Signing time:             Sat 16 May 2026 16:01:24 +0000
Manifest this update:     Sat 16 May 2026 16:01:24 +0000
Manifest next update:     Sun 17 May 2026 16:01:24 +0000
Files and hashes:         1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: mbi3aRpVoQk0SUjHcMtOzuZgkwlVQEmtn8g1Z1CQIcU=)
                          2: ePG6DY0S1g_n3-izjvFmaMzFYtA.roa (hash: 4EtCOL5WPsRvbWzQ4J4E2mOMMK8/QB99r0YCzdv5MzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:61:23:13:85:c0:a3:31:80:b6:58:0f:78:55:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
        Validity
            Not Before: May 16 16:01:24 2026 GMT
            Not After : May 17 16:01:24 2026 GMT
        Subject: CN=55bebdd2520c471f2eafcd6e08a4f461540a5da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bc:f2:b5:6f:da:81:d9:22:50:29:6b:95:41:
                    59:96:7f:0b:b8:bd:08:ed:33:33:56:6f:b6:d3:79:
                    bf:96:e9:53:72:58:d8:72:69:55:13:67:d5:5d:3d:
                    32:ab:7c:db:4f:16:33:06:1d:61:a4:3a:f3:97:aa:
                    46:9c:23:d7:7c:32:c4:63:a4:87:89:44:04:d6:a8:
                    ed:f0:25:00:86:d1:5f:15:cc:b1:1f:4d:13:4a:d1:
                    32:8b:ef:bd:b5:ce:c0:e5:6f:1c:30:d6:38:fb:81:
                    bc:f3:3b:04:91:18:33:02:35:2b:91:2d:55:6a:8b:
                    1e:e5:0d:b5:6e:60:3e:55:2e:06:c2:3c:3a:d2:77:
                    61:a8:f6:ee:72:7f:05:4a:59:c5:ba:9e:99:c8:d8:
                    bf:66:f5:89:f2:69:81:d4:9a:48:fb:51:d9:01:ee:
                    33:48:32:1b:39:20:ec:71:de:55:77:56:d4:89:55:
                    27:12:2d:ad:d5:68:4f:48:dd:d8:b8:45:c2:b3:29:
                    b5:6c:8f:e7:3b:ff:50:89:2f:65:fd:f1:0d:0e:d8:
                    51:97:bc:7a:d0:45:e7:78:ac:9d:dc:75:57:5d:c8:
                    e0:db:d6:41:63:b8:72:74:1c:3f:73:6e:06:b8:ff:
                    c1:ae:00:a7:5b:64:72:4c:3a:5b:49:92:c6:a6:46:
                    d6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BE:BD:D2:52:0C:47:1F:2E:AF:CD:6E:08:A4:F4:61:54:0A:5D:A5
            X509v3 Authority Key Identifier:
                keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:58:5d:23:2f:09:00:a5:4d:72:12:3f:ab:15:ae:d2:4f:b4:
         f0:46:cc:f2:93:e0:1f:b7:7a:6e:c3:a3:89:44:62:dd:33:87:
         97:8b:ee:70:c6:e3:35:ca:6a:7c:ed:78:75:ca:19:cd:ac:03:
         fb:e7:ad:c6:55:c2:47:35:63:e5:46:7f:42:c1:5b:09:6e:d5:
         ce:43:1d:de:dc:0f:d4:8e:88:fd:a7:1b:5f:6e:3b:c7:a5:4c:
         69:a9:33:2c:4c:57:d2:fb:63:13:b1:ce:1f:c8:70:47:1e:78:
         98:c6:52:d4:c3:9e:c4:1c:d3:a7:6d:d7:09:58:29:b8:8b:03:
         8b:54:99:e8:e5:16:d2:a5:1f:bb:ab:35:5b:f3:d0:fb:19:39:
         52:b3:90:95:05:a5:fc:b3:78:41:79:24:57:ad:d2:29:b8:67:
         f5:8a:29:f0:b1:ae:d2:5b:6c:ae:36:48:85:bb:20:da:f6:60:
         16:98:a1:85:33:8d:1a:e3:85:87:1a:09:aa:12:b6:f8:fe:ab:
         12:d9:7c:02:06:a4:ca:82:fc:81:e1:aa:a9:35:23:dd:d5:4c:
         c8:07:ba:1e:66:b4:dd:d1:89:4d:48:76:b2:a6:f9:b1:ca:03:
         64:19:41:1c:d4:ee:8b:23:a3:24:1d:66:02:09:a7:e1:97:49:
         e4:dc:c8:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhWEjE4XAozGAtlgPeFVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMDM2MTZjYTJmOWFlZmE3MGMzOTE0Y2NlOTBkY2UwOTcw
NmNmYmIwHhcNMjYwNTE2MTYwMTI0WhcNMjYwNTE3MTYwMTI0WjAzMTEwLwYDVQQD
Eyg1NWJlYmRkMjUyMGM0NzFmMmVhZmNkNmUwOGE0ZjQ2MTU0MGE1ZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrzytW/agdkiUClrlUFZln8LuL0I
7TMzVm+203m/lulTcljYcmlVE2fVXT0yq3zbTxYzBh1hpDrzl6pGnCPXfDLEY6SH
iUQE1qjt8CUAhtFfFcyxH00TStEyi++9tc7A5W8cMNY4+4G88zsEkRgzAjUrkS1V
aose5Q21bmA+VS4Gwjw60ndhqPbucn8FSlnFup6ZyNi/ZvWJ8mmB1JpI+1HZAe4z
SDIbOSDscd5Vd1bUiVUnEi2t1WhPSN3YuEXCsym1bI/nO/9QiS9l/fENDthRl7x6
0EXneKyd3HVXXcjg29ZBY7hydBw/c24GuP/BrgCnW2RyTDpbSZLGpkbWawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFW+vdJSDEcfLq/Nbgik9GFUCl2lMB8GA1UdIwQY
MBaAFAIDYWyi+a76cMORTM6Q3OCXBs+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEt
Yzg3Y2E5ZjJiOTVmLzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEtYzg3Y2E5ZjJiOTVm
LzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlhdIy8J
AKVNchI/qxWu0k+08EbM8pPgH7d6bsOjiURi3TOHl4vucMbjNcpqfO14dcoZzawD
++etxlXCRzVj5UZ/QsFbCW7VzkMd3twP1I6I/acbX247x6VMaakzLExX0vtjE7HO
H8hwRx54mMZS1MOexBzTp23XCVgpuIsDi1SZ6OUW0qUfu6s1W/PQ+xk5UrOQlQWl
/LN4QXkkV63SKbhn9Yop8LGu0ltsrjZIhbsg2vZgFpihhTONGuOFhxoJqhK2+P6r
Etl8AgakyoL8geGqqTUj3dVMyAe6Hma03dGJTUh2sqb5scoDZBlBHNTuiyOjJB1m
Agmn4ZdJ5NzI6g==
-----END CERTIFICATE-----
Generated at Sat May 16 18:39:39 2026 by rpki-client