Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File:                     AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier:          3i/0sQGn6SntCVwlmKXfVm09Cf3TZwgjCFrTsY7hgoI=
Subject key identifier:   E0:20:16:F8:7C:F1:91:20:80:A4:8E:3E:42:1B:0E:F4:DC:A1:9E:31
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer:       /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial:       01A13DB82704F24C42A84DA3AE3373A8AF43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number:          1514
Signing time:             Thu 15 Oct 2026 04:00:40 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:40 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:40 +0000
Files and hashes:         1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: ZTBLlHjLIH64Yeh96VxWiBiEdRjkjVbZbRuQC0+U1w0=)
                          2: ePG6DY0S1g_n3-izjvFmaMzFYtA.roa (hash: 4EtCOL5WPsRvbWzQ4J4E2mOMMK8/QB99r0YCzdv5MzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:27:04:f2:4c:42:a8:4d:a3:ae:33:73:a8:af:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
        Validity
            Not Before: Oct 15 04:00:40 2026 GMT
            Not After : Oct 16 04:00:40 2026 GMT
        Subject: CN=e02016f87cf1912080a48e3e421b0ef4dca19e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:91:ab:3c:01:8c:4c:bb:95:9f:d1:01:7b:
                    f1:f6:d0:f1:14:4b:96:a8:4b:15:64:e8:93:08:b4:
                    2f:f2:8d:2b:04:6c:8c:6e:76:d7:92:fc:cf:bf:84:
                    a7:58:84:81:ab:10:54:cb:48:22:15:5d:b7:13:9b:
                    a8:2a:2a:71:cd:1f:9f:01:f6:00:86:57:24:ec:70:
                    58:e3:7b:77:c4:29:6a:2d:d2:e4:8f:fd:15:e6:18:
                    11:c3:4b:14:0b:a7:3a:4e:25:0d:f2:d9:ec:6f:2f:
                    68:42:a7:ee:73:12:26:4f:23:aa:1e:e9:58:84:32:
                    49:38:c2:53:2e:01:77:ad:0e:f5:ee:bb:3a:17:2b:
                    d0:e8:87:f0:06:73:60:2a:72:64:f7:46:3c:8a:8b:
                    4b:b4:0b:87:88:e8:77:53:1a:91:92:56:9e:5a:51:
                    a1:48:94:8b:b9:5e:6c:60:26:08:59:94:fe:0a:93:
                    4e:7a:e4:ac:f6:7c:ea:df:f6:67:dc:f8:fb:b5:16:
                    b9:10:10:e7:a8:27:f3:4f:0a:eb:d7:00:0d:32:f8:
                    c1:e0:a4:b2:84:4b:92:b5:2f:ce:cd:97:85:ff:d0:
                    33:b6:6f:17:85:c0:ce:97:52:46:e3:31:07:5d:3f:
                    ad:4d:ab:20:b6:06:44:ae:7b:6b:e6:a3:5b:7a:fb:
                    0d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:20:16:F8:7C:F1:91:20:80:A4:8E:3E:42:1B:0E:F4:DC:A1:9E:31
            X509v3 Authority Key Identifier:
                keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:0e:46:50:d7:56:50:e4:27:04:72:47:ec:75:4f:08:df:a6:
         10:d6:b0:ac:84:da:1a:4d:e4:b2:6d:54:99:d8:92:b8:91:98:
         6a:f8:1d:36:f1:75:13:22:0e:0d:94:5e:bb:81:94:76:31:e4:
         dc:46:9f:6b:12:a4:7c:e9:4b:bd:ad:bd:da:39:88:2a:26:5a:
         43:ba:d5:bb:44:19:29:cb:36:46:76:86:7b:fd:cd:52:92:cb:
         94:f4:ff:7a:a3:28:33:ea:07:f0:c0:f1:15:f6:02:3f:7e:eb:
         59:6b:fb:0c:9a:b0:2d:64:f5:17:87:3c:09:7b:00:3f:4c:3f:
         1f:d3:3e:92:54:a2:bb:2a:17:ea:04:fb:6d:71:7b:77:fd:9c:
         05:33:8f:69:f9:b1:cb:a2:e6:1b:1f:9e:2a:ff:57:08:e1:77:
         00:f0:bc:2f:3b:34:dd:c7:88:36:ce:ae:88:83:20:6d:ee:5a:
         c1:ba:9e:66:90:45:36:2d:51:ec:32:ab:81:7b:79:c2:0a:11:
         cc:b8:39:bb:46:44:cc:c2:b4:d3:b9:4f:f0:9a:f6:7e:79:d2:
         d6:41:a0:75:2f:a6:25:ea:da:ea:4c:58:dd:2f:e2:a5:39:8a:
         73:f9:7c:8d:f7:79:10:65:75:d9:d0:4a:63:c7:a3:1a:5e:47:
         4a:f2:25:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uCcE8kxCqE2jrjNzqK9DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMDM2MTZjYTJmOWFlZmE3MGMzOTE0Y2NlOTBkY2UwOTcw
NmNmYmIwHhcNMjYxMDE1MDQwMDQwWhcNMjYxMDE2MDQwMDQwWjAzMTEwLwYDVQQD
EyhlMDIwMTZmODdjZjE5MTIwODBhNDhlM2U0MjFiMGVmNGRjYTE5ZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQyRqzwBjEy7lZ/RAXvx9tDxFEuW
qEsVZOiTCLQv8o0rBGyMbnbXkvzPv4SnWISBqxBUy0giFV23E5uoKipxzR+fAfYA
hlck7HBY43t3xClqLdLkj/0V5hgRw0sUC6c6TiUN8tnsby9oQqfucxImTyOqHulY
hDJJOMJTLgF3rQ717rs6FyvQ6IfwBnNgKnJk90Y8iotLtAuHiOh3UxqRklaeWlGh
SJSLuV5sYCYIWZT+CpNOeuSs9nzq3/Zn3Pj7tRa5EBDnqCfzTwrr1wANMvjB4KSy
hEuStS/OzZeF/9Aztm8XhcDOl1JG4zEHXT+tTasgtgZErntr5qNbevsNlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAgFvh88ZEggKSOPkIbDvTcoZ4xMB8GA1UdIwQY
MBaAFAIDYWyi+a76cMORTM6Q3OCXBs+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEt
Yzg3Y2E5ZjJiOTVmLzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEtYzg3Y2E5ZjJiOTVm
LzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQ5GUNdW
UOQnBHJH7HVPCN+mENawrITaGk3ksm1UmdiSuJGYavgdNvF1EyIODZReu4GUdjHk
3EafaxKkfOlLva292jmIKiZaQ7rVu0QZKcs2RnaGe/3NUpLLlPT/eqMoM+oH8MDx
FfYCP37rWWv7DJqwLWT1F4c8CXsAP0w/H9M+klSiuyoX6gT7bXF7d/2cBTOPafmx
y6LmGx+eKv9XCOF3APC8Lzs03ceINs6uiIMgbe5awbqeZpBFNi1R7DKrgXt5wgoR
zLg5u0ZEzMK007lP8Jr2fnnS1kGgdS+mJera6kxY3S/ipTmKc/l8jfd5EGV12dBK
Y8ejGl5HSvIlWQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:16 2026 by rpki-client