Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
File:                     BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json)
Hash identifier:          9iGHoIm7Y5uBl3A3AzCszaTmTNBLSQoyCw4AzL65thg=
Subject key identifier:   C1:E0:EB:05:1A:C3:75:A1:73:63:A1:9E:0D:85:14:C1:BE:8C:43:FD
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       019CBF96C5DAA3BC02263BF35F2FFDEF8558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
Manifest number:          13F2
Signing time:             Thu 05 Mar 2026 20:00:55 +0000
Manifest this update:     Thu 05 Mar 2026 20:00:55 +0000
Manifest next update:     Fri 06 Mar 2026 20:00:55 +0000
Files and hashes:         1: 1VAUKQYyRyqVufQZ6mQkYGsYsiE.roa (hash: 1UxCwpeiuCaB4NtOHBTH7GLcym81PgfYyIzfwzAklFY=)
                          2: 9OXwbbo9zr_3BQj52xJjo87B1H0.roa (hash: nd0RN9d/PlTgDX+aJhBlBpTwb0az6QSS6Oggok8UdKw=)
                          3: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: XSKZRHhjJsIsnPmqfJbtVUGXPM4rs6AR7c9lv9cGgsw=)
                          4: IV_vu7OX7GeGa8lSfJg8_q8xCvo.roa (hash: EqnLgWYSsbEEljSlnCDlnIwQvLw5hISyxs/7YKEWdm4=)
                          5: Klar462pF_C7Uti8GK6IYP2krDE.roa (hash: 3WyNeae+niIgGbLc2lmu97xevrRHuow2kNsFvJfq+R8=)
                          6: LhUoyafw0eBO0Ih4BQB3S8BEgpc.roa (hash: +v0l6P5r3gLGYQgL2479m1StjC9ighRFwkqys6s0Hnw=)
                          7: P2LjaDtYMpe_CWSncsWRaVlnCFw.roa (hash: rv+G8zQN4NdUsb52K+K9v2QbvUnYOnNmTAPUjYU2K6M=)
                          8: QQg-EV4YSeTtW88liCvZE3JZJN4.roa (hash: BlNIOZivnagMRQWrTBwPXmJaq1VIGQ1ABsuvUyI4XEE=)
                          9: QomjpQx9_CU1bmLVLsZtPoZDq78.roa (hash: HNmZtCav5oDUjr+7p6DMbvp4B1wr1fA/JAYD/NDabk4=)
                          10: SOgaP1DH2swEptFsywDuWJ897xw.roa (hash: LYHLoXM2uerJ8kW5uG4y1NPyevrNKVqu8gNCKOXwcIo=)
                          11: T7oxV4Rmv2aGG5h-sq_bbfp7cXk.roa (hash: 56UkEBVR91odUYAEuW3iMxqImg8YTpwGiDV/Dlr2y/A=)
                          12: T86y2lb6VM9SYijib5Gx6TXU_P8.roa (hash: ExJprcrpe0RGYOZUNA24jfKZT7aUwu9YCrRRkzYlGpo=)
                          13: TSAciExIDDLBEcTIBLpyxR8oUe8.roa (hash: xuR6T02zCPYtUbw7NwiqXuHRlL2/+geA0rMQimehzsE=)
                          14: TsfF6totEPD5J_SD01aG26CeNlU.roa (hash: pacbzaruVfidutobZhr9cP689NUwwKv7FUw+m6XxsRo=)
                          15: YKYYd-HmDONZzhNy7AZPruAczLQ.roa (hash: vW22etpUmfQZNAgNwW3NzuTrwiYhU9D/ujqkIZK/8ZM=)
                          16: YrCSoDY2gBELylrBp80qKY1mLFw.roa (hash: n1TS2t+Errsfcdk3+b0U++Qmqd3Sf71dOOXviQAbSkY=)
                          17: ZdmHkUJ9PRKhmoc8jv7LUUj_Wd4.roa (hash: F/KMJPmsP3cXeV6hR2o7i96s5m6Ldck+0oyUPjMxPwI=)
                          18: _oMS8vQNhi6R4XyJHn3Kgm85oW8.roa (hash: G/zJxy7ZK39KBuYYRk7Yf3yrVTAyUCZvIxiOw4FGcYk=)
                          19: fKtoyxRVW8bUMI_rB5p-nLcW5mU.roa (hash: ps8RU8VkZlyeWoj9Je22w0i7MXOLJvXdQve7pnVShE0=)
                          20: o82wJADBHFkJX5vOdfLDcdz7SfI.roa (hash: u+qyev6ZaFOmLJt2UGgP85ay/0TbQc+SxI2fnx4Zyc4=)
                          21: qO2ZYDlru8D0qKA_PlIfPHuJ87Y.roa (hash: yAQHrlDWiEN3OIpMgVB3JbW0VXL3siiz0W9Zs2LsAnQ=)
                          22: qpMUFqbg_01nqmll8WKGqUhaRKU.roa (hash: shJV+eC5RH0MlPfYyy61cbtv+g4CqZaYC7XyO4CDx6U=)
                          23: rTo0UEeW4WSn2MjXsG-3uABsPfY.roa (hash: Imb7IO3Q8rHzQrWinxJegVt8mzKf4/246lxnQ0sa3no=)
                          24: rpVLr8z0Q-daVQyM2phBebLHi-c.roa (hash: t15MMtXGB4+ZqruHYd6ECdAxV9EJz5rFd075EMYE3Bg=)
                          25: sZn_8RaubZPigyXGXO2IjK2MOTM.roa (hash: bEBPF8tv/kM4E97KTe1cHoW9Ts80r9Q2pr3xoQ63Ogc=)
                          26: xM-FcmqLH2Fk4MxXGNAUdHPs5WA.roa (hash: zAQ/rpcpYL8nwkL4BP7Yry3eVEA7iIIHw5MMjWEuGzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bf:96:c5:da:a3:bc:02:26:3b:f3:5f:2f:fd:ef:85:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Mar  5 20:00:55 2026 GMT
            Not After : Mar  6 20:00:55 2026 GMT
        Subject: CN=c1e0eb051ac375a17363a19e0d8514c1be8c43fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ee:26:b2:1c:80:15:e4:6a:9f:b2:56:e0:ad:
                    50:12:a7:b8:f4:17:f5:98:f0:8f:a4:9c:dc:bf:e2:
                    45:79:94:a8:85:70:60:a3:1b:79:78:64:4a:c2:47:
                    e2:de:c3:23:85:4d:a3:4d:63:43:f9:91:a7:0e:01:
                    08:db:75:c1:82:07:34:61:1e:12:bf:00:03:ff:92:
                    43:0a:c9:cb:4b:fb:e5:9e:53:5b:7f:6a:72:bf:30:
                    8a:7b:cd:98:2f:90:f6:7b:88:06:9a:44:17:65:2d:
                    df:f5:fb:73:51:95:78:85:a3:54:92:b8:3f:ca:5d:
                    69:a0:e9:db:89:4d:79:ca:fa:2b:e7:9b:3d:0a:15:
                    1c:66:8d:49:ba:97:f6:80:fc:0b:37:d8:9d:dc:5e:
                    38:47:27:83:4d:7e:22:66:a2:f5:6d:2c:cf:e3:32:
                    4f:c7:1f:49:3c:a5:dd:f4:10:31:b9:b5:f3:65:11:
                    1f:80:10:d1:2f:87:40:a6:c8:c0:c1:8e:72:90:f5:
                    91:ea:b9:a4:bb:d7:6d:d9:cc:66:01:5b:28:46:41:
                    7e:f5:b5:ec:0a:87:a3:58:7e:13:d0:40:11:3d:b7:
                    0c:c0:b6:cf:65:03:c8:19:12:e2:ac:37:29:3e:ac:
                    51:6e:9c:b3:21:e1:1c:b1:7a:b3:ea:25:71:4b:a5:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E0:EB:05:1A:C3:75:A1:73:63:A1:9E:0D:85:14:C1:BE:8C:43:FD
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:55:57:4a:1d:57:e0:ce:31:1a:0e:ec:ca:f5:84:3a:be:08:
         eb:b5:1b:3e:6f:d3:96:04:2b:44:da:a2:b8:d9:c7:c1:3c:27:
         e9:dc:d7:04:ad:73:32:46:f0:ab:e8:81:c9:23:de:08:54:a8:
         c8:c6:42:1f:8a:73:72:94:4e:02:07:0e:9e:d2:2d:66:fe:b7:
         d6:63:63:72:04:91:e4:f9:2d:01:72:9a:a0:cd:45:47:d7:60:
         a0:1b:75:64:c7:6a:f2:4b:04:55:85:65:88:d0:e5:34:dc:d3:
         08:13:fd:b9:35:93:df:04:a5:01:c0:ac:20:0a:13:b4:3c:0f:
         55:d9:d3:50:fc:dc:2b:97:da:de:ee:8b:5b:21:46:90:3c:de:
         2e:83:9f:24:69:48:5c:8b:1c:3c:a8:f0:12:63:6e:4e:10:3d:
         99:7f:b9:8d:29:a7:66:10:1b:24:f2:fa:de:a1:cc:e7:37:66:
         4a:23:74:5f:7e:79:cd:f5:76:de:42:a3:c8:01:82:11:92:c6:
         7d:b3:e6:bb:e5:95:2b:6b:25:9a:73:37:1c:c6:34:d1:08:60:
         e5:19:84:42:3a:d1:2b:fb:c5:65:7f:78:4b:01:7c:7c:12:61:
         a8:bf:8b:2f:a0:c1:de:11:4a:b2:39:fb:c6:31:4b:ec:43:9f:
         fd:a8:25:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy/lsXao7wCJjvzXy/974VYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjYwMzA1MjAwMDU1WhcNMjYwMzA2MjAwMDU1WjAzMTEwLwYDVQQD
EyhjMWUwZWIwNTFhYzM3NWExNzM2M2ExOWUwZDg1MTRjMWJlOGM0M2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+4mshyAFeRqn7JW4K1QEqe49Bf1
mPCPpJzcv+JFeZSohXBgoxt5eGRKwkfi3sMjhU2jTWND+ZGnDgEI23XBggc0YR4S
vwAD/5JDCsnLS/vlnlNbf2pyvzCKe82YL5D2e4gGmkQXZS3f9ftzUZV4haNUkrg/
yl1poOnbiU15yvor55s9ChUcZo1Jupf2gPwLN9id3F44RyeDTX4iZqL1bSzP4zJP
xx9JPKXd9BAxubXzZREfgBDRL4dApsjAwY5ykPWR6rmku9dt2cxmAVsoRkF+9bXs
CoejWH4T0EARPbcMwLbPZQPIGRLirDcpPqxRbpyzIeEcsXqz6iVxS6U1WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHg6wUaw3Whc2Ohng2FFMG+jEP9MB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVVXSh1X
4M4xGg7syvWEOr4I67UbPm/TlgQrRNqiuNnHwTwn6dzXBK1zMkbwq+iBySPeCFSo
yMZCH4pzcpROAgcOntItZv631mNjcgSR5PktAXKaoM1FR9dgoBt1ZMdq8ksEVYVl
iNDlNNzTCBP9uTWT3wSlAcCsIAoTtDwPVdnTUPzcK5fa3u6LWyFGkDzeLoOfJGlI
XIscPKjwEmNuThA9mX+5jSmnZhAbJPL63qHM5zdmSiN0X355zfV23kKjyAGCEZLG
fbPmu+WVK2slmnM3HMY00Qhg5RmEQjrRK/vFZX94SwF8fBJhqL+LL6DB3hFKsjn7
xjFL7EOf/aglVA==
-----END CERTIFICATE-----
Generated at Fri Mar 6 03:47:52 2026 by rpki-client