Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File:                     agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier:          bRI32AkpIo6yh7w1PcO7pLqY/A14MEzADnd44f9hjvY=
Subject key identifier:   89:DB:53:C1:18:A1:8E:D9:05:2D:AE:1C:84:49:12:4C:17:3C:20:4A
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer:       /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial:       019EC29228D3E1170F35175F096E4AF2D199
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 20:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:19 +0000
Files and hashes:         1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: +C6ASmYsA1KmQc2zJOO3zBT9J5yBLiwwjO/KL3LdCs8=)
                          2: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (hash: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:28:d3:e1:17:0f:35:17:5f:09:6e:4a:f2:d1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
        Validity
            Not Before: Jun 13 20:00:19 2026 GMT
            Not After : Jun 14 20:00:19 2026 GMT
        Subject: CN=89db53c118a18ed9052dae1c8449124c173c204a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:5c:28:3c:3c:5f:ab:53:69:fc:8e:9e:0a:
                    13:93:bd:73:51:a3:62:cd:3f:83:5e:0a:15:c0:58:
                    ff:c3:b4:1e:04:10:b0:00:bd:08:63:27:75:3c:ff:
                    7b:23:8d:dc:1c:70:b0:e6:cf:a4:f7:7c:de:73:4c:
                    36:f1:69:b9:47:8f:23:0e:48:1d:9c:60:41:d7:52:
                    0f:ee:6a:b1:30:33:bd:5f:c5:72:95:65:2a:0c:9b:
                    75:77:0d:e2:17:9b:52:06:39:3f:5b:fd:29:b1:40:
                    e0:b1:fc:c8:4c:e2:c9:7e:8b:fb:61:6e:52:e0:55:
                    cc:02:ac:7c:e3:51:02:7f:3f:d7:99:82:dc:9e:99:
                    f9:fa:6f:c4:85:43:61:e3:e9:d8:0f:84:b2:cf:1d:
                    dd:e2:42:e0:6b:37:ce:c5:8e:29:33:51:30:b5:65:
                    38:5e:66:e4:39:91:29:f5:75:a5:e9:00:82:09:72:
                    ee:f1:ae:c9:2a:bb:02:2c:e8:f7:2f:d7:ef:da:ab:
                    c5:a1:9e:a1:d3:fb:ee:48:ee:af:01:f9:79:75:d2:
                    39:26:63:1f:8a:69:df:21:ef:1c:d7:26:14:b7:4f:
                    15:ac:57:11:fd:2f:1f:ec:d3:17:a0:2b:81:33:2d:
                    a1:50:f1:fd:49:05:15:b7:d3:92:e3:8b:65:5e:b2:
                    21:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DB:53:C1:18:A1:8E:D9:05:2D:AE:1C:84:49:12:4C:17:3C:20:4A
            X509v3 Authority Key Identifier:
                keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c4:4f:bd:5a:64:b5:af:df:c0:e6:fc:50:06:d3:6f:1b:93:
         b7:ed:eb:76:1f:b5:f1:34:60:a0:66:d1:2d:27:b6:bf:0c:27:
         f8:f3:e8:ff:4c:22:c5:77:59:7f:20:b1:39:6c:48:ed:ed:67:
         ef:17:ae:64:1b:3f:77:77:f6:9b:18:38:5b:6b:ba:df:e0:7b:
         24:ca:95:69:4f:bf:95:61:31:b4:77:c7:72:92:e3:82:e1:1b:
         ab:f8:17:2a:d9:a2:36:c1:cb:b7:7d:4b:6f:46:e2:93:3a:6c:
         51:a6:ec:c1:1e:97:36:99:2c:84:24:17:83:d5:ec:c6:c7:e5:
         90:9b:19:d5:f4:14:53:e8:c9:c4:5c:65:2a:c4:5a:44:fa:fd:
         5d:3c:86:c5:75:bb:4e:7d:a2:12:b7:67:6c:73:af:aa:b6:4c:
         2e:b5:26:b8:ae:29:ab:ab:79:ed:04:6b:fa:98:ab:58:fc:c0:
         e4:c0:b4:84:76:ef:59:94:0b:05:95:0c:fc:78:11:6b:21:f6:
         53:8e:d2:7d:c9:8f:18:9c:fd:4e:ad:c8:3f:22:80:60:ee:56:
         ac:10:dd:76:a0:5d:3f:b7:62:40:74:de:18:a2:55:6e:40:28:
         8d:2a:e2:cd:62:09:69:99:69:78:47:08:e2:8f:bc:0d:36:fa:
         41:93:02:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CkijT4RcPNRdfCW5K8tGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMDRjYTRhOTY2MTYzMWM0ZWM2MTVhM2E2ZDE1ZDIyMDMw
ZGNmNDkwHhcNMjYwNjEzMjAwMDE5WhcNMjYwNjE0MjAwMDE5WjAzMTEwLwYDVQQD
Eyg4OWRiNTNjMTE4YTE4ZWQ5MDUyZGFlMWM4NDQ5MTI0YzE3M2MyMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+BcKDw8X6tTafyOngoTk71zUaNi
zT+DXgoVwFj/w7QeBBCwAL0IYyd1PP97I43cHHCw5s+k93zec0w28Wm5R48jDkgd
nGBB11IP7mqxMDO9X8VylWUqDJt1dw3iF5tSBjk/W/0psUDgsfzITOLJfov7YW5S
4FXMAqx841ECfz/XmYLcnpn5+m/EhUNh4+nYD4Syzx3d4kLgazfOxY4pM1EwtWU4
XmbkOZEp9XWl6QCCCXLu8a7JKrsCLOj3L9fv2qvFoZ6h0/vuSO6vAfl5ddI5JmMf
imnfIe8c1yYUt08VrFcR/S8f7NMXoCuBMy2hUPH9SQUVt9OS44tlXrIhaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInbU8EYoY7ZBS2uHIRJEkwXPCBKMB8GA1UdIwQY
MBaAFGoEykqWYWMcTsYVo6bRXSIDDc9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMt
ODExM2RhNjdlZjc1LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMtODExM2RhNjdlZjc1
LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8RPvVpk
ta/fwOb8UAbTbxuTt+3rdh+18TRgoGbRLSe2vwwn+PPo/0wixXdZfyCxOWxI7e1n
7xeuZBs/d3f2mxg4W2u63+B7JMqVaU+/lWExtHfHcpLjguEbq/gXKtmiNsHLt31L
b0bikzpsUabswR6XNpkshCQXg9XsxsflkJsZ1fQUU+jJxFxlKsRaRPr9XTyGxXW7
Tn2iErdnbHOvqrZMLrUmuK4pq6t57QRr+pirWPzA5MC0hHbvWZQLBZUM/HgRayH2
U47SfcmPGJz9Tq3IPyKAYO5WrBDddqBdP7diQHTeGKJVbkAojSrizWIJaZlpeEcI
4o+8DTb6QZMCbg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:51 2026 by rpki-client