Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft
File:                     AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft (raw, json)
Hash identifier:          d+Y7rNVGEtvffy5lx26e15wPPidcc6I3BtD/6PBewgo=
Subject key identifier:   A5:8D:AE:91:99:5C:85:7A:26:C4:B8:C2:0F:31:68:1F:F2:5A:F5:96
Authority key identifier: 02:05:BA:1D:94:37:94:CA:D9:D7:BE:8C:6E:CF:B2:BA:CD:C8:50:5B
Certificate issuer:       /CN=0205ba1d943794cad9d7be8c6ecfb2bacdc8505b
Certificate serial:       01A1280C36D3B6D2C38E72851E2D81B79CC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AgW6HZQ3lMrZ176Mbs-yus3IUFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft
Manifest number:          0182
Signing time:             Sat 10 Oct 2026 23:00:51 +0000
Manifest this update:     Sat 10 Oct 2026 23:00:51 +0000
Manifest next update:     Sun 11 Oct 2026 23:00:51 +0000
Files and hashes:         1: AgW6HZQ3lMrZ176Mbs-yus3IUFs.crl (hash: G0I6y7voBOeLs93iT8rb7CkQsyj2k/Tb8iFv3lTKMsE=)
                          2: AheurXSAwG3K8xjvCSAB_OgXDkE.asa (hash: 37Fmeaq+GhOVQi6i9jELNgyV9qWcf6gQUQ1iLmTpfG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AgW6HZQ3lMrZ176Mbs-yus3IUFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:0c:36:d3:b6:d2:c3:8e:72:85:1e:2d:81:b7:9c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0205ba1d943794cad9d7be8c6ecfb2bacdc8505b
        Validity
            Not Before: Oct 10 23:00:51 2026 GMT
            Not After : Oct 11 23:00:51 2026 GMT
        Subject: CN=a58dae91995c857a26c4b8c20f31681ff25af596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:04:9f:13:35:28:ba:ed:9c:38:52:eb:5c:
                    35:cc:61:7e:4e:52:3f:5e:e3:d7:ea:f3:bb:a9:fb:
                    1d:0c:0c:16:35:ef:f6:94:89:80:93:74:d2:14:29:
                    91:54:f4:89:4a:2d:bc:92:cb:b1:a0:07:5c:a4:b4:
                    29:61:b1:bb:b0:ee:16:fc:84:49:a8:d7:38:47:3f:
                    92:d7:11:83:86:ad:4d:7c:a0:47:57:88:a8:dc:a3:
                    89:be:65:eb:3a:33:eb:1f:85:02:85:ed:25:7f:44:
                    53:3a:5e:b9:d1:d1:96:a8:8d:0f:66:f9:97:aa:0f:
                    3f:99:b2:d3:72:5f:3a:ae:bb:f3:86:0b:8b:98:b8:
                    5b:ab:c5:23:71:bf:d6:94:9e:f4:ce:00:49:f1:0b:
                    25:89:2b:4f:ba:87:10:76:9e:a4:bb:8b:03:f8:75:
                    e2:cd:20:6c:45:96:02:d7:b3:df:49:26:24:10:a5:
                    18:db:24:0e:1e:30:b5:b2:38:68:b4:6e:ca:b4:96:
                    95:80:9c:62:ec:00:e1:38:60:1d:28:f4:fb:77:0b:
                    8f:e4:d5:f1:82:4b:f6:23:33:5e:5b:fa:de:cc:fa:
                    95:7e:91:a5:3b:df:7c:0d:33:b5:e4:e5:4a:92:f7:
                    f5:47:fc:54:90:f8:f1:35:f9:d3:9c:4e:79:8f:97:
                    28:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8D:AE:91:99:5C:85:7A:26:C4:B8:C2:0F:31:68:1F:F2:5A:F5:96
            X509v3 Authority Key Identifier:
                keyid:02:05:BA:1D:94:37:94:CA:D9:D7:BE:8C:6E:CF:B2:BA:CD:C8:50:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgW6HZQ3lMrZ176Mbs-yus3IUFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:df:36:55:56:91:ca:0d:9c:d4:6d:a7:8f:23:99:38:0e:71:
         15:30:03:ce:70:a2:82:6d:a7:75:71:94:be:75:29:cd:a1:86:
         f6:7e:64:a3:dd:32:03:36:f0:d7:e9:aa:09:4b:29:e3:0f:df:
         77:e7:59:3f:7d:42:5e:42:ec:1a:62:b0:51:c3:66:73:c0:82:
         c4:89:38:d1:8e:46:f1:66:10:38:ee:45:47:80:5d:3a:a7:cf:
         61:d3:64:01:0e:2c:ac:12:31:fb:a5:d4:47:ca:e0:33:95:00:
         5f:f8:57:d5:8d:6d:96:0b:8e:f4:6d:6e:77:d3:1f:f5:9d:32:
         11:9c:79:c0:f2:ac:3f:3d:5b:3a:03:67:95:54:4e:35:4a:ec:
         43:7f:4b:34:bd:1f:56:73:5d:4b:e2:24:d7:90:50:48:7e:56:
         ce:07:48:a8:9f:03:39:aa:b7:ef:67:eb:56:38:50:4b:f8:53:
         e1:9e:61:a8:e9:ce:a5:9d:c3:be:67:e5:e7:70:cc:67:e0:b7:
         08:40:36:ab:9e:98:c6:2f:7d:f0:8a:1d:3d:45:d5:17:c7:99:
         27:ed:35:d5:29:a2:3d:cb:99:17:5d:d4:21:03:9c:22:15:20:
         18:e1:c7:32:b7:be:1c:f5:03:8f:34:7e:2e:13:b3:e4:f5:20:
         6a:38:a8:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoDDbTttLDjnKFHi2Bt5zJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMDViYTFkOTQzNzk0Y2FkOWQ3YmU4YzZlY2ZiMmJhY2Rj
ODUwNWIwHhcNMjYxMDEwMjMwMDUxWhcNMjYxMDExMjMwMDUxWjAzMTEwLwYDVQQD
EyhhNThkYWU5MTk5NWM4NTdhMjZjNGI4YzIwZjMxNjgxZmYyNWFmNTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm8EnxM1KLrtnDhS61w1zGF+TlI/
XuPX6vO7qfsdDAwWNe/2lImAk3TSFCmRVPSJSi28ksuxoAdcpLQpYbG7sO4W/IRJ
qNc4Rz+S1xGDhq1NfKBHV4io3KOJvmXrOjPrH4UChe0lf0RTOl650dGWqI0PZvmX
qg8/mbLTcl86rrvzhguLmLhbq8Ujcb/WlJ70zgBJ8QsliStPuocQdp6ku4sD+HXi
zSBsRZYC17PfSSYkEKUY2yQOHjC1sjhotG7KtJaVgJxi7ADhOGAdKPT7dwuP5NXx
gkv2IzNeW/rezPqVfpGlO998DTO15OVKkvf1R/xUkPjxNfnTnE55j5coDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWNrpGZXIV6JsS4wg8xaB/yWvWWMB8GA1UdIwQY
MBaAFAIFuh2UN5TK2de+jG7PsrrNyFBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWdXNkhaUTNsTXJaMTc2TWJzLXl1czNJVUZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xNWRmMDYtMjA4Yi00ZWQxLTgxMmEt
ZDc0MjFjMjE4YWE4LzEvQWdXNkhaUTNsTXJaMTc2TWJzLXl1czNJVUZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8xNWRmMDYtMjA4Yi00ZWQxLTgxMmEtZDc0MjFjMjE4YWE4
LzEvQWdXNkhaUTNsTXJaMTc2TWJzLXl1czNJVUZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIt82VVaR
yg2c1G2njyOZOA5xFTADznCigm2ndXGUvnUpzaGG9n5ko90yAzbw1+mqCUsp4w/f
d+dZP31CXkLsGmKwUcNmc8CCxIk40Y5G8WYQOO5FR4BdOqfPYdNkAQ4srBIx+6XU
R8rgM5UAX/hX1Y1tlguO9G1ud9Mf9Z0yEZx5wPKsPz1bOgNnlVRONUrsQ39LNL0f
VnNdS+Ik15BQSH5WzgdIqJ8DOaq372frVjhQS/hT4Z5hqOnOpZ3Dvmfl53DMZ+C3
CEA2q56Yxi998IodPUXVF8eZJ+011SmiPcuZF13UIQOcIhUgGOHHMre+HPUDjzR+
LhOz5PUgajioLg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 05:55:16 2026 by rpki-client