Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft
File:                     AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft (raw, json)
Hash identifier:          /31rC4ZwTX1CZHYrTs54qDwR+C5GGVsTLSyMu9qM1D0=
Subject key identifier:   BC:8D:4F:FD:5A:86:1C:71:54:14:3B:E8:8B:7B:13:C4:71:CD:C6:1F
Authority key identifier: 02:05:BA:1D:94:37:94:CA:D9:D7:BE:8C:6E:CF:B2:BA:CD:C8:50:5B
Certificate issuer:       /CN=0205ba1d943794cad9d7be8c6ecfb2bacdc8505b
Certificate serial:       019EBE1104C7A883EF4856730FABE85F89A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AgW6HZQ3lMrZ176Mbs-yus3IUFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft
Manifest number:          42
Signing time:             Fri 12 Jun 2026 23:00:46 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:46 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:46 +0000
Files and hashes:         1: AgW6HZQ3lMrZ176Mbs-yus3IUFs.crl (hash: Czhz02kQtSnQV7yhdcZ8AqS/fescBaHWAg8fjgQ5w/w=)
                          2: AheurXSAwG3K8xjvCSAB_OgXDkE.asa (hash: 37Fmeaq+GhOVQi6i9jELNgyV9qWcf6gQUQ1iLmTpfG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AgW6HZQ3lMrZ176Mbs-yus3IUFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:04:c7:a8:83:ef:48:56:73:0f:ab:e8:5f:89:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0205ba1d943794cad9d7be8c6ecfb2bacdc8505b
        Validity
            Not Before: Jun 12 23:00:46 2026 GMT
            Not After : Jun 13 23:00:46 2026 GMT
        Subject: CN=bc8d4ffd5a861c7154143be88b7b13c471cdc61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:56:31:41:ae:83:db:54:2d:8a:64:34:67:73:
                    5f:68:be:01:d5:1c:e6:fe:5d:f7:86:e7:b1:7b:41:
                    7f:3b:dd:78:b5:7f:a8:ff:dc:bb:d1:0f:07:60:b8:
                    0a:37:f8:59:ed:b4:90:a6:cf:84:97:f2:eb:f2:e9:
                    c4:cd:68:96:72:f2:1b:24:0d:5b:fb:43:65:a6:04:
                    a9:6a:08:b4:45:a4:88:2f:85:c8:dc:05:15:c2:c8:
                    52:3d:0e:dd:03:60:f4:c2:6f:36:28:f6:2d:97:70:
                    52:cf:45:5d:13:5a:32:fb:ce:1f:c2:75:1c:39:11:
                    4a:57:4b:1d:c8:d6:1d:4c:bb:e4:7a:c6:5d:b5:39:
                    42:45:b8:94:2c:cb:75:f4:dd:d3:0a:ed:38:89:6d:
                    07:7b:d9:50:c3:aa:c3:fc:ab:d7:72:4b:9d:00:71:
                    6d:3e:5f:51:d7:5a:31:fd:1f:c6:45:f5:d6:e9:58:
                    ca:58:82:ce:bb:70:83:fa:26:f5:37:07:6f:a3:2d:
                    4e:ac:83:f1:65:d2:d4:95:d6:33:9e:21:90:46:35:
                    b5:49:22:bd:21:41:b1:43:74:22:96:6e:29:09:05:
                    40:7d:4b:6d:23:78:a3:06:68:60:01:ad:ef:b9:35:
                    6d:50:55:ef:ac:91:2d:10:73:38:f2:49:fa:0a:71:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8D:4F:FD:5A:86:1C:71:54:14:3B:E8:8B:7B:13:C4:71:CD:C6:1F
            X509v3 Authority Key Identifier:
                keyid:02:05:BA:1D:94:37:94:CA:D9:D7:BE:8C:6E:CF:B2:BA:CD:C8:50:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgW6HZQ3lMrZ176Mbs-yus3IUFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:20:b2:ac:ea:e6:fe:d8:0e:80:6a:ba:5b:e6:5f:44:24:97:
         91:4e:d8:2f:f8:e9:f6:be:c1:44:23:14:bd:95:5a:c7:cb:c3:
         63:cb:81:d3:7d:3d:11:a3:d2:b6:92:63:df:0a:70:33:40:f9:
         06:1f:e3:03:77:40:b7:e5:87:3f:4e:a2:ca:d4:94:cc:7c:07:
         9c:d9:b5:63:3d:d2:a7:ff:d2:81:e6:e3:55:ed:91:cf:0f:44:
         74:1e:9f:09:61:01:55:86:d4:a5:a1:4b:d0:b0:31:bf:8a:ed:
         f2:0a:0a:e7:8e:63:62:f9:aa:b3:49:6e:80:9e:03:69:b4:ca:
         2d:50:4b:41:e2:e1:ee:81:ac:a6:33:70:db:df:4a:62:3b:7e:
         94:b4:c6:84:69:95:0b:5b:1a:d6:f2:33:cb:27:30:76:c1:80:
         25:da:15:b2:12:08:ba:a0:8f:08:43:4c:85:70:67:e2:4a:aa:
         27:b0:e7:b9:1a:6b:db:ba:1d:cd:cd:4c:38:86:22:3a:db:67:
         e6:db:31:67:a2:c7:4a:5d:7c:43:4a:d7:79:37:a4:82:12:23:
         94:68:c1:17:83:86:f4:1a:02:25:aa:aa:12:06:e7:24:dd:ea:
         b2:14:f0:57:83:9b:d4:14:9d:ed:d4:92:7c:5a:25:dc:bc:70:
         f6:b1:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:03:01 2026 by rpki-client