Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File:                     AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier:          6Fo1UWrxW9ju4dODJN711gad09UEnvUdOFl42axjz8I=
Subject key identifier:   2C:8C:11:71:FC:B6:C8:3A:49:D2:B9:87:EE:60:55:8D:03:49:51:54
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer:       /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial:       019FA906B5DA990A0997B830A9CA6694117C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number:          0D05
Signing time:             Tue 28 Jul 2026 14:00:16 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:16 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:16 +0000
Files and hashes:         1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: G3Mik2yCQ5ssW2fWb/vh2cpMaCXfpevqzvUJg9Az274=)
                          2: JNDctSQyCVHEUhqnByChAmEncfg.roa (hash: yXoH/sBRxwLt/qpjNEIKQniBORvNxA7f4SJGosPqLLA=)
                          3: Po5Z-3veMvoIAK-aDVEx1e-ce5U.roa (hash: AD5FiCgalWTH4X8YjTKjmnDvWNssEsjzxmI0GCJAqfo=)
                          4: oSVqebziTAnWxzzhjCN56NayiOI.roa (hash: 4+N1yl+V3Z8u2Y+zTUu1AT9E1jyRz8O9S8sbZjaoH7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:b5:da:99:0a:09:97:b8:30:a9:ca:66:94:11:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
        Validity
            Not Before: Jul 28 14:00:16 2026 GMT
            Not After : Jul 29 14:00:16 2026 GMT
        Subject: CN=2c8c1171fcb6c83a49d2b987ee60558d03495154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e1:ef:e4:62:00:ca:6f:19:b4:66:c6:3e:33:
                    a0:a7:4f:01:9a:ae:b0:ec:6e:14:bc:08:2c:59:06:
                    3c:b0:d7:37:d9:70:fb:53:39:06:1a:94:ad:91:1f:
                    d7:2c:0c:9a:cb:70:99:16:92:76:e9:3c:6e:f8:c0:
                    92:bf:c7:d0:d6:4c:99:95:5d:b3:ea:68:1f:0d:da:
                    bf:18:cd:59:af:33:0b:f0:0e:da:9c:c9:5f:07:7d:
                    9b:8c:f2:63:ff:53:fd:04:ed:16:fd:0e:26:bb:4c:
                    ba:99:10:ff:2d:a6:1d:10:99:7d:f7:4c:60:40:49:
                    63:6f:d6:63:94:84:78:fc:ef:ab:07:dd:c9:3b:86:
                    09:70:b6:f8:82:c3:0b:1e:3a:77:d4:f9:94:7d:86:
                    6c:e2:df:51:e5:09:ee:bc:74:16:b5:3b:19:16:3d:
                    ec:f5:9b:a2:68:8c:e7:70:24:ca:68:08:c5:e3:b5:
                    bb:d7:c1:e5:3d:cd:93:2c:8e:41:aa:da:f5:7c:19:
                    29:3e:c9:f2:83:90:7c:68:d6:61:d2:17:fb:67:01:
                    67:57:b0:29:70:e1:3c:6f:3c:4b:bf:d4:ac:5d:36:
                    e2:46:3d:26:0f:48:e7:da:45:68:50:24:9c:32:66:
                    41:36:fe:17:4d:8f:76:6a:5e:e5:6e:2c:f2:69:71:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8C:11:71:FC:B6:C8:3A:49:D2:B9:87:EE:60:55:8D:03:49:51:54
            X509v3 Authority Key Identifier:
                keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:66:d8:be:1c:3e:f9:9e:41:0d:24:8d:c5:35:ef:96:ff:8b:
         17:16:28:f6:b1:ab:68:4e:c3:56:3b:6b:83:c0:54:8e:f0:0f:
         99:44:19:eb:ab:ed:60:5d:4d:06:4e:3e:56:a1:7f:8c:bf:a4:
         1c:1f:70:7b:fb:ec:b9:c1:fd:26:09:15:d6:a9:0b:0d:31:44:
         9f:d2:09:93:fe:19:ec:4e:b6:ff:90:2e:e8:d8:67:b3:75:3b:
         f2:07:59:f9:1e:2a:da:4d:e5:ef:35:10:aa:ff:43:c2:36:b6:
         d1:77:85:81:fd:75:e6:fd:53:7f:3f:fd:1b:5b:7c:d0:b6:6f:
         f6:13:4a:dc:ba:b0:6c:46:64:5b:ba:16:0f:a8:e7:7a:c4:ba:
         5d:90:a1:c6:df:e6:52:90:44:39:d8:1f:b2:c1:fd:3a:e6:ab:
         7c:97:b6:76:5d:0e:ff:08:4b:e2:12:ba:8c:4a:31:59:e3:2c:
         66:81:46:a5:12:9e:32:b7:ec:d6:3e:7e:73:54:f5:a7:fd:82:
         34:f6:96:55:0b:cd:fc:4e:74:36:89:14:2c:07:77:cf:ab:ba:
         b3:68:70:c9:a0:6e:68:b3:06:27:c0:e9:8e:f1:16:40:7b:04:
         0d:4b:f6:56:33:37:d8:77:1d:87:ec:1f:5e:bd:e0:55:51:46:
         09:63:d0:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBrXamQoJl7gwqcpmlBF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNmIwNmI1ZDBmZjEwMDBlMTBjNDI3NmVlYTA4ODBhZjIw
OWQ3YTIwHhcNMjYwNzI4MTQwMDE2WhcNMjYwNzI5MTQwMDE2WjAzMTEwLwYDVQQD
EygyYzhjMTE3MWZjYjZjODNhNDlkMmI5ODdlZTYwNTU4ZDAzNDk1MTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+Hv5GIAym8ZtGbGPjOgp08Bmq6w
7G4UvAgsWQY8sNc32XD7UzkGGpStkR/XLAyay3CZFpJ26Txu+MCSv8fQ1kyZlV2z
6mgfDdq/GM1ZrzML8A7anMlfB32bjPJj/1P9BO0W/Q4mu0y6mRD/LaYdEJl990xg
QEljb9ZjlIR4/O+rB93JO4YJcLb4gsMLHjp31PmUfYZs4t9R5QnuvHQWtTsZFj3s
9ZuiaIzncCTKaAjF47W718HlPc2TLI5Bqtr1fBkpPsnyg5B8aNZh0hf7ZwFnV7Ap
cOE8bzxLv9SsXTbiRj0mD0jn2kVoUCScMmZBNv4XTY92al7lbizyaXFktQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyMEXH8tsg6SdK5h+5gVY0DSVFUMB8GA1UdIwQY
MBaAFABrBrXQ/xAA4QxCdu6giAryCdeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQt
NTdjOTU1YzljODVkLzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQtNTdjOTU1YzljODVk
LzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGbYvhw+
+Z5BDSSNxTXvlv+LFxYo9rGraE7DVjtrg8BUjvAPmUQZ66vtYF1NBk4+VqF/jL+k
HB9we/vsucH9JgkV1qkLDTFEn9IJk/4Z7E62/5Au6Nhns3U78gdZ+R4q2k3l7zUQ
qv9Dwja20XeFgf115v1Tfz/9G1t80LZv9hNK3LqwbEZkW7oWD6jnesS6XZChxt/m
UpBEOdgfssH9OuarfJe2dl0O/whL4hK6jEoxWeMsZoFGpRKeMrfs1j5+c1T1p/2C
NPaWVQvN/E50NokULAd3z6u6s2hwyaBuaLMGJ8DpjvEWQHsEDUv2VjM32Hcdh+wf
Xr3gVVFGCWPQwA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:26 2026 by rpki-client