Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File:                     AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier:          1iFOGCemLJngmeCLDaTDxNfZbRhrjljeWYQYO4VkIYo=
Subject key identifier:   04:AD:F5:29:36:ED:0B:FE:53:6E:9A:B9:13:27:3F:78:FD:41:F1:F3
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer:       /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial:       019D97E1C9DC16888015EFCD10201CE7D56E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number:          0BF3
Signing time:             Thu 16 Apr 2026 20:00:49 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:49 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:49 +0000
Files and hashes:         1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: 7hU36QEj93GqOd9Pegw9By8F34iZo3QUvzW2qS6gyUk=)
                          2: JNDctSQyCVHEUhqnByChAmEncfg.roa (hash: yXoH/sBRxwLt/qpjNEIKQniBORvNxA7f4SJGosPqLLA=)
                          3: Po5Z-3veMvoIAK-aDVEx1e-ce5U.roa (hash: AD5FiCgalWTH4X8YjTKjmnDvWNssEsjzxmI0GCJAqfo=)
                          4: oSVqebziTAnWxzzhjCN56NayiOI.roa (hash: 4+N1yl+V3Z8u2Y+zTUu1AT9E1jyRz8O9S8sbZjaoH7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:c9:dc:16:88:80:15:ef:cd:10:20:1c:e7:d5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
        Validity
            Not Before: Apr 16 20:00:49 2026 GMT
            Not After : Apr 17 20:00:49 2026 GMT
        Subject: CN=04adf52936ed0bfe536e9ab913273f78fd41f1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:01:2d:de:90:63:1e:bf:4a:5a:ef:39:45:89:
                    22:73:96:d7:5d:39:b9:39:03:0a:a6:64:30:81:2f:
                    44:be:cb:30:b2:de:a6:3f:11:93:e2:0f:d0:62:f4:
                    85:f0:64:db:a6:f2:80:10:ff:d1:a8:3d:98:ad:3b:
                    ed:f0:db:c0:9f:8a:23:e7:38:8c:82:58:c4:dd:4a:
                    df:c5:c3:9b:75:d2:a6:7e:dc:74:af:5e:e4:b6:38:
                    52:df:78:81:c7:49:6e:bd:e4:1d:eb:3e:ae:90:09:
                    83:fe:1c:59:45:36:4a:4e:ba:fc:88:ed:38:1c:21:
                    5d:1e:98:ae:f4:3c:e5:6d:dd:e4:1f:c5:dc:16:96:
                    63:e3:4a:75:e1:42:dd:8d:0b:d6:67:74:c2:d7:51:
                    25:34:ee:12:7d:05:36:2a:56:49:48:2b:5f:da:a4:
                    7a:23:ff:cb:4f:3a:71:ae:89:1b:a9:6d:78:19:77:
                    a0:22:01:e1:89:59:83:1e:21:9b:d3:d0:d4:4e:44:
                    2e:f6:37:7f:80:21:29:69:aa:d0:ae:80:fb:a0:52:
                    28:b3:0d:67:65:7a:c8:1b:f3:a1:42:92:05:1d:5a:
                    d5:5d:dc:92:ea:85:95:7f:df:48:e4:c1:83:b5:b1:
                    ca:28:7f:3b:cd:47:f3:6b:c5:b8:57:0c:da:03:b5:
                    8f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AD:F5:29:36:ED:0B:FE:53:6E:9A:B9:13:27:3F:78:FD:41:F1:F3
            X509v3 Authority Key Identifier:
                keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a4:9c:82:65:33:5d:d8:f2:f3:c3:12:27:15:d9:71:7f:ad:
         81:bc:cc:3d:e7:81:28:2e:7c:05:9e:26:55:99:50:2d:49:bf:
         0d:60:fa:64:9b:9f:7c:90:06:6d:c1:a6:0e:e5:25:bf:6b:5c:
         9e:18:7d:44:33:fa:64:91:77:23:cb:d6:de:fb:18:20:18:9d:
         69:b4:46:ef:c2:1a:2e:21:fa:fa:f1:ba:da:8d:1b:2f:48:03:
         de:0e:99:ab:51:fd:f1:de:0b:7f:86:3b:00:3d:7e:ad:f5:e7:
         81:eb:ab:ac:9f:18:91:76:94:74:d3:70:04:fe:03:9b:52:9b:
         ec:82:92:70:c2:23:f1:cd:b0:d1:2b:2b:99:eb:b2:d0:f9:86:
         3f:fe:1a:56:c8:b8:52:aa:e0:c7:71:9d:dc:2c:21:e6:5c:8c:
         e4:31:10:48:ce:e2:43:6a:52:b7:07:38:33:ad:8b:90:8d:d1:
         31:96:33:f8:0a:de:b6:96:66:ac:9d:86:fb:69:be:fd:dd:dd:
         1c:16:05:76:95:00:42:96:39:eb:2e:b8:fc:69:3a:49:0b:17:
         5c:22:2b:ed:51:5f:6a:35:92:b1:11:2e:e4:59:6a:f9:91:b5:
         03:97:75:5f:61:a4:e0:5a:0f:ed:cf:42:13:68:1c:9c:42:bb:
         64:4d:a9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:22 2026 by rpki-client