Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File:                     AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier:          P/hrRfB8cRpAOPPtGpP2yz5r9oxliLOCQVvWc8q8Wfg=
Subject key identifier:   66:7F:B9:9E:03:FB:17:BF:61:56:4A:A4:CA:09:29:D9:33:38:93:91
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer:       /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial:       019EBFC87C9E0E0C435DC5D25B4373E4E46B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 07:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:47 +0000
Files and hashes:         1: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (hash: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4=)
                          2: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: /JaWI6Ma4R3hYKdgjkXJyIN8MrxfThMtuQgST6qF5hM=)
                          3: KqW4k975xNj0cUtZycmmIX1XgM4.roa (hash: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k=)
                          4: NurrzfLeVosuCbdskOR80jmR2QQ.roa (hash: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:7c:9e:0e:0c:43:5d:c5:d2:5b:43:73:e4:e4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
        Validity
            Not Before: Jun 13 07:00:47 2026 GMT
            Not After : Jun 14 07:00:47 2026 GMT
        Subject: CN=667fb99e03fb17bf61564aa4ca0929d933389391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:3d:71:0c:8d:a2:89:24:44:6f:6a:f4:bf:
                    6e:18:a8:2f:5f:38:11:a9:2d:84:1b:29:5d:65:6c:
                    5c:b2:a8:65:6d:b8:37:c4:a9:ac:77:97:5e:c0:1d:
                    5a:49:96:4b:1d:88:4b:cb:8e:25:62:44:56:df:32:
                    1a:30:57:5a:bd:98:42:93:17:88:5e:c1:6f:81:f6:
                    c5:28:e3:89:db:35:3c:95:e8:8f:08:42:c0:68:52:
                    9c:07:50:bf:7d:d2:41:9b:b5:fa:e2:70:cc:c3:b7:
                    39:aa:a4:d1:b9:97:63:2f:fa:0d:ae:8b:73:c5:6d:
                    8d:17:eb:01:46:72:9e:e7:ad:f3:d5:75:5a:a1:85:
                    e0:0f:0a:ff:68:b1:6f:a1:ee:be:72:09:bb:72:5d:
                    2e:24:22:f7:54:74:b9:1f:0d:ff:88:ae:59:bf:c4:
                    81:b6:b4:5a:30:17:fe:b6:c2:f9:c1:ea:47:b5:26:
                    8b:ba:04:dc:6b:9f:1f:9c:21:45:a1:65:e5:5b:49:
                    fc:9e:e2:0b:fa:ad:1b:50:2c:46:69:58:12:23:2f:
                    85:73:dc:8a:94:c1:3f:ea:cc:35:ed:b5:39:34:29:
                    64:e5:6a:a4:35:be:02:70:2f:3a:bb:04:b3:21:92:
                    8e:8c:22:42:57:1d:26:5d:ff:6e:d9:48:63:7f:85:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7F:B9:9E:03:FB:17:BF:61:56:4A:A4:CA:09:29:D9:33:38:93:91
            X509v3 Authority Key Identifier:
                keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:14:03:08:ef:31:02:39:bd:dc:62:91:d4:e9:9b:d4:94:0e:
         0a:71:56:78:5f:51:1e:7b:62:cf:fb:58:6f:1e:6a:76:ff:1d:
         07:ef:53:6e:b9:07:58:ab:6a:58:f1:b8:2b:ce:8c:d8:ba:04:
         34:dc:37:4f:06:60:7f:18:0f:ec:42:c0:91:9f:15:fc:ab:72:
         17:2e:cd:5c:ef:17:81:0b:df:b7:73:38:58:cc:25:c9:1d:38:
         64:80:b0:a7:7f:d6:69:af:f1:50:c7:16:64:96:f8:66:05:ee:
         8c:04:9c:cf:ba:a6:db:c9:c1:c6:58:59:ab:90:1e:a0:bf:56:
         8b:95:a0:9e:90:ee:ba:e0:09:04:f9:ef:05:3e:ab:e4:11:c8:
         8e:36:e5:b3:b6:bc:1c:a4:b2:24:f6:75:c8:f7:73:f7:a5:db:
         eb:24:8a:bf:cd:5b:20:ef:01:a5:3f:ae:a7:7c:6f:93:95:0c:
         2c:0c:3a:0c:1d:b5:5c:15:16:bb:cd:95:ba:f7:60:8a:c8:53:
         5c:f3:db:2e:97:25:15:29:21:d0:12:e0:e9:71:7b:ec:ce:4b:
         d7:5f:94:9b:ca:89:bc:e6:f5:12:d8:0b:d3:cc:f2:6b:b9:e3:
         58:36:59:d9:6d:13:8c:18:51:3b:9a:0e:cc:bb:5b:f9:fc:ab:
         7b:93:41:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:23:56 2026 by rpki-client