Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File:                     AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier:          YhrsfAhUY+YSP5JAKC4KDHWEFFzH1398WNhhFmpcV6c=
Subject key identifier:   6E:9D:0B:7E:4B:DB:80:4A:5F:7C:38:23:4A:3F:F5:36:4C:95:FF:AB
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer:       /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial:       019CACB56DEB871DFB3C7774F81C656A3BDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number:          184C
Signing time:             Mon 02 Mar 2026 04:01:37 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:37 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:37 +0000
Files and hashes:         1: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (hash: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4=)
                          2: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: Br0ARwZPkNd1vuce2QBY+WsbEYGWxy567QhGjemgvdg=)
                          3: KqW4k975xNj0cUtZycmmIX1XgM4.roa (hash: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k=)
                          4: NurrzfLeVosuCbdskOR80jmR2QQ.roa (hash: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:6d:eb:87:1d:fb:3c:77:74:f8:1c:65:6a:3b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
        Validity
            Not Before: Mar  2 04:01:37 2026 GMT
            Not After : Mar  3 04:01:37 2026 GMT
        Subject: CN=6e9d0b7e4bdb804a5f7c38234a3ff5364c95ffab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:fc:0f:55:df:e1:a2:1b:10:3e:6c:ea:00:
                    70:43:be:48:db:77:72:b9:b1:f1:d0:43:0b:5e:58:
                    d4:b4:05:e7:fd:ef:8f:ac:a1:b3:13:c1:04:2e:a9:
                    fc:47:82:2f:66:b1:a3:eb:7e:b2:25:4e:ba:26:2e:
                    0d:5c:fd:dc:c0:de:5a:3b:44:4a:15:bc:bb:7d:22:
                    76:58:60:85:3e:7c:76:d5:59:c5:0b:af:e8:b0:0d:
                    e2:6b:46:64:a6:ce:d7:e8:22:82:b4:70:b6:b0:f5:
                    3e:60:e1:1a:95:2f:8d:91:81:d2:69:bc:5d:68:aa:
                    30:ca:f4:94:72:ea:02:29:15:fa:b3:0b:9b:0e:77:
                    8f:0e:0b:af:25:92:21:d1:4c:ba:7e:00:12:22:eb:
                    9e:d4:ea:03:8e:a7:b5:2d:81:37:74:77:19:25:c1:
                    cc:df:03:18:41:fe:82:c4:ac:1e:c7:b5:a9:38:95:
                    33:50:73:d9:72:cb:73:82:12:32:03:41:ef:49:e3:
                    bd:67:10:ea:77:72:f3:e3:ef:38:b6:91:19:5f:1d:
                    d8:90:26:59:6e:34:fb:d0:8d:f5:ff:b1:7a:73:0b:
                    dd:34:c1:92:2a:0b:79:63:43:25:3e:20:32:45:05:
                    30:d6:97:c0:63:41:39:a4:6f:73:86:d2:36:76:39:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9D:0B:7E:4B:DB:80:4A:5F:7C:38:23:4A:3F:F5:36:4C:95:FF:AB
            X509v3 Authority Key Identifier:
                keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:42:70:ef:be:ab:7f:bd:5c:47:5e:9e:ae:c9:66:55:a2:a5:
         43:26:77:f2:88:c1:97:fa:dd:e6:d2:7f:d6:01:8c:16:1e:79:
         07:ce:4d:c8:48:0e:19:31:1f:be:6d:18:63:5f:4b:85:c5:15:
         84:04:0e:68:d9:d6:f8:69:a6:b8:6f:46:9a:87:d4:b1:65:5e:
         07:dc:ba:b8:9a:04:b0:3c:95:db:1a:d5:a3:02:3c:19:57:d1:
         c7:3d:57:ee:ea:af:fc:fb:77:be:09:04:15:5e:b0:6c:b2:36:
         c3:ef:6b:01:d9:8a:4a:75:fc:fa:31:bd:ba:2e:05:80:e2:93:
         7d:3b:58:ec:3e:0e:75:f8:ee:bd:13:34:45:71:6e:7f:e1:b1:
         a9:9e:b9:5d:b7:1d:94:56:54:9c:e3:58:78:51:ea:47:06:0f:
         07:8a:b5:d3:5e:5b:ed:a0:c2:22:f9:a3:97:f3:31:51:b8:c8:
         de:d0:a7:56:49:f3:44:5f:a0:45:55:52:36:b5:c1:d4:89:ac:
         7e:cd:9c:bf:3a:8a:f3:97:8e:6d:11:df:00:4f:18:1b:fe:7c:
         4e:1e:d4:86:0a:65:e0:ba:ef:cf:3e:6d:f6:36:6b:14:27:b9:
         87:18:24:af:57:84:13:b2:0f:ce:d1:f0:f1:38:89:79:d0:eb:
         01:27:99:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:59 2026 by rpki-client