Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File:                     AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier:          kgAemFtQGc2rKheoF/5G6vLeNhb/Qo/ayBce1aZUXvQ=
Subject key identifier:   78:93:B4:C4:99:13:7F:3A:72:D0:04:8B:CB:3B:90:A8:86:EA:C6:FA
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer:       /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial:       019FA974E3A2EB8270DC4EE794642FFD2EE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number:          19D8
Signing time:             Tue 28 Jul 2026 16:00:37 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:37 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:37 +0000
Files and hashes:         1: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (hash: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4=)
                          2: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: wbDMpbYlaDrtUur51AoCecgIpDEm0iH6tqg4rQ1Unjo=)
                          3: KqW4k975xNj0cUtZycmmIX1XgM4.roa (hash: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k=)
                          4: NurrzfLeVosuCbdskOR80jmR2QQ.roa (hash: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:74:e3:a2:eb:82:70:dc:4e:e7:94:64:2f:fd:2e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
        Validity
            Not Before: Jul 28 16:00:37 2026 GMT
            Not After : Jul 29 16:00:37 2026 GMT
        Subject: CN=7893b4c499137f3a72d0048bcb3b90a886eac6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bd:4c:7d:61:ea:af:26:16:18:76:72:79:30:
                    20:3a:0a:bc:9e:f7:36:42:d8:b2:f6:7a:5f:1d:5b:
                    c3:c0:1b:ab:d8:aa:a0:8d:6a:6b:39:d3:54:f4:34:
                    b8:1d:af:e2:6d:39:b6:44:5f:33:ed:27:14:fe:8d:
                    c5:8a:6c:7c:88:7b:3e:69:45:46:78:12:d1:37:ac:
                    05:f4:a4:36:ca:36:a2:9e:5a:96:c7:84:63:96:37:
                    8d:51:43:2b:b0:d1:01:f9:44:d4:a4:a6:5e:b7:73:
                    8c:1a:1c:94:e2:97:ec:5b:c7:1b:14:2a:13:f6:17:
                    2d:35:b2:23:ee:c3:f9:91:7f:db:49:e8:04:40:f7:
                    b3:c2:84:f9:cc:5a:51:aa:4c:ba:70:42:19:ef:76:
                    15:c2:2d:ca:70:e7:18:40:14:9f:e9:2a:82:9c:8d:
                    cc:a0:48:fe:66:5e:a3:18:02:3b:51:52:12:f5:d9:
                    87:38:19:56:a3:dc:02:94:d6:ed:b0:72:52:0f:3f:
                    25:f2:a7:d6:25:4f:fb:60:63:bf:5b:07:48:51:02:
                    96:32:e1:36:e7:bc:ba:e2:84:30:2b:51:b5:6f:9d:
                    06:18:03:06:eb:7d:40:06:cc:bc:2e:3e:39:52:d2:
                    af:70:b6:64:66:f8:54:8d:9f:d8:85:6f:19:24:8c:
                    6a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:B4:C4:99:13:7F:3A:72:D0:04:8B:CB:3B:90:A8:86:EA:C6:FA
            X509v3 Authority Key Identifier:
                keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:00:de:ec:da:43:17:ab:24:5b:8c:2f:7d:92:1a:78:e0:f7:
         e6:2f:d5:8d:2f:1b:e0:df:f6:26:5a:dc:40:bb:22:a3:9a:ea:
         b2:de:ed:a7:55:eb:e6:0d:44:df:b4:18:76:83:ad:3f:c7:72:
         90:9e:c4:1f:25:cf:f1:7d:68:e1:74:ff:2f:3a:42:35:a6:e6:
         0e:35:34:f8:a9:74:d7:64:4e:db:11:3e:93:0d:1a:7b:09:65:
         4b:36:fa:7e:e3:44:3d:3d:27:d1:d3:3e:98:b9:d9:c8:13:b5:
         ac:50:60:33:76:ce:22:d6:66:cd:43:15:d6:22:e9:8c:d0:2f:
         54:6c:b1:80:9b:60:e7:87:a2:02:fa:93:b5:b4:f1:ce:71:23:
         c1:5b:84:10:09:4a:80:39:2c:a6:ac:b1:49:53:1f:c0:74:11:
         29:5b:e3:d9:73:8c:91:07:4a:3d:da:75:c8:7b:39:99:57:f7:
         5b:de:62:d0:9a:af:50:08:7e:28:21:b6:56:63:ea:04:83:32:
         45:23:1c:ae:ec:38:4d:a2:5b:ab:a1:ee:39:ef:1d:9e:1b:3d:
         d4:e4:eb:b6:92:8d:57:ac:f0:cb:02:6d:b0:f4:ec:cb:02:99:
         98:a7:ba:bb:07:83:b8:fa:83:d8:a4:a0:53:dd:31:b2:f0:0c:
         2c:c7:a5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:58 2026 by rpki-client