Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File:                     AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier:          JEakHFv+anf4/c931OIQRfVrnjlnP+Rgzr/RANMziCA=
Subject key identifier:   75:CD:64:30:7A:C8:BA:CC:4B:26:61:84:69:98:25:19:DF:31:F4:EC
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer:       /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial:       01A0C17AB3BCD676149DCF525C93B329804E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number:          1A69
Signing time:             Mon 21 Sep 2026 01:00:39 +0000
Manifest this update:     Mon 21 Sep 2026 01:00:39 +0000
Manifest next update:     Tue 22 Sep 2026 01:00:39 +0000
Files and hashes:         1: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (hash: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4=)
                          2: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: Na+CCAochOEZs2RCeVe79TxaZYoWVxmSlhDly64hsu0=)
                          3: KqW4k975xNj0cUtZycmmIX1XgM4.roa (hash: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k=)
                          4: NurrzfLeVosuCbdskOR80jmR2QQ.roa (hash: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:7a:b3:bc:d6:76:14:9d:cf:52:5c:93:b3:29:80:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
        Validity
            Not Before: Sep 21 01:00:39 2026 GMT
            Not After : Sep 22 01:00:39 2026 GMT
        Subject: CN=75cd64307ac8bacc4b26618469982519df31f4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:03:32:89:10:22:bb:25:c8:7e:8b:b1:72:
                    43:6d:a3:e2:33:68:61:57:6d:e8:c9:6f:79:72:21:
                    4a:cc:80:29:35:4c:2d:02:e0:b6:9a:a0:69:9e:d4:
                    47:66:cc:ea:38:90:79:90:fd:dd:d7:a0:5a:25:74:
                    a5:71:fb:78:ec:33:77:a1:83:1c:a2:97:01:ab:a1:
                    b5:28:8e:cc:7c:1f:61:5c:6b:85:07:15:37:f8:4f:
                    96:d4:c5:e4:23:f3:0f:c3:45:13:85:f8:25:7c:0c:
                    a8:1b:e7:80:15:d4:3f:1f:89:66:fe:74:bf:9a:f6:
                    bf:78:bd:b8:8d:3f:fb:99:c8:1c:ba:73:16:8f:ce:
                    5d:e6:a6:f4:97:40:26:c0:10:2d:ad:c7:39:a9:3f:
                    e9:b2:2d:c9:b5:e7:33:f5:38:b1:af:07:d9:f6:4d:
                    17:67:56:3e:0e:26:d4:78:58:cf:27:6b:1a:63:b4:
                    32:b2:bb:6e:ea:ab:a6:3e:67:17:17:45:fe:bf:17:
                    06:17:40:bb:c5:93:a6:32:29:81:c6:68:20:ef:66:
                    88:e1:c2:e4:9c:d5:9f:7d:3d:db:d1:6c:54:8d:80:
                    73:c7:97:3e:46:1e:80:b3:75:26:74:bf:cb:5d:89:
                    5f:ed:f5:b1:47:d8:62:7b:ff:2f:fd:2e:9f:7f:30:
                    f9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CD:64:30:7A:C8:BA:CC:4B:26:61:84:69:98:25:19:DF:31:F4:EC
            X509v3 Authority Key Identifier:
                keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:97:c2:55:fe:f5:2e:9b:6f:36:6c:e6:eb:22:ce:de:39:cc:
         31:e0:49:30:a2:5d:36:99:6e:51:8f:e1:5b:a4:c8:27:09:62:
         ac:c7:72:73:ff:bd:ae:4d:a9:3a:87:f2:ef:60:8e:08:a6:8d:
         6e:0e:62:5d:6c:ee:69:aa:79:0e:45:e9:1d:cd:48:c4:18:a4:
         82:3e:52:fd:a8:ba:33:f1:e3:67:72:62:4e:d3:6a:0d:9b:a0:
         74:26:d0:55:2d:f9:99:7a:10:eb:28:a5:7d:4c:25:bc:c4:0e:
         7e:b6:c7:c4:98:1a:ff:a9:46:14:a0:99:42:e1:d5:a6:31:08:
         b8:25:b0:23:87:92:61:89:4b:00:e2:82:f2:e3:0b:e4:78:3f:
         92:49:fe:eb:21:55:01:33:61:d6:f6:d9:72:34:61:5e:f6:4b:
         44:ad:8e:19:94:1e:7b:b5:f9:77:39:7a:61:12:ae:36:c5:c0:
         35:dd:05:dc:11:1b:88:f1:51:3a:ee:05:af:1f:d2:20:b7:ee:
         39:53:15:3b:c4:0f:09:4f:1f:0f:36:8d:9f:af:19:a3:b9:79:
         13:ce:28:31:8f:7c:49:89:e1:15:d7:58:a8:33:94:4f:0f:57:
         66:a6:4f:45:b9:84:78:b3:63:db:40:bf:97:86:f7:06:28:6e:
         06:3c:be:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:19:16 2026 by rpki-client