Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
File:                     AguJY5thIAOqgSvktlIbVnhFao4.mft (raw, json)
Hash identifier:          VpIdcNca+enXH6Rnb09gQ4hGb2qqKufRMVjUf8/b2jg=
Subject key identifier:   55:F3:B0:BA:41:E4:48:37:56:3D:99:F9:10:43:55:06:B6:6E:FB:D5
Authority key identifier: 02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
Certificate issuer:       /CN=020b89639b612003aa812be4b6521b5678456a8e
Certificate serial:       019FA9ABCCF37B01406A573F82203DE1C2DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
Manifest number:          0734
Signing time:             Tue 28 Jul 2026 17:00:36 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:36 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:36 +0000
Files and hashes:         1: AguJY5thIAOqgSvktlIbVnhFao4.crl (hash: A3j3zdyMQdWr+eebMtfdJxpJsBqQNYQZ0nWQd7k006A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:cc:f3:7b:01:40:6a:57:3f:82:20:3d:e1:c2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020b89639b612003aa812be4b6521b5678456a8e
        Validity
            Not Before: Jul 28 17:00:36 2026 GMT
            Not After : Jul 29 17:00:36 2026 GMT
        Subject: CN=55f3b0ba41e44837563d99f910435506b66efbd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:bb:f4:ff:9d:5f:e1:ff:6a:d5:b6:84:33:
                    77:8e:a1:75:8e:f0:1d:f5:aa:b4:43:4a:67:12:c7:
                    0c:1d:8f:ef:ac:b8:b7:7a:ed:ad:a3:5f:11:99:87:
                    b4:d8:a8:d1:e0:1b:9c:e2:4a:e3:8a:6f:50:f6:0c:
                    ce:28:08:84:52:58:63:a0:e0:8c:97:42:bc:db:4a:
                    84:46:27:bb:46:e4:84:36:a9:84:50:d3:b2:f2:5b:
                    d4:de:49:0d:7e:d5:d3:e4:f5:da:01:d8:06:88:9b:
                    7c:78:f6:09:15:18:e6:18:aa:36:20:97:57:fe:ad:
                    a7:14:b1:ee:dd:fb:bf:4a:35:15:ce:e2:91:43:33:
                    26:5a:15:04:f5:89:dd:06:ba:80:45:30:d0:39:84:
                    c9:c9:e1:62:4e:15:64:2d:2e:4f:40:4f:49:db:84:
                    e9:4b:16:08:c6:6d:ee:c4:e5:53:99:60:03:12:5c:
                    49:aa:75:ad:e5:9c:23:f1:ea:8d:27:8e:63:b9:5b:
                    b2:d9:f4:35:2f:0f:9c:8e:1a:37:e5:06:00:0d:ef:
                    2d:5d:58:7b:5d:1c:75:56:c7:d9:91:f2:67:a5:23:
                    85:1d:c0:db:b9:96:f4:23:93:29:40:70:67:e8:32:
                    a6:54:ba:86:66:61:88:9f:39:95:03:07:4a:e4:42:
                    b9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F3:B0:BA:41:E4:48:37:56:3D:99:F9:10:43:55:06:B6:6E:FB:D5
            X509v3 Authority Key Identifier:
                keyid:02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:84:a8:c0:ca:95:74:0e:9f:63:90:43:65:07:15:4d:83:f9:
         bd:ee:30:07:6c:37:88:3f:1d:23:63:34:a4:46:91:6f:19:fd:
         d6:d5:ba:e2:60:80:f2:8a:c8:f6:6f:ec:90:d4:cd:79:62:b5:
         c9:57:54:58:ab:57:80:38:ec:02:60:46:c3:6e:13:97:86:f0:
         0a:26:06:60:e2:4b:fb:48:9e:23:ad:ce:53:5f:0d:20:48:1d:
         ac:62:60:1a:63:ee:b4:00:06:cc:c1:20:35:16:27:2a:48:67:
         8d:12:76:67:d1:f6:e9:f2:d7:64:dd:a8:61:1f:2a:0f:ff:99:
         2b:b9:d2:34:73:ff:de:64:60:09:22:a2:48:60:31:08:10:ff:
         eb:ba:f5:69:e4:47:37:ff:be:f8:4a:15:00:dd:bd:e6:db:16:
         b1:db:72:1f:80:ed:b0:c9:46:c6:a6:ef:05:47:e4:c2:d2:00:
         63:3f:38:bc:64:86:7a:33:fd:45:da:52:46:32:26:de:a4:4f:
         db:99:27:8f:33:e5:e6:51:02:e7:bc:3f:f2:e1:a4:0d:39:4c:
         21:8d:f9:68:4d:1d:d7:62:1a:ff:b1:33:1f:bb:a0:65:89:9b:
         1f:1a:fe:4c:52:e8:89:29:c8:d7:eb:61:49:ac:80:06:cf:c1:
         2d:39:f5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:56:29 2026 by rpki-client