Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File:                     AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier:          RUEHG17bGw+JcnbbPSBMPGEtlQuhAlloqSlEC76/pY8=
Subject key identifier:   E8:D2:E2:75:A6:3E:89:F7:66:80:22:2B:45:63:15:B6:D4:29:78:F5
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer:       /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial:       01989D4C6A44CAA4F00150C15BCE55B3E9F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number:          109C
Signing time:             Tue 12 Aug 2025 08:01:27 +0000
Manifest this update:     Tue 12 Aug 2025 08:01:27 +0000
Manifest next update:     Wed 13 Aug 2025 08:01:27 +0000
Files and hashes:         1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: 5Jw1yNUhc2kYjTlxmsZJUml4AfjQqy2XRgUUYk1LYE0=)
                          2: mzTTUqHywuBobPS3UeYVNsDUJ_k.roa (hash: hsMBTi8GspJP9sz8q6TgdiXZybDG1BQNlqbzOxmeAmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9d:4c:6a:44:ca:a4:f0:01:50:c1:5b:ce:55:b3:e9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
        Validity
            Not Before: Aug 12 08:01:27 2025 GMT
            Not After : Aug 13 08:01:27 2025 GMT
        Subject: CN=e8d2e275a63e89f76680222b456315b6d42978f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:4e:fb:71:5a:7c:e9:c7:d5:e1:fe:1d:a5:
                    37:cc:49:a6:5d:33:92:5d:43:0e:b7:db:01:3c:51:
                    6b:ce:0b:3a:4c:1b:9c:06:47:e2:49:0d:d2:aa:b6:
                    d7:da:a9:4b:75:e7:6c:b6:7b:86:f9:c7:c5:e5:46:
                    e6:4b:c8:6e:d3:45:7d:0f:12:56:34:2f:b8:b8:99:
                    c5:c2:e2:7c:70:02:08:15:2d:99:53:3f:a5:d3:b2:
                    6d:f8:81:5b:fc:40:ca:0f:4a:07:a0:08:5a:5d:43:
                    f3:e6:ac:d9:7d:bb:65:b5:95:1f:dc:5d:6f:0d:6a:
                    22:de:a2:50:22:be:0c:62:ee:bb:a5:2c:d4:bd:20:
                    b2:d6:2f:77:68:ad:7c:05:25:ef:bf:bc:89:31:94:
                    8e:51:17:cb:34:91:87:91:86:a5:46:25:65:d7:63:
                    42:46:e8:7e:a1:fa:77:30:c5:ae:c5:76:9f:a3:98:
                    e9:a9:15:a3:11:57:e0:34:f3:41:97:06:29:38:34:
                    fe:7f:cf:c0:3f:81:42:7d:8f:95:56:66:3e:81:2e:
                    f2:15:cb:f9:5c:3c:e7:6a:58:bb:72:20:61:0d:88:
                    32:e4:f3:fe:e6:8f:25:8a:60:1c:84:1b:51:96:26:
                    6b:bb:37:6b:0e:0e:6f:e3:d3:c1:83:44:45:98:0f:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D2:E2:75:A6:3E:89:F7:66:80:22:2B:45:63:15:B6:D4:29:78:F5
            X509v3 Authority Key Identifier:
                keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:10:66:7c:31:26:bc:f4:9a:45:07:79:49:0b:bd:c2:ff:53:
         7c:99:c7:0a:bb:a4:8d:9f:44:9a:b8:b6:e0:e2:b0:ea:8d:06:
         9a:ff:c5:52:0e:ed:e5:36:88:5b:c0:33:58:c8:e1:8b:76:47:
         1c:d0:ab:2d:93:e7:85:1d:77:5a:c7:b2:21:3b:cc:2b:f2:34:
         32:20:59:4b:8d:f7:97:90:b2:ce:0b:64:6a:95:28:1e:76:65:
         1f:a5:f0:50:3b:67:3b:39:22:29:44:ce:4d:39:ed:95:87:58:
         a4:4b:78:8f:23:e7:f0:29:5a:ff:63:d4:93:ac:17:ed:eb:84:
         d0:12:06:5b:27:c0:c2:0e:a6:46:5f:ca:f7:0b:bc:3b:56:97:
         fa:82:8b:30:e5:e0:2b:35:7a:73:c8:5c:eb:c3:ce:c9:33:39:
         16:15:af:0a:44:99:b9:cd:22:9b:d3:17:11:fc:e9:2a:6c:16:
         20:a0:6a:b2:c7:cf:e2:2f:e9:23:95:a2:76:a3:9f:cd:2a:b5:
         78:c8:fc:38:a9:c4:c6:c3:be:f2:6d:2c:0b:cd:b0:26:e5:0e:
         35:df:da:9f:a5:fd:3e:c4:6e:6b:bc:e1:9e:56:e5:50:23:fc:
         9f:75:73:4c:6a:1f:24:19:18:7f:53:36:c0:74:02:f9:13:1a:
         06:51:04:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZidTGpEyqTwAVDBW85Vs+n0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMDM2MTZjYTJmOWFlZmE3MGMzOTE0Y2NlOTBkY2UwOTcw
NmNmYmIwHhcNMjUwODEyMDgwMTI3WhcNMjUwODEzMDgwMTI3WjAzMTEwLwYDVQQD
EyhlOGQyZTI3NWE2M2U4OWY3NjY4MDIyMmI0NTYzMTViNmQ0Mjk3OGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmVO+3FafOnH1eH+HaU3zEmmXTOS
XUMOt9sBPFFrzgs6TBucBkfiSQ3SqrbX2qlLdedstnuG+cfF5UbmS8hu00V9DxJW
NC+4uJnFwuJ8cAIIFS2ZUz+l07Jt+IFb/EDKD0oHoAhaXUPz5qzZfbtltZUf3F1v
DWoi3qJQIr4MYu67pSzUvSCy1i93aK18BSXvv7yJMZSOURfLNJGHkYalRiVl12NC
Ruh+ofp3MMWuxXafo5jpqRWjEVfgNPNBlwYpODT+f8/AP4FCfY+VVmY+gS7yFcv5
XDznali7ciBhDYgy5PP+5o8limAchBtRliZruzdrDg5v49PBg0RFmA+yCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjS4nWmPon3ZoAiK0VjFbbUKXj1MB8GA1UdIwQY
MBaAFAIDYWyi+a76cMORTM6Q3OCXBs+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEt
Yzg3Y2E5ZjJiOTVmLzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEtYzg3Y2E5ZjJiOTVm
LzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRBmfDEm
vPSaRQd5SQu9wv9TfJnHCrukjZ9Emri24OKw6o0Gmv/FUg7t5TaIW8AzWMjhi3ZH
HNCrLZPnhR13WseyITvMK/I0MiBZS433l5CyzgtkapUoHnZlH6XwUDtnOzkiKUTO
TTntlYdYpEt4jyPn8Cla/2PUk6wX7euE0BIGWyfAwg6mRl/K9wu8O1aX+oKLMOXg
KzV6c8hc68POyTM5FhWvCkSZuc0im9MXEfzpKmwWIKBqssfP4i/pI5WidqOfzSq1
eMj8OKnExsO+8m0sC82wJuUONd/an6X9PsRua7zhnlblUCP8n3VzTGofJBkYf1M2
wHQC+RMaBlEEcA==
-----END CERTIFICATE-----
Generated at Tue Aug 12 13:44:31 2025 by rpki-client