Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
File:                     BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json)
Hash identifier:          uIfwhfNNcWKdsN0XY0exViMufI+O5woTq7ByAks5jwk=
Subject key identifier:   CC:4C:B0:6A:FB:38:34:81:05:B0:F3:53:A0:DA:CC:03:58:C6:61:0C
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       019EBE7EFBA1682B4440336BFB846FF0EAFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
Manifest number:          150D
Signing time:             Sat 13 Jun 2026 01:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:53 +0000
Files and hashes:         1: 1-FuYsbw3PtN6RSCCIreMvOiEBvc.roa (hash: LcUqDvDIF+dS1rO59QJwzMS/rR1Ec+AWaOwx0W19I+c=)
                          2: 8FqA2ZF4hxliA1oSbnxrFuSzN9E.roa (hash: dy3uYfdWJITOpK1lPFOdwtBaqmyss+P6rreDBETaVWQ=)
                          3: 9OXwbbo9zr_3BQj52xJjo87B1H0.roa (hash: nd0RN9d/PlTgDX+aJhBlBpTwb0az6QSS6Oggok8UdKw=)
                          4: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: j8kU3dizhGhA1QqEgVZlMXXb5SwRDiGsSzzl/wjAU6c=)
                          5: CdgjSj8B2eEBBly0iK4h89jCNUc.roa (hash: aTHrwyvkvgZuRLuQPng1C8Fc89AkT7KTKhgpjKS5Q+Q=)
                          6: Klar462pF_C7Uti8GK6IYP2krDE.roa (hash: 3WyNeae+niIgGbLc2lmu97xevrRHuow2kNsFvJfq+R8=)
                          7: LhUoyafw0eBO0Ih4BQB3S8BEgpc.roa (hash: +v0l6P5r3gLGYQgL2479m1StjC9ighRFwkqys6s0Hnw=)
                          8: P2LjaDtYMpe_CWSncsWRaVlnCFw.roa (hash: rv+G8zQN4NdUsb52K+K9v2QbvUnYOnNmTAPUjYU2K6M=)
                          9: QQg-EV4YSeTtW88liCvZE3JZJN4.roa (hash: BlNIOZivnagMRQWrTBwPXmJaq1VIGQ1ABsuvUyI4XEE=)
                          10: QomjpQx9_CU1bmLVLsZtPoZDq78.roa (hash: HNmZtCav5oDUjr+7p6DMbvp4B1wr1fA/JAYD/NDabk4=)
                          11: T86y2lb6VM9SYijib5Gx6TXU_P8.roa (hash: ExJprcrpe0RGYOZUNA24jfKZT7aUwu9YCrRRkzYlGpo=)
                          12: TEFZXyi-TdJJ-8c3Jqvj55TRRvo.roa (hash: Cxi33yaEo3wewSE6aiUk4NlD+VA3nEwo0JszGNifnSk=)
                          13: TsfF6totEPD5J_SD01aG26CeNlU.roa (hash: pacbzaruVfidutobZhr9cP689NUwwKv7FUw+m6XxsRo=)
                          14: W5olfq9Y7_Lj6KMnAWRUMCZAxjo.roa (hash: qmwFKXQc7nyx5IpOYqlWD91kE3wC9gbI51Kb8YcehEw=)
                          15: YrCSoDY2gBELylrBp80qKY1mLFw.roa (hash: n1TS2t+Errsfcdk3+b0U++Qmqd3Sf71dOOXviQAbSkY=)
                          16: ZdmHkUJ9PRKhmoc8jv7LUUj_Wd4.roa (hash: F/KMJPmsP3cXeV6hR2o7i96s5m6Ldck+0oyUPjMxPwI=)
                          17: eCCtsWUQ-mDprEDhwQ8ty_d5Qfk.roa (hash: Qiq+7bQecY3DeDqaD3Cv9NQ1fhS4WGOXL35Vf4eeyO0=)
                          18: gxYBa5PVU9v9YoR3nT1e_I5ZLaQ.roa (hash: LUNLKTLF0jU435zgccL4QRfdTZFRAvMjstkjVzOvR40=)
                          19: hmb3Sj2KWUAMTfGYcWVLk0KMRhg.roa (hash: EYq3/vGPN6jy3lzOn8yHeB4uOnE5CknSB12P3oGEmTQ=)
                          20: m9rP0dcPDajw_wBB9DhY5sWJHwg.roa (hash: e+HHBL1u2usrpKCyzDWznso6dRBdcmKW92d3TFmMF/A=)
                          21: ofDnG2RR07Ffgo6O-NriMLrnSqk.roa (hash: NnioAnFhMcEqC2jvleG0Rix97KFCy1QoGkLlAfyyOm0=)
                          22: oq5d9HTZ2FvH6UpKIxcYrRSa8sk.roa (hash: mACKVbi6TlnubAvt/B9gWwTNVFEYK1/MvPkL1z25u4U=)
                          23: qpMUFqbg_01nqmll8WKGqUhaRKU.roa (hash: shJV+eC5RH0MlPfYyy61cbtv+g4CqZaYC7XyO4CDx6U=)
                          24: sZn_8RaubZPigyXGXO2IjK2MOTM.roa (hash: bEBPF8tv/kM4E97KTe1cHoW9Ts80r9Q2pr3xoQ63Ogc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:fb:a1:68:2b:44:40:33:6b:fb:84:6f:f0:ea:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Jun 13 01:00:53 2026 GMT
            Not After : Jun 14 01:00:53 2026 GMT
        Subject: CN=cc4cb06afb38348105b0f353a0dacc0358c6610c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:a0:34:9c:ee:60:49:60:c7:2b:79:c9:0b:
                    4c:f9:fa:0d:01:39:20:8c:5e:20:0d:21:6a:1c:01:
                    11:d7:c9:8b:21:05:8d:54:3d:41:0b:c5:81:9d:85:
                    06:7e:6f:db:d2:e0:75:73:11:5e:56:65:79:4f:a6:
                    7f:52:b2:bf:ed:e7:50:a3:47:50:1d:54:72:36:dd:
                    b6:bc:55:6c:8e:94:07:49:6d:30:17:5f:7b:0c:4d:
                    d5:ed:eb:24:3e:db:7b:bd:a7:d7:09:15:32:e5:45:
                    05:2f:df:47:60:6e:cf:00:7a:17:c0:87:42:78:b2:
                    ca:7d:96:e0:f0:eb:a3:66:9d:0a:df:44:7d:c6:3b:
                    30:d5:02:5f:25:38:4d:04:88:6e:fd:4b:29:f7:98:
                    e9:6a:1c:48:63:58:1c:58:41:fa:27:e5:25:18:43:
                    b2:ec:b7:49:9a:ff:69:dc:7d:f3:da:c0:97:0c:57:
                    e6:28:dc:51:06:4f:b9:8e:fd:c1:72:f4:b5:61:d9:
                    16:2b:8c:f0:61:7c:f9:39:aa:47:41:15:4b:6e:23:
                    ea:37:63:36:28:15:ab:9b:ee:fa:d3:0a:58:41:9a:
                    76:e6:28:3a:a8:ba:04:bc:c6:df:d1:49:9f:fa:5f:
                    33:b9:9e:38:f3:d1:13:37:67:31:e0:69:96:d5:d0:
                    ef:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4C:B0:6A:FB:38:34:81:05:B0:F3:53:A0:DA:CC:03:58:C6:61:0C
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:b2:09:13:55:c0:ff:e4:36:ef:01:e9:78:bf:93:7f:cd:a8:
         bd:6b:75:68:23:77:02:f2:a8:c6:7e:f1:45:d5:ae:1a:fd:7f:
         51:ec:af:43:f3:7a:81:7e:2a:19:35:5a:f6:68:7a:0f:8e:c3:
         50:3c:7a:91:be:52:3c:38:a4:1d:3c:ec:f0:c1:cb:13:35:06:
         fe:3d:44:27:8c:ec:e6:81:f0:c8:28:7c:68:46:70:84:77:97:
         85:e0:95:24:a7:62:41:0f:19:a1:4b:db:b6:67:06:72:e7:6d:
         99:1c:a5:72:b5:9b:82:36:53:b2:b7:a7:af:f5:4a:73:0d:e8:
         57:93:36:4f:58:ca:85:11:78:d7:e7:ed:ce:7b:79:c4:3d:6b:
         d0:71:de:06:00:c9:30:a9:f8:13:19:08:be:51:64:4c:c9:50:
         a9:51:7c:c9:32:41:9e:8b:1f:20:eb:2f:e8:f6:9e:36:41:c7:
         28:53:67:65:c5:1a:44:5e:08:e1:fc:25:76:ca:3c:6a:c2:26:
         d8:4d:55:88:c8:e0:c1:f9:87:1a:55:8b:76:c1:dc:2c:91:85:
         dd:5d:09:5a:bf:de:2d:e0:b7:fd:26:cf:1e:c7:01:05:16:68:
         a3:d9:d4:55:a4:65:36:9a:a9:e4:e1:16:7c:ac:73:54:7f:0d:
         66:85:61:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+fvuhaCtEQDNr+4Rv8Or8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjYwNjEzMDEwMDUzWhcNMjYwNjE0MDEwMDUzWjAzMTEwLwYDVQQD
EyhjYzRjYjA2YWZiMzgzNDgxMDViMGYzNTNhMGRhY2MwMzU4YzY2MTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkugNJzuYElgxyt5yQtM+foNATkg
jF4gDSFqHAER18mLIQWNVD1BC8WBnYUGfm/b0uB1cxFeVmV5T6Z/UrK/7edQo0dQ
HVRyNt22vFVsjpQHSW0wF197DE3V7eskPtt7vafXCRUy5UUFL99HYG7PAHoXwIdC
eLLKfZbg8OujZp0K30R9xjsw1QJfJThNBIhu/Usp95jpahxIY1gcWEH6J+UlGEOy
7LdJmv9p3H3z2sCXDFfmKNxRBk+5jv3BcvS1YdkWK4zwYXz5OapHQRVLbiPqN2M2
KBWrm+760wpYQZp25ig6qLoEvMbf0Umf+l8zuZ4489ETN2cx4GmW1dDvWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxMsGr7ODSBBbDzU6DazANYxmEMMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwLIJE1XA
/+Q27wHpeL+Tf82ovWt1aCN3AvKoxn7xRdWuGv1/UeyvQ/N6gX4qGTVa9mh6D47D
UDx6kb5SPDikHTzs8MHLEzUG/j1EJ4zs5oHwyCh8aEZwhHeXheCVJKdiQQ8ZoUvb
tmcGcudtmRylcrWbgjZTsrenr/VKcw3oV5M2T1jKhRF41+ftznt5xD1r0HHeBgDJ
MKn4ExkIvlFkTMlQqVF8yTJBnosfIOsv6PaeNkHHKFNnZcUaRF4I4fwldso8asIm
2E1ViMjgwfmHGlWLdsHcLJGF3V0JWr/eLeC3/SbPHscBBRZoo9nUVaRlNpqp5OEW
fKxzVH8NZoVhXQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:26:43 2026 by rpki-client