Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
File:                     BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json)
Hash identifier:          ugv2PrG1TZrwprI6YH6wxklL0Lx6roxHxl0MCBtR8mA=
Subject key identifier:   AC:6A:E7:EF:12:06:76:72:7D:C6:E3:A9:CC:F5:B6:B9:3A:6B:F6:57
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       019873E3D805C83A81BF4A4F889D7521AA34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
Manifest number:          1174
Signing time:             Mon 04 Aug 2025 07:02:48 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:48 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:48 +0000
Files and hashes:         1: 28rk6vVEaThskl5Oz8cUwJzvyPE.roa (hash: YmQ0Kx60sH8MZc89x92SrjX+sCOw13xB0G1V7AXRvnw=)
                          2: B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa (hash: uEBgOj1wL/lZxabuAzXGGt9tXkgNmy0WBweEZQ8DMa4=)
                          3: BTm3OMQjY7f4flmyBZ1O5fiBDxs.roa (hash: biLT4JhrLwf2X8ChjWAfH7u0E229MvoO7NLFEuPFfwM=)
                          4: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: holwgPCrezMT42nCghvucVkfTEf7lRonAjq+co+EW50=)
                          5: FKfpXlklu-w0UnrhkTOoss8rNJI.roa (hash: rpXmd4bsDkUdxce7+QWIHh2UliURkTxLOg/dAC0t8qY=)
                          6: IzY3hBc9dplU60ltzFYrtaLdQVM.roa (hash: oWyFSqLRdDQLHe1B9vzDpFM/h/LlBXpLreUihDrqVEg=)
                          7: VsEc5daaJmy8OJ4pZ8S-usa9zlo.roa (hash: amZYPVVWihv5JeymXC/hm0CI0v2XFAyE3R7vmcHdxNw=)
                          8: ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa (hash: 8A0ZbBwJVxe/mI3qDF06TbRtLu8mKb/RfAg0IkfL6lA=)
                          9: cm8GtcTHwoYStisNyga9gSVGLUU.roa (hash: v40FCmdUz2OM9eR6s3YOOpZt+uxDnzYy59kW+69A10A=)
                          10: cpQDuCQS_PmKGa6mRrggJump5IQ.roa (hash: pejGEaNqW754xgC8ojt2JY5OjOdgLVYVhBOgK3JEQ/g=)
                          11: fqkGaUKO8jQgV43kpQCPk_QvAKY.roa (hash: hX2eXDOdterl33d5BLDKltIZDyu7ggsh0S/egGBhPp0=)
                          12: gr7Hsot6ZTb-tQFkDS-R02k4wEY.roa (hash: 3DFfqHgyxVAmbOljghFjNoIvArcsBlSFgk7x4Ag96IY=)
                          13: hM4RUMXGkSsGKGeXFlPc5WdVja8.roa (hash: +27OhfsKET5J+JAUfDDgfUlvTDk8tRsjQoV0ueuKdsc=)
                          14: iPyY19uHgkMYGAWAMDHBLbfMjZA.roa (hash: wGwPKPeKSnk3qEUiBNJ9xLHjl7O1N6ugdMFUPFqcS6w=)
                          15: iWm57G_OhEZoZtm420opEVVmjwk.roa (hash: tplvQrByHA3nV7i/oHw26AKWQE0TqsWHR752F20xeg8=)
                          16: j23rxrd-Lsv5i-XlSgQQvzbmNH4.roa (hash: AOwdW+Sra4IA2tk75pjPupKPHVlPdSlV6DBy+ee+RBw=)
                          17: yX38jt3vI8i36FvJ3E_-UlmiSxQ.roa (hash: stQu9DFDxjZu1F/qyBAVnzlmn5IHuu+7EIChhkt6oKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:d8:05:c8:3a:81:bf:4a:4f:88:9d:75:21:aa:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Aug  4 07:02:48 2025 GMT
            Not After : Aug  5 07:02:48 2025 GMT
        Subject: CN=ac6ae7ef120676727dc6e3a9ccf5b6b93a6bf657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:79:ba:ff:d5:b1:6c:03:96:09:87:43:db:
                    d0:ef:5c:0a:8a:9b:28:c4:c2:d8:b2:16:aa:f2:70:
                    d4:6a:bf:13:46:20:6b:d8:99:3a:fc:cc:41:d9:38:
                    53:4c:d3:32:a1:c2:90:fc:e6:16:3f:4e:00:06:c9:
                    16:b8:a2:fc:4c:88:c6:72:18:99:73:a7:e0:78:02:
                    da:27:2c:a5:24:de:0b:20:c6:7f:de:c9:8b:d6:3b:
                    a9:91:ea:34:7a:d8:d1:52:29:1e:9c:1b:9b:73:cb:
                    b6:62:e5:e6:e7:8c:08:c3:ff:c0:3a:65:16:50:f7:
                    e4:3f:fb:d2:24:89:45:85:d4:08:0e:4c:b4:df:b5:
                    0c:f9:9c:43:5a:27:7a:d2:6f:dc:a4:d8:dd:f2:3c:
                    df:12:d3:c4:e0:62:ba:c3:d2:4c:18:26:58:49:c7:
                    3c:2d:1f:22:7b:d6:70:d0:c9:f2:d2:09:70:33:68:
                    94:c4:6f:60:d0:0d:6a:13:fb:2d:7a:31:1a:16:f8:
                    c7:8f:60:0d:bb:3a:48:47:a0:c3:9d:e9:a0:f8:c1:
                    09:73:89:77:63:01:30:41:d6:59:6a:6e:71:11:da:
                    7e:f4:44:bd:f7:14:12:6b:3b:32:30:27:51:c6:98:
                    b6:b7:20:61:63:3c:64:fa:4a:2e:6a:c5:a6:9f:12:
                    7f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6A:E7:EF:12:06:76:72:7D:C6:E3:A9:CC:F5:B6:B9:3A:6B:F6:57
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d0:3c:df:97:a5:5e:d4:8b:18:8f:20:9b:c6:8d:84:d6:dc:
         52:e1:98:12:6f:89:61:ec:51:3a:07:59:29:a5:37:06:ce:d7:
         fd:c3:a4:d4:a0:b1:d5:01:cc:e0:7a:6d:95:ce:a9:73:42:73:
         87:74:21:dc:fd:16:57:ae:c4:42:be:45:a8:4e:99:8b:b9:15:
         62:5e:17:49:e8:60:5c:ca:8d:81:93:35:8f:64:16:98:64:35:
         4a:01:a5:5e:18:bb:83:7a:bd:d9:6a:30:97:ca:6c:1d:6c:10:
         a4:54:b8:6e:82:66:21:4c:44:db:52:4e:d6:24:0b:c6:f9:b4:
         54:11:ac:c4:93:f2:c1:d3:06:39:96:25:12:e7:a9:4c:c6:90:
         1b:db:f7:59:d3:3f:aa:86:75:45:16:58:28:8b:61:2b:82:15:
         07:83:fa:c4:32:08:03:c9:d8:4e:26:c7:ee:25:00:34:ac:a1:
         c5:77:2e:b2:8d:c1:64:b9:7d:87:c3:80:bb:53:24:a0:14:97:
         e2:61:5f:77:94:79:d3:9b:cb:a5:08:e7:72:d5:80:f2:75:ec:
         ef:24:ff:2b:8d:e5:06:f5:3e:08:c1:55:b0:03:78:1d:f1:60:
         2b:1d:f4:63:69:97:38:64:07:27:d1:15:69:41:90:44:0b:ca:
         7e:7d:25:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz49gFyDqBv0pPiJ11Iao0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwODA0MDcwMjQ4WhcNMjUwODA1MDcwMjQ4WjAzMTEwLwYDVQQD
EyhhYzZhZTdlZjEyMDY3NjcyN2RjNmUzYTljY2Y1YjZiOTNhNmJmNjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13Z5uv/VsWwDlgmHQ9vQ71wKipso
xMLYshaq8nDUar8TRiBr2Jk6/MxB2ThTTNMyocKQ/OYWP04ABskWuKL8TIjGchiZ
c6fgeALaJyylJN4LIMZ/3smL1jupkeo0etjRUikenBubc8u2YuXm54wIw//AOmUW
UPfkP/vSJIlFhdQIDky037UM+ZxDWid60m/cpNjd8jzfEtPE4GK6w9JMGCZYScc8
LR8ie9Zw0Mny0glwM2iUxG9g0A1qE/stejEaFvjHj2ANuzpIR6DDnemg+MEJc4l3
YwEwQdZZam5xEdp+9ES99xQSazsyMCdRxpi2tyBhYzxk+kouasWmnxJ/dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxq5+8SBnZyfcbjqcz1trk6a/ZXMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtA835el
XtSLGI8gm8aNhNbcUuGYEm+JYexROgdZKaU3Bs7X/cOk1KCx1QHM4Hptlc6pc0Jz
h3Qh3P0WV67EQr5FqE6Zi7kVYl4XSehgXMqNgZM1j2QWmGQ1SgGlXhi7g3q92Wow
l8psHWwQpFS4boJmIUxE21JO1iQLxvm0VBGsxJPywdMGOZYlEuepTMaQG9v3WdM/
qoZ1RRZYKIthK4IVB4P6xDIIA8nYTibH7iUANKyhxXcuso3BZLl9h8OAu1MkoBSX
4mFfd5R505vLpQjnctWA8nXs7yT/K43lBvU+CMFVsAN4HfFgKx30Y2mXOGQHJ9EV
aUGQRAvKfn0lOg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:40 2025 by rpki-client