Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
File:                     ag4WzCqLkctIP0UegTtniul1grA.mft (raw, json)
Hash identifier:          DN5N4ncyeuk9FuQnEMe/+2SIWh1o7X+djCx8QGhAKOM=
Subject key identifier:   67:39:2A:D7:9F:01:D1:1B:1B:3D:B1:DC:83:6A:EE:05:49:93:39:23
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Certificate issuer:       /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial:       01A1DCF01900FAD3C3F157413588DAC6B2AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
Manifest number:          0172
Signing time:             Sun 15 Nov 2026 02:01:24 +0000
Manifest this update:     Sun 15 Nov 2026 02:01:24 +0000
Manifest next update:     Mon 16 Nov 2026 02:01:24 +0000
Files and hashes:         1: 1-L9_xn5XwFHg99yogQ5P-JRQJno.roa (hash: saknG4EeimO2uKEX00r/busJjcraxx17Sa52KQHrOss=)
                          2: 1IO7D2ixQ-lvyHRtaxSutQuJrdk.roa (hash: w8VZiMHzBrWoJWSQi1dFm3cARenc5HNcqj8t4FMaUvc=)
                          3: 82--YWEKcMvIJETSOTv0fBdL6CM.roa (hash: txaVMOY8ninC/G6RFe/UwHhOENX0T290iWUIMYkdnmk=)
                          4: MHRGHVH_9ryY5YWmrqyOo25Yw-w.roa (hash: p0ZTTiOVdQ6jigzVZJJBkL+3fqMDD1xA2wHogGA9TUQ=)
                          5: P9YT4wpleippbcH7ySs9yJhewoc.roa (hash: cSxqBMShQEu5xdePejl0TQuouUbtuQWYRC9Of5i3nxw=)
                          6: PehZN3iXx53NNUUfpGjKtEgbtG0.roa (hash: ZF5FCAasCGxv9d43oiaKd2A5u46kRGpM48JeEUZzsOY=)
                          7: QcJ1_3me8VKJVSwljpvJ4RRo4bI.roa (hash: oLE/UmjEKWdlluphq/E4JLOUzru3Xt/qp1y2xi32ZuM=)
                          8: RoQDt4PjdwW0SoiiPvyTsxSfuY8.roa (hash: 1mJogWLp+9JQPWumTmYBS2/tf+nhYhyUXRjcoUUswLw=)
                          9: RvNLAe_RSP56uzDHYQxY7j2RYDA.roa (hash: 138Cifhmc2WWQk/qLf2plQLxN1qV8R840l4XB+Ds6Qg=)
                          10: SOdgrNHWpRExOJRc-f9cfWJ4cms.roa (hash: k5GQQCFGnAJdQAMjkz3mMLNhKN0O4TfU790kcOAiuaM=)
                          11: UqImUVHBq3p8NTSpUZrZaZqeIO0.roa (hash: b0cbtwxFDLQWZmYSn/tfFyO/bdt5kbBtbbVLEmIteZY=)
                          12: V4QNov5aUVl0kjPoDbGXWUTFf3c.roa (hash: RWwYnwshC1K5yWsQ6bl0FWPq+jSiHD0KLQ+6u/grLQo=)
                          13: ZXMBfEzRQgZ6XQqYEpUztP_oHuk.roa (hash: CES/AfhEQn2U94y88HLeLxHi0QZ8IQSspRKZIOPxVHU=)
                          14: ag4WzCqLkctIP0UegTtniul1grA.crl (hash: rWBsty3ESUPbc3MkBOJkYVEyGwJI21nGQvKTRkus30E=)
                          15: d8oOPqlSra-rTmA54o0j2vzxr0A.roa (hash: AhlHhCywmKUI+lzSLHD7mQ2qyNEVroRmLAbTnYAauQM=)
                          16: hr6KKW3gkx0Rqd2xi4SSwYOvYAo.roa (hash: AW1B3GU+CHp2dLnlTMaUnh9So+6olkFuGvAvVFpBybo=)
                          17: nYlDDvhL9ZKod4FxRoAJN8wFPy8.roa (hash: kUW/q0E+5ap6XJqy3o0pzyvq0pN9N7639FqeoHqln7w=)
                          18: tVwUWgI0k8DkV7G2WTgXa5VNfPo.roa (hash: rqPzYD02GYLG9fAY4VlQoJM56kO+k6njtSAlc0b2fAA=)
                          19: vQp8JDZu2Q14WObOPwXlpzsuRww.roa (hash: NnSb+dE0t2g/eGL7iPYNNWKpsRvGqFDLvEe0bjWAn3E=)
                          20: v_mdbw7jIHcL1g6aBJx8hPIeI7o.roa (hash: v4eg5veNAvWityWa5ZKIIjCXC1Dxnwt6/VunwasGYGI=)
                          21: yde-3lSgZiRr0HU1KS1x7njAoeA.roa (hash: eSGD7O7kwdqNPAeSE2PmhfFGu0OTxONTMV1cXFqWo/g=)
                          22: yhT-mk4RlK_23r87bx8wgxjYo0I.roa (hash: IEqteidWj9b7QeNy9pMBuDBBYbLVuIvmwgulZqKbUEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 02:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:f0:19:00:fa:d3:c3:f1:57:41:35:88:da:c6:b2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
        Validity
            Not Before: Nov 15 02:01:24 2026 GMT
            Not After : Nov 16 02:01:24 2026 GMT
        Subject: CN=67392ad79f01d11b1b3db1dc836aee0549933923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:d1:91:77:a6:9b:44:f0:28:53:28:d6:3a:
                    30:c4:86:de:9b:a0:d9:20:b3:77:90:82:55:02:d0:
                    f2:2e:51:c3:b3:26:86:b1:68:bf:7d:2e:8e:96:26:
                    2f:14:d5:96:08:03:85:1f:59:3e:cf:77:05:4b:d6:
                    f5:45:78:8e:e9:75:2b:8b:23:3a:43:4f:d7:2d:8c:
                    f0:c5:4d:85:6b:04:c2:a6:05:59:63:70:50:0e:99:
                    cf:83:1f:20:93:f7:2c:7c:98:43:eb:c0:ec:29:43:
                    36:e8:5d:b6:f8:5f:71:83:41:2d:eb:39:05:09:1a:
                    ce:a4:4a:af:e7:ad:b6:bf:15:70:a1:34:09:f2:0c:
                    26:b5:ab:45:53:c2:ee:84:20:c3:14:60:5e:1d:6e:
                    d9:b6:dc:d2:54:ea:19:1b:fd:3d:45:ef:a8:3b:12:
                    c7:bf:7a:98:25:fa:b1:24:f5:76:07:a3:ab:81:bf:
                    e9:68:44:2a:e1:f7:ca:4e:ab:9f:a8:09:d6:31:94:
                    a2:db:c2:30:66:05:ea:9d:30:f0:0e:56:08:f8:a0:
                    93:a1:9b:80:20:5c:3e:06:fb:56:c5:f2:89:5f:ea:
                    c8:5c:ab:f1:28:5e:19:6e:56:23:11:37:b5:6d:af:
                    02:61:12:d2:8e:23:0a:2e:5b:b5:28:68:aa:15:a5:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:39:2A:D7:9F:01:D1:1B:1B:3D:B1:DC:83:6A:EE:05:49:93:39:23
            X509v3 Authority Key Identifier:
                keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:53:ce:38:25:71:35:6d:ef:fe:a0:98:e3:c1:06:b7:d4:ff:
         d0:b1:fd:6c:9f:83:1b:62:87:0e:c8:24:5b:d3:df:3b:83:b2:
         9b:f4:a8:ab:af:30:a5:40:95:ed:ca:ca:ac:2c:6c:01:fe:3f:
         a0:57:13:c9:cd:bf:00:ad:b7:83:cd:8c:a6:f9:57:71:89:07:
         14:e1:c3:10:ad:3e:f1:93:23:79:9c:e2:83:62:24:81:52:7c:
         6b:61:bb:d5:54:6d:9c:ae:bf:3e:8d:32:26:86:86:ab:07:44:
         23:6b:1c:cc:8e:ad:2f:8f:cc:c8:41:86:0e:20:3a:99:b8:7e:
         0e:89:9a:5a:43:10:9d:6a:f3:06:2d:01:ee:30:18:a9:e2:ad:
         a2:0f:ae:be:47:92:13:ae:33:86:41:10:71:48:44:11:c0:00:
         6e:01:0e:5b:55:e1:d9:6b:8a:d5:ca:53:cb:21:44:11:7a:75:
         7e:ac:ec:04:eb:16:9a:6c:a0:12:9b:55:ba:61:ea:04:af:d8:
         48:2b:45:f7:14:94:08:3f:0e:09:9f:e1:08:89:ae:a6:c2:53:
         c0:1c:aa:ae:1d:d5:56:c9:8a:90:fa:b4:c0:00:08:8c:85:f8:
         5b:f1:54:ec:19:3d:c8:f5:4d:f5:d1:fa:7a:af:ee:a1:03:d6:
         61:0a:11:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHc8BkA+tPD8VdBNYjaxrKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMGUxNmNjMmE4YjkxY2I0ODNmNDUxZTgxM2I2NzhhZTk3
NTgyYjAwHhcNMjYxMTE1MDIwMTI0WhcNMjYxMTE2MDIwMTI0WjAzMTEwLwYDVQQD
Eyg2NzM5MmFkNzlmMDFkMTFiMWIzZGIxZGM4MzZhZWUwNTQ5OTMzOTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUbRkXemm0TwKFMo1jowxIbem6DZ
ILN3kIJVAtDyLlHDsyaGsWi/fS6OliYvFNWWCAOFH1k+z3cFS9b1RXiO6XUriyM6
Q0/XLYzwxU2FawTCpgVZY3BQDpnPgx8gk/csfJhD68DsKUM26F22+F9xg0Et6zkF
CRrOpEqv5622vxVwoTQJ8gwmtatFU8LuhCDDFGBeHW7ZttzSVOoZG/09Re+oOxLH
v3qYJfqxJPV2B6Orgb/paEQq4ffKTqufqAnWMZSi28IwZgXqnTDwDlYI+KCToZuA
IFw+BvtWxfKJX+rIXKvxKF4ZblYjETe1ba8CYRLSjiMKLlu1KGiqFaXJ/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGc5KtefAdEbGz2x3INq7gVJkzkjMB8GA1UdIwQY
MBaAFGoOFswqi5HLSD9FHoE7Z4rpdYKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFPOOCVx
NW3v/qCY48EGt9T/0LH9bJ+DG2KHDsgkW9PfO4Oym/Soq68wpUCV7crKrCxsAf4/
oFcTyc2/AK23g82MpvlXcYkHFOHDEK0+8ZMjeZzig2IkgVJ8a2G71VRtnK6/Po0y
JoaGqwdEI2sczI6tL4/MyEGGDiA6mbh+DomaWkMQnWrzBi0B7jAYqeKtog+uvkeS
E64zhkEQcUhEEcAAbgEOW1Xh2WuK1cpTyyFEEXp1fqzsBOsWmmygEptVumHqBK/Y
SCtF9xSUCD8OCZ/hCImupsJTwByqrh3VVsmKkPq0wAAIjIX4W/FU7Bk9yPVN9dH6
eq/uoQPWYQoRfg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:42:09 2026 by rpki-client