Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File:                     AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier:          JriAwAC26uhd3Xad2QuI43ncG6lRbQ6LU9CcSOFwojs=
Subject key identifier:   D4:41:2D:92:39:5E:B8:1D:1D:B6:89:AE:E8:2E:A6:7C:B8:9D:F5:4D
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer:       /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial:       01A0CCA369CD41F3B069E09F0793567D5D7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number:          0D9C
Signing time:             Wed 23 Sep 2026 05:00:56 +0000
Manifest this update:     Wed 23 Sep 2026 05:00:56 +0000
Manifest next update:     Thu 24 Sep 2026 05:00:56 +0000
Files and hashes:         1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: r/FnsUCy+sZeErbdB/KsZnt9LIJzBFi/SZMXPLqn9Bc=)
                          2: JNDctSQyCVHEUhqnByChAmEncfg.roa (hash: yXoH/sBRxwLt/qpjNEIKQniBORvNxA7f4SJGosPqLLA=)
                          3: Po5Z-3veMvoIAK-aDVEx1e-ce5U.roa (hash: AD5FiCgalWTH4X8YjTKjmnDvWNssEsjzxmI0GCJAqfo=)
                          4: oSVqebziTAnWxzzhjCN56NayiOI.roa (hash: 4+N1yl+V3Z8u2Y+zTUu1AT9E1jyRz8O9S8sbZjaoH7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a3:69:cd:41:f3:b0:69:e0:9f:07:93:56:7d:5d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
        Validity
            Not Before: Sep 23 05:00:56 2026 GMT
            Not After : Sep 24 05:00:56 2026 GMT
        Subject: CN=d4412d92395eb81d1db689aee82ea67cb89df54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:14:53:eb:62:0e:5a:10:10:44:b3:58:a5:0d:
                    8f:a1:1a:5a:49:a2:ff:d6:3c:18:c2:e0:35:f8:b8:
                    87:91:51:4c:a0:f8:ec:c4:f7:15:5c:ab:c9:67:20:
                    4a:be:bc:11:9b:b4:52:e2:8a:4c:9c:24:1a:66:b1:
                    79:7e:ce:b7:d2:fb:b9:c3:a8:cd:7d:5c:08:d4:45:
                    c1:be:ef:60:d5:bf:b3:db:00:38:8c:d3:b6:88:2c:
                    b8:14:d6:73:60:9e:62:3c:93:70:b7:43:74:e2:e3:
                    87:32:e1:e1:bf:2b:3b:87:56:d5:5a:e7:3b:65:ce:
                    80:16:2a:db:c6:0e:48:cd:17:70:89:f4:11:0b:98:
                    0d:af:a6:76:4a:69:59:2b:c6:fc:38:1d:31:63:ee:
                    0e:91:9a:77:da:08:3b:d4:4a:fc:8d:7b:c6:ba:53:
                    d8:03:1d:cd:bb:bc:26:0d:98:5e:bb:e1:12:06:7f:
                    e2:e7:4c:21:9e:63:46:e3:4d:5f:d7:0b:8d:2b:46:
                    7e:69:83:29:cb:ce:aa:0c:a6:98:b8:61:6a:fe:3e:
                    30:4d:5b:59:ab:60:5d:f5:9d:85:f0:e9:a0:c1:19:
                    57:d7:d4:e3:e5:be:da:77:f1:d7:c8:b6:d8:9f:5b:
                    10:5b:d8:6e:67:82:62:7f:20:5a:5a:5e:10:2a:5c:
                    d3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:41:2D:92:39:5E:B8:1D:1D:B6:89:AE:E8:2E:A6:7C:B8:9D:F5:4D
            X509v3 Authority Key Identifier:
                keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:13:32:b7:d3:be:8c:3b:46:b9:d3:ab:c6:e1:34:69:ca:c5:
         b2:13:8e:9f:52:09:a4:28:fa:0b:77:7b:a1:c5:13:07:a8:34:
         4a:48:7b:9c:f0:4c:89:2c:c2:f6:83:12:f7:92:71:63:fc:79:
         c7:fe:9b:69:1b:7d:ee:f3:0b:be:50:7f:d3:e9:a6:e2:53:85:
         8c:ec:30:aa:af:17:42:ac:00:5e:da:c4:f5:a8:c9:da:5b:9d:
         cc:37:f3:fd:87:c1:a1:e5:21:1c:20:4c:c8:f0:8a:a8:66:6e:
         b6:e6:72:ae:bd:1f:bd:fa:2c:ad:d8:a3:74:d7:86:bf:fa:e5:
         f9:08:85:b7:8f:47:b9:00:55:15:e2:fa:1f:6f:f7:09:c7:f5:
         2e:d2:47:76:9d:62:36:f0:4c:c4:d1:16:03:ac:aa:b2:80:01:
         56:20:b6:67:eb:ce:0f:02:7d:48:2e:76:02:17:a5:b4:5b:6a:
         9e:95:f2:a4:d2:3f:d9:7e:cc:43:f4:1d:67:50:c7:bc:64:86:
         ef:60:6d:8c:3e:e6:bd:a6:a4:d1:02:bd:4f:7b:d4:b9:95:d1:
         72:35:e8:78:bb:f0:7c:36:85:14:22:32:96:ba:a6:b1:33:b1:
         50:c0:23:f6:d4:76:ba:b5:3c:3b:02:66:72:38:4b:d2:6b:63:
         7c:4c:38:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:59:16 2026 by rpki-client