Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File:                     AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier:          oSoohSyjdBxqd3UMkuL6CMqK/UK82KkHK3MtIfItKaY=
Subject key identifier:   BB:04:E7:4D:CD:BF:61:58:B8:1F:B2:07:42:19:54:72:7E:E2:C6:97
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer:       /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial:       01A1DEDEBEC6F3B19909C79C245BE9E4FB38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number:          0E2A
Signing time:             Sun 15 Nov 2026 11:01:42 +0000
Manifest this update:     Sun 15 Nov 2026 11:01:42 +0000
Manifest next update:     Mon 16 Nov 2026 11:01:42 +0000
Files and hashes:         1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: /Rq5ppC/2WRRy681+pkLp2P+WqjvrLwzj0QirGwBSIg=)
                          2: JNDctSQyCVHEUhqnByChAmEncfg.roa (hash: yXoH/sBRxwLt/qpjNEIKQniBORvNxA7f4SJGosPqLLA=)
                          3: Po5Z-3veMvoIAK-aDVEx1e-ce5U.roa (hash: AD5FiCgalWTH4X8YjTKjmnDvWNssEsjzxmI0GCJAqfo=)
                          4: oSVqebziTAnWxzzhjCN56NayiOI.roa (hash: 4+N1yl+V3Z8u2Y+zTUu1AT9E1jyRz8O9S8sbZjaoH7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:be:c6:f3:b1:99:09:c7:9c:24:5b:e9:e4:fb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
        Validity
            Not Before: Nov 15 11:01:42 2026 GMT
            Not After : Nov 16 11:01:42 2026 GMT
        Subject: CN=bb04e74dcdbf6158b81fb207421954727ee2c697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:d7:c4:e4:51:41:eb:6f:6b:24:b1:a3:e9:
                    f8:d9:43:2c:d2:cf:41:b3:3b:36:4c:20:ce:00:d3:
                    97:3d:24:5b:14:9c:7f:35:1a:c8:56:ef:b7:fd:33:
                    2e:2c:bf:f7:58:23:97:73:df:e0:05:c2:eb:8c:13:
                    0e:13:f0:1f:cf:fa:51:79:ff:e9:a3:e6:db:95:43:
                    74:3f:ed:94:ef:7a:b8:68:2f:dd:d7:1f:84:ec:fc:
                    30:08:ce:3e:12:03:61:a9:06:5b:dc:ce:3f:56:97:
                    f6:08:b9:ec:2f:c6:9b:7d:40:9e:d4:70:75:4d:9d:
                    fa:4f:83:97:b1:27:3a:83:8c:c3:45:47:82:0c:1e:
                    f3:29:7c:b1:d9:b9:3c:d5:d5:f0:50:8f:d1:01:e5:
                    a6:c8:37:65:8f:32:1e:21:4c:0d:77:17:60:d2:56:
                    6d:fd:72:d7:e1:45:9c:e4:37:0c:f3:3a:fe:09:a0:
                    1e:e7:50:70:84:02:de:5b:05:e0:8a:0a:d7:9a:95:
                    ea:08:8d:99:97:2b:82:85:3c:ab:f7:f8:5e:0c:f4:
                    ae:38:4e:38:d8:74:86:a7:4e:12:06:7b:52:ab:3c:
                    7b:43:e3:ff:61:bf:d6:b9:c1:0d:b6:24:8f:44:30:
                    48:72:e4:93:cd:55:eb:a4:c3:b8:05:47:2e:29:38:
                    c6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:04:E7:4D:CD:BF:61:58:B8:1F:B2:07:42:19:54:72:7E:E2:C6:97
            X509v3 Authority Key Identifier:
                keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:3c:c9:5f:67:45:9f:20:5b:84:c3:69:c5:5f:3f:cd:dd:60:
         e1:92:1c:9e:cc:55:f8:86:58:4b:5b:26:33:1d:79:dc:db:00:
         84:84:20:e4:28:88:6b:f7:8f:25:da:82:ca:45:79:d0:63:69:
         51:57:7e:06:86:46:f1:5b:3b:c1:14:cd:06:5b:8e:c6:f0:91:
         7c:fc:93:0a:59:37:09:57:ba:89:06:25:f7:d1:17:49:14:b5:
         be:28:7c:b3:3d:01:ab:b6:95:8c:80:48:9c:aa:0e:ee:2c:53:
         4a:91:d5:2e:71:8a:d8:2a:82:06:a3:f3:dd:c1:93:9b:fc:08:
         72:b3:97:c2:99:5f:1c:f4:6e:1b:bd:3a:4f:b3:3d:62:2c:20:
         71:dd:f4:00:28:5c:9e:b4:f7:78:1d:54:1c:db:7f:8e:16:bd:
         a8:6e:d6:48:a4:7e:e2:4b:c4:ee:b9:04:d1:82:3a:73:83:7f:
         ba:1e:b1:dd:0d:4a:a3:ca:65:36:1b:55:5c:9f:7f:8d:46:e5:
         d2:f2:6d:d3:9d:3f:10:34:25:80:e9:d9:4f:3c:96:fd:78:10:
         cd:70:9f:2b:87:b3:1f:3f:f4:4f:96:26:d3:e0:6b:40:ed:f3:
         00:57:4f:93:89:62:c5:f5:16:f2:13:5d:7d:17:45:af:11:68:
         4e:e6:4a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:17:15 2026 by rpki-client