Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File:                     AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier:          9s9ateSjIVmyu+tXp/r8K66vPLXlbAgQM4XLKbUj88Y=
Subject key identifier:   EA:F4:5E:4C:03:45:CB:3A:49:F9:E2:D0:C3:D3:01:0F:00:5C:E7:7E
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer:       /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial:       019D284E872C4F449DBA96177E4840CC387A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number:          188C
Signing time:             Thu 26 Mar 2026 04:02:08 +0000
Manifest this update:     Thu 26 Mar 2026 04:02:08 +0000
Manifest next update:     Fri 27 Mar 2026 04:02:08 +0000
Files and hashes:         1: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (hash: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4=)
                          2: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: rBXBjOEx2kpVJN+idOfAzTkue1D9angP8voo9tYKHHI=)
                          3: KqW4k975xNj0cUtZycmmIX1XgM4.roa (hash: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k=)
                          4: NurrzfLeVosuCbdskOR80jmR2QQ.roa (hash: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:87:2c:4f:44:9d:ba:96:17:7e:48:40:cc:38:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
        Validity
            Not Before: Mar 26 04:02:08 2026 GMT
            Not After : Mar 27 04:02:08 2026 GMT
        Subject: CN=eaf45e4c0345cb3a49f9e2d0c3d3010f005ce77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:22:ea:c8:ac:96:d7:f1:7e:36:3b:90:77:56:
                    3a:34:8a:9b:23:6f:0c:bd:ca:ec:bf:f8:e1:8d:cb:
                    51:83:ce:12:4a:51:c5:ee:ad:4f:db:d6:5a:9b:57:
                    0f:2a:09:74:a5:fd:47:5a:40:62:44:4f:fe:77:d9:
                    fe:cc:da:be:41:c8:4b:6a:35:e6:60:93:cf:e8:fa:
                    75:66:1c:d3:7a:29:3c:e3:79:44:36:62:79:f1:c1:
                    01:91:b7:c9:94:37:72:a8:76:b0:fe:47:73:7e:b3:
                    22:16:19:31:1b:6b:fd:8e:65:e9:8b:9e:f7:e3:9c:
                    d2:69:e1:99:bd:cd:c3:2f:e8:ac:f1:6d:e3:42:81:
                    f8:14:39:8a:a7:ef:fb:b3:52:aa:70:f0:e3:33:db:
                    7e:ca:b9:ca:79:63:6a:16:d0:3e:d8:54:7d:1e:a5:
                    39:0d:49:89:ba:f9:9c:f2:cc:da:10:df:49:4e:9a:
                    a2:41:3d:42:a1:73:4e:26:f5:ca:6b:1a:de:3e:ef:
                    f7:ba:b9:7c:5b:9d:7e:3c:79:d6:e3:cb:09:56:80:
                    f5:2f:6f:e8:e5:ea:e9:9a:dc:32:8f:9c:f3:82:5c:
                    51:07:d0:58:6b:ee:e8:52:5a:3e:5a:e4:c1:a1:d8:
                    66:87:de:b9:08:30:77:8c:c4:0a:c4:53:e7:25:f9:
                    82:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F4:5E:4C:03:45:CB:3A:49:F9:E2:D0:C3:D3:01:0F:00:5C:E7:7E
            X509v3 Authority Key Identifier:
                keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:4e:2b:2a:1a:c5:be:31:57:84:19:8d:c5:03:46:55:50:eb:
         ff:71:f7:6b:f4:64:27:91:7d:67:29:6b:66:d6:de:04:f6:2b:
         f9:5c:e2:02:4c:e1:71:40:b4:c8:96:cf:1d:9e:f0:3e:30:16:
         50:67:ee:02:fc:41:98:b2:0e:09:18:41:68:b4:99:6b:17:7e:
         14:a6:9c:4d:47:a4:c4:5b:87:0a:5b:b9:6a:99:03:48:c6:d9:
         3d:dc:8e:0c:c9:53:03:27:c4:57:c4:68:c2:41:ff:3e:41:45:
         c7:07:1a:e2:cd:3d:d1:57:f3:2c:a7:df:f3:8c:7f:ba:6d:6a:
         82:02:68:80:27:f2:a3:45:d9:17:4b:38:2a:96:91:f7:97:81:
         14:0d:e5:54:3e:9b:7f:d2:cf:ad:3a:22:f5:35:b7:9d:07:34:
         3d:ee:43:0f:94:56:0d:09:ec:41:28:a5:2f:39:20:da:0f:a6:
         7c:7c:12:a8:e4:11:e5:e5:02:6f:8b:f1:a3:86:dc:4b:8a:da:
         45:b4:87:b6:c2:fa:13:32:b1:97:4d:64:11:8a:03:dd:27:e6:
         53:c5:49:74:20:d3:4e:95:5d:76:ca:f1:e9:e3:db:82:71:4a:
         65:bd:4e:ce:92:06:56:6b:c4:c9:65:c9:5e:79:0c:6d:13:00:
         30:06:2e:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTocsT0SdupYXfkhAzDh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNjQyYjYwN2I5NGExNDNmZjQxYzU1NGM5MTNiZDVhNjUx
ZjhjMDUwHhcNMjYwMzI2MDQwMjA4WhcNMjYwMzI3MDQwMjA4WjAzMTEwLwYDVQQD
EyhlYWY0NWU0YzAzNDVjYjNhNDlmOWUyZDBjM2QzMDEwZjAwNWNlNzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SLqyKyW1/F+NjuQd1Y6NIqbI28M
vcrsv/jhjctRg84SSlHF7q1P29Zam1cPKgl0pf1HWkBiRE/+d9n+zNq+QchLajXm
YJPP6Pp1ZhzTeik843lENmJ58cEBkbfJlDdyqHaw/kdzfrMiFhkxG2v9jmXpi573
45zSaeGZvc3DL+is8W3jQoH4FDmKp+/7s1KqcPDjM9t+yrnKeWNqFtA+2FR9HqU5
DUmJuvmc8szaEN9JTpqiQT1CoXNOJvXKaxrePu/3url8W51+PHnW48sJVoD1L2/o
5erpmtwyj5zzglxRB9BYa+7oUlo+WuTBodhmh965CDB3jMQKxFPnJfmCHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOr0XkwDRcs6Sfni0MPTAQ8AXOd+MB8GA1UdIwQY
MBaAFABkK2B7lKFD/0HFVMkTvVplH4wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUt
MTliYzdiZGNjYmMxLzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUtMTliYzdiZGNjYmMx
LzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfU4rKhrF
vjFXhBmNxQNGVVDr/3H3a/RkJ5F9ZylrZtbeBPYr+VziAkzhcUC0yJbPHZ7wPjAW
UGfuAvxBmLIOCRhBaLSZaxd+FKacTUekxFuHClu5apkDSMbZPdyODMlTAyfEV8Ro
wkH/PkFFxwca4s090VfzLKff84x/um1qggJogCfyo0XZF0s4KpaR95eBFA3lVD6b
f9LPrToi9TW3nQc0Pe5DD5RWDQnsQSilLzkg2g+mfHwSqOQR5eUCb4vxo4bcS4ra
RbSHtsL6EzKxl01kEYoD3SfmU8VJdCDTTpVddsrx6ePbgnFKZb1OzpIGVmvEyWXJ
XnkMbRMAMAYupg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:13 2026 by rpki-client