Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File:                     AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier:          G62NZZPp5Gb3iFrcfOXmXvyDtvDo9U7X3DJEJepizwg=
Subject key identifier:   09:35:27:F7:43:6A:1F:06:E7:EE:88:2A:51:39:F6:5F:97:78:14:38
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer:       /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial:       01A1DD5E475117324ABE00EA95C930E3AA4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number:          1AFC
Signing time:             Sun 15 Nov 2026 04:01:45 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:45 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:45 +0000
Files and hashes:         1: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (hash: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4=)
                          2: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: 8+z60N1vx5Pc586h2UWo7IEp4djIT7Nw0iggJgbpmwk=)
                          3: KqW4k975xNj0cUtZycmmIX1XgM4.roa (hash: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k=)
                          4: NurrzfLeVosuCbdskOR80jmR2QQ.roa (hash: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 04:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5e:47:51:17:32:4a:be:00:ea:95:c9:30:e3:aa:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
        Validity
            Not Before: Nov 15 04:01:45 2026 GMT
            Not After : Nov 16 04:01:45 2026 GMT
        Subject: CN=093527f7436a1f06e7ee882a5139f65f97781438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:55:93:5e:7f:51:b7:d0:c8:6f:4b:26:7e:b5:
                    52:8c:28:ba:52:e2:ab:ed:4a:04:cc:9e:7d:d6:28:
                    71:f1:69:98:a3:90:e1:d5:ce:6e:53:db:59:2f:04:
                    59:d7:8e:e6:b4:a9:14:11:9f:b4:f6:f2:74:1c:3c:
                    40:78:99:82:78:27:c7:e6:3a:bf:a0:60:ad:2e:19:
                    ad:86:d7:c2:31:a0:dc:e5:92:a0:8b:ad:0a:78:7b:
                    6e:7c:62:d5:23:7b:b0:f1:83:63:83:d2:f9:d3:92:
                    ce:8f:c1:06:07:51:72:69:35:f2:a6:f4:19:09:25:
                    a3:72:3d:60:ec:e7:28:ae:c2:0f:04:0f:08:33:1c:
                    84:03:a5:d2:bf:bd:b5:28:26:9f:a6:20:3e:2e:f0:
                    54:ff:7d:2e:e0:cf:e0:38:6b:1c:61:9c:d6:e7:45:
                    b0:af:04:a5:fb:2f:e6:28:41:d5:1b:32:86:73:1b:
                    15:c3:e3:4b:74:61:23:fa:21:e8:a6:cd:f3:ca:7c:
                    d6:5d:1a:8c:40:b1:d1:29:eb:dd:a6:9b:6c:98:47:
                    8d:53:da:b3:c6:67:63:a0:6d:1e:ab:c9:aa:af:2c:
                    1e:85:f6:e9:c3:fc:c0:f4:ce:2e:96:22:46:b9:d4:
                    4f:5f:fc:1f:3d:09:12:0a:68:2a:2e:ca:93:b7:9a:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:35:27:F7:43:6A:1F:06:E7:EE:88:2A:51:39:F6:5F:97:78:14:38
            X509v3 Authority Key Identifier:
                keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c1:9c:34:3f:c9:6d:4f:4f:d0:f7:cf:1f:3a:56:c2:4a:dc:
         04:0d:34:8d:85:14:af:9e:7a:63:b2:98:d1:5c:0c:53:46:40:
         77:79:dc:07:c1:f4:01:15:8f:39:09:49:64:97:f1:29:48:6b:
         8d:c0:f0:39:92:11:98:e7:e0:38:a3:54:88:f5:ca:90:84:af:
         2b:fe:50:0f:e6:25:37:44:38:6c:b8:23:de:fb:9b:dd:19:bd:
         92:0e:df:50:86:9d:84:63:d1:f0:fd:63:67:10:49:d7:af:7c:
         b3:b2:b9:c0:19:e2:fd:80:75:83:6f:93:ba:13:4a:ee:c3:4d:
         c6:cf:86:9f:43:c6:4c:c5:0a:cd:b1:dd:d2:55:cc:3c:21:fa:
         df:82:25:60:ae:98:e1:28:6d:f4:45:cb:4a:1d:24:f8:9b:fd:
         33:d9:6c:ed:d7:0b:0b:2a:c8:61:9d:63:f1:6a:7a:7a:3b:dd:
         3a:ff:a5:8a:b5:04:f3:42:0f:bf:1d:37:89:1d:3a:90:91:d0:
         7d:b2:b4:2b:09:46:49:f4:bd:20:e9:3a:7d:f1:0a:b8:7c:0f:
         b3:20:02:51:94:fa:cc:54:c4:2d:5a:41:56:cc:fd:89:a2:37:
         01:f4:e3:e9:49:84:24:e6:98:c3:f5:43:72:db:81:49:99:61:
         4e:c1:68:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:16:12 2026 by rpki-client