Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File:                     AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier:          VV1OZC6SdD+6CmbkaZ178hJ/0LDBRjHeGUUJ6NFnabg=
Subject key identifier:   17:20:63:E1:96:3E:9C:92:AA:20:03:73:02:83:61:4F:50:9F:1B:11
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer:       /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial:       0199FB45A2FF9669F5CC3760534573B8ACC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 07:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:08 +0000
Files and hashes:         1: 1-BqPUmwLhiY4Yhx0LfgUMnThGxA.roa (hash: K4n04vrpGIt/U+DsbhlaysS9N4rLWgryrsGr6i9waUc=)
                          2: 1nS0uX-20m5q3S5s2ax-hzltY7M.roa (hash: fPbs3orCk/9uH211HxlkX/O3dh9FAzUrv0hFLfs7bIc=)
                          3: 2MWwWUq-nPd7Gzhb6Z0417winfw.roa (hash: JU/lw4BXm/KV3NT2WmLhKrIC3zR0XBpPPnNeGokCO90=)
                          4: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: r8g6GMews9goOFnEoHGPjOowZdFDYRy4OPbVwjeSgjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:a2:ff:96:69:f5:cc:37:60:53:45:73:b8:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
        Validity
            Not Before: Oct 19 07:01:08 2025 GMT
            Not After : Oct 20 07:01:08 2025 GMT
        Subject: CN=172063e1963e9c92aa2003730283614f509f1b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:24:3d:37:3c:36:de:be:d2:cc:37:6b:09:
                    61:68:f0:ad:80:ee:47:e0:78:3d:bf:b6:b4:21:8e:
                    db:3b:f4:a8:fe:50:ba:a6:ce:a3:83:d1:a5:b4:94:
                    0d:13:81:d6:97:ea:1d:5f:63:9e:8f:89:9a:f4:c1:
                    92:75:49:66:11:c3:a5:2b:ac:f6:7f:15:b3:66:e9:
                    f8:ef:b0:01:4b:8d:79:7a:b8:9c:07:ce:47:63:80:
                    83:2a:05:15:85:c0:2c:8e:1f:b6:d9:e9:22:3d:8d:
                    a1:8b:ae:1a:3c:77:68:ec:f0:a5:40:76:d7:09:e7:
                    4f:64:83:17:70:86:2c:66:e9:9c:51:f8:09:90:22:
                    19:74:1b:48:f3:ce:13:01:78:e4:5e:c3:ec:20:d9:
                    bd:14:99:3c:4a:a5:ed:69:a7:24:2d:00:c6:8a:01:
                    4d:63:b1:fd:30:06:d9:88:83:b2:b0:c1:20:f2:aa:
                    7a:ca:a6:8b:6b:04:8a:69:87:1a:96:45:51:79:76:
                    46:3c:d4:13:47:85:cb:bc:b2:3f:7a:5f:f0:1c:ec:
                    e0:db:a1:44:6e:af:75:2c:5f:fc:6e:13:7c:e8:94:
                    54:01:6f:22:a6:ca:f3:1e:f3:f1:37:d0:9e:0b:73:
                    3a:71:0c:46:10:57:f7:b4:a4:91:e6:42:e4:6c:c6:
                    4e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:20:63:E1:96:3E:9C:92:AA:20:03:73:02:83:61:4F:50:9F:1B:11
            X509v3 Authority Key Identifier:
                keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:34:7f:f9:84:c2:af:f6:c6:28:bc:26:a5:d2:e5:6d:31:2a:
         6d:1c:d0:ab:23:fa:1b:88:ca:69:86:f8:c8:93:4f:a3:41:b1:
         c8:fd:a7:cf:3f:56:17:ec:4d:18:ee:24:7a:ca:b7:ed:be:3d:
         8d:94:7f:e5:83:ba:b4:2a:8e:82:de:44:fa:19:f9:86:a2:4c:
         c3:02:75:6e:b6:6e:4a:f6:c6:3f:19:64:27:00:40:19:9d:51:
         5c:22:43:1c:35:e1:91:31:73:f4:c0:c6:4f:fb:17:5c:2b:24:
         d7:fe:05:49:e3:cb:ee:f9:ee:8d:7f:2b:9f:92:2f:4c:26:8f:
         23:f5:e3:54:f2:ae:af:22:ad:fd:87:4c:27:b8:3a:59:0e:2a:
         ba:74:92:3e:03:32:1e:36:a9:b5:36:32:42:9c:1a:bf:7d:9f:
         c5:d3:85:a6:5d:9b:be:ba:77:a6:51:ee:eb:80:cb:65:9e:c8:
         8f:e3:33:b4:6c:e6:77:25:b3:6e:ee:bf:83:37:8f:a0:9d:cf:
         0e:e9:d1:c4:96:45:7a:db:89:2f:63:1a:b5:d4:f6:2f:13:38:
         b7:d6:3c:83:b5:2e:6e:8b:71:b2:a6:be:62:0d:74:19:1f:34:
         1e:1b:7e:63:65:b6:b9:75:0d:82:49:71:f8:40:38:fe:46:d2:
         43:89:bc:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RaL/lmn1zDdgU0VzuKzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNjQyYjYwN2I5NGExNDNmZjQxYzU1NGM5MTNiZDVhNjUx
ZjhjMDUwHhcNMjUxMDE5MDcwMTA4WhcNMjUxMDIwMDcwMTA4WjAzMTEwLwYDVQQD
EygxNzIwNjNlMTk2M2U5YzkyYWEyMDAzNzMwMjgzNjE0ZjUwOWYxYjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro4kPTc8Nt6+0sw3awlhaPCtgO5H
4Hg9v7a0IY7bO/So/lC6ps6jg9GltJQNE4HWl+odX2Oej4ma9MGSdUlmEcOlK6z2
fxWzZun477ABS415ericB85HY4CDKgUVhcAsjh+22ekiPY2hi64aPHdo7PClQHbX
CedPZIMXcIYsZumcUfgJkCIZdBtI884TAXjkXsPsINm9FJk8SqXtaackLQDGigFN
Y7H9MAbZiIOysMEg8qp6yqaLawSKaYcalkVReXZGPNQTR4XLvLI/el/wHOzg26FE
bq91LF/8bhN86JRUAW8ipsrzHvPxN9CeC3M6cQxGEFf3tKSR5kLkbMZOCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcgY+GWPpySqiADcwKDYU9QnxsRMB8GA1UdIwQY
MBaAFABkK2B7lKFD/0HFVMkTvVplH4wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUt
MTliYzdiZGNjYmMxLzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUtMTliYzdiZGNjYmMx
LzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzR/+YTC
r/bGKLwmpdLlbTEqbRzQqyP6G4jKaYb4yJNPo0GxyP2nzz9WF+xNGO4kesq37b49
jZR/5YO6tCqOgt5E+hn5hqJMwwJ1brZuSvbGPxlkJwBAGZ1RXCJDHDXhkTFz9MDG
T/sXXCsk1/4FSePL7vnujX8rn5IvTCaPI/XjVPKuryKt/YdMJ7g6WQ4qunSSPgMy
HjaptTYyQpwav32fxdOFpl2bvrp3plHu64DLZZ7Ij+MztGzmdyWzbu6/gzePoJ3P
DunRxJZFetuJL2MatdT2LxM4t9Y8g7Uubotxsqa+Yg10GR80Hht+Y2W2uXUNgklx
+EA4/kbSQ4m85A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:08 2025 by rpki-client