Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File:                     AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier:          sCG5a7tS3MIQuW7LtQKsBLc8IZKQABkbCfDFDQ0TAcY=
Subject key identifier:   00:A6:B3:86:67:86:02:40:CA:36:0D:9A:5F:F2:B4:14:2E:64:52:BA
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer:       /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial:       01A0CDB578BFCF44CC27B12D73B9B7C1DCF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number:          14DA
Signing time:             Wed 23 Sep 2026 10:00:17 +0000
Manifest this update:     Wed 23 Sep 2026 10:00:17 +0000
Manifest next update:     Thu 24 Sep 2026 10:00:17 +0000
Files and hashes:         1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: 7jOqjlAQ1bH7jgcFRQVHHP+xVQ5v9lAZWAS4k1MsJ6w=)
                          2: ePG6DY0S1g_n3-izjvFmaMzFYtA.roa (hash: 4EtCOL5WPsRvbWzQ4J4E2mOMMK8/QB99r0YCzdv5MzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:b5:78:bf:cf:44:cc:27:b1:2d:73:b9:b7:c1:dc:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
        Validity
            Not Before: Sep 23 10:00:17 2026 GMT
            Not After : Sep 24 10:00:17 2026 GMT
        Subject: CN=00a6b38667860240ca360d9a5ff2b4142e6452ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b7:11:be:0c:dc:e6:ba:e2:1a:f3:1d:75:c5:
                    0f:e3:fe:a2:5a:f4:13:ec:9f:c0:7c:dc:06:a3:31:
                    b4:eb:0d:4f:4d:15:c0:21:6d:6a:a9:b8:11:bd:0d:
                    74:fb:e7:c3:4e:f5:38:97:16:e1:5b:99:15:ea:51:
                    a8:4d:c2:97:9f:4a:e1:e5:9d:7a:ae:22:b2:d1:4a:
                    a9:df:20:08:84:f3:6c:31:05:ae:0f:47:a0:24:54:
                    89:df:72:9d:53:c9:35:2c:18:93:3a:10:0b:9d:ae:
                    30:f9:76:47:1f:76:eb:7b:ca:5e:74:43:dc:4d:da:
                    fe:15:74:c1:3d:83:33:32:bc:34:55:72:4f:a2:79:
                    38:6b:65:3a:8a:45:c6:48:0d:9f:31:4a:5f:51:48:
                    33:a1:c7:dd:d8:b7:bd:22:fa:6a:6c:cd:22:5b:f0:
                    d7:fb:a9:64:75:ba:c4:01:bf:ca:3d:7c:09:a7:31:
                    bb:61:b6:94:9a:58:11:d0:19:72:4a:68:53:80:07:
                    5f:db:5f:7b:fd:e5:be:d6:d2:8a:ec:63:c9:c1:2c:
                    59:17:01:d7:bd:2d:76:e2:c3:d6:a5:4a:4a:42:3f:
                    17:cb:73:5e:d0:e7:ac:8e:7e:15:5e:b3:58:b4:9f:
                    a2:8f:e3:a9:7c:9c:d2:aa:26:2a:5a:53:9e:3a:2c:
                    78:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A6:B3:86:67:86:02:40:CA:36:0D:9A:5F:F2:B4:14:2E:64:52:BA
            X509v3 Authority Key Identifier:
                keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:3f:03:fd:16:7a:07:8d:03:e5:44:16:a6:af:4f:1d:59:6c:
         8b:3f:c0:24:cb:72:8a:cf:eb:a2:b5:85:db:f6:ef:4d:19:4d:
         7e:57:63:4d:a0:fd:8f:fd:60:8b:a8:cb:02:7a:63:82:e7:f6:
         ca:50:b2:cd:0d:ef:22:c0:5d:b5:86:e9:0c:f0:0a:7e:8b:e6:
         e1:b3:ac:32:ce:52:0a:5a:87:b3:41:18:07:8b:11:ea:5e:a4:
         10:37:54:4a:b8:59:8d:6b:38:a6:e4:52:44:fd:6d:e8:d4:22:
         e4:c7:ec:ae:7d:57:d7:00:3b:d8:e9:4b:28:4b:dc:e2:08:bc:
         cf:2d:49:5d:23:6b:0f:b6:4c:df:a9:e2:9f:17:b2:ce:c2:9a:
         f5:8c:39:a3:30:e7:56:f9:91:13:0c:30:35:23:51:0a:5f:a5:
         41:af:2f:e6:7a:1f:3a:ae:da:25:47:22:8e:db:a1:9e:3d:11:
         8a:62:33:21:b6:84:7b:ec:b8:25:a5:f4:4b:bc:ff:6e:e7:7a:
         72:c1:44:eb:fb:df:ed:3e:d1:54:66:85:f9:cb:a6:30:99:8a:
         52:f5:1a:ca:b1:03:84:b6:87:74:ce:5d:c0:7a:2a:76:51:d2:
         9e:bd:b6:74:98:36:b0:78:6d:62:f9:33:15:08:45:e0:6e:ef:
         77:ba:e1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:28:14 2026 by rpki-client