Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
File:                     BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json)
Hash identifier:          nagZ0SPYDygecEQqK9erc/m3agNMBdByl05NPj0RT6I=
Subject key identifier:   C5:D6:D8:8D:7A:43:2E:BB:70:FE:FD:F5:B8:23:E6:48:75:69:D9:60
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       0199FC58E151AFDCB1FA8996E2D39B47437E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
Manifest number:          1263
Signing time:             Sun 19 Oct 2025 12:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:47 +0000
Files and hashes:         1: 1-vMQpoPzRNRomoOOMlQ_RFieN5E.roa (hash: jxr1drUW5D4B447tGRDp4ctx0qJ8sRRfploxS6UI7zo=)
                          2: 4Ws8Sjvx72Hy6J5E-P_EI_q3Slo.roa (hash: uWN9nsMDOn0xfjEWkhhvUgtWX2KzO1qJYjAx6fiUPH0=)
                          3: B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa (hash: uEBgOj1wL/lZxabuAzXGGt9tXkgNmy0WBweEZQ8DMa4=)
                          4: BTm3OMQjY7f4flmyBZ1O5fiBDxs.roa (hash: biLT4JhrLwf2X8ChjWAfH7u0E229MvoO7NLFEuPFfwM=)
                          5: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: qlYj08lVu5Ti2JwPwmOwFULsY9w421si2ogdIWTW95I=)
                          6: IzY3hBc9dplU60ltzFYrtaLdQVM.roa (hash: oWyFSqLRdDQLHe1B9vzDpFM/h/LlBXpLreUihDrqVEg=)
                          7: Pk-166nBqp2AnHZRjt3naSPZm_A.roa (hash: vCXEEXcMS38HEhXquUN+5uxP1rLIYunBHbDrNhQYfIs=)
                          8: Ta09L9XTyU7qwRDoVLtdzvmVOdM.roa (hash: LyLVnh5hhz5tLCaKzpTX8JKP0/BQLeObjNAxjTizwos=)
                          9: VHDpAdR3NVqsO0e_r0e6tavcLhw.roa (hash: YhgbecYr8tRf7lmpu+uKj0OPPDbutngJmi5z3NyL5Eg=)
                          10: WS4czgGZ8PjJGAeOmwoAIy6RK1Q.roa (hash: qrOQUPwBiyJGJ4uM3XinNZaI/rMhS0aq12o4TrhwoD0=)
                          11: YlsSe-kZdyoSNv8frNMuJNKOEDg.roa (hash: KkWErRFQCKAaLuu8FmVfSF3bPQvyc+JXLf5z6FECaBo=)
                          12: ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa (hash: 8A0ZbBwJVxe/mI3qDF06TbRtLu8mKb/RfAg0IkfL6lA=)
                          13: bzqXpokQZM1aGs9ewZRks0hYHI4.roa (hash: hgSOUwN94Q7p6oexHTJXl0V0Ta0qXPc09UvqCMBYuIs=)
                          14: cm8GtcTHwoYStisNyga9gSVGLUU.roa (hash: v40FCmdUz2OM9eR6s3YOOpZt+uxDnzYy59kW+69A10A=)
                          15: cpQDuCQS_PmKGa6mRrggJump5IQ.roa (hash: pejGEaNqW754xgC8ojt2JY5OjOdgLVYVhBOgK3JEQ/g=)
                          16: fqkGaUKO8jQgV43kpQCPk_QvAKY.roa (hash: hX2eXDOdterl33d5BLDKltIZDyu7ggsh0S/egGBhPp0=)
                          17: gUZ0JLTnALDOscp3mLn_Kq5n0u0.roa (hash: X76o+89Mv6jj5TDmR/n2CIB5GvyoRSZWze0xxjQVUMI=)
                          18: gr7Hsot6ZTb-tQFkDS-R02k4wEY.roa (hash: 3DFfqHgyxVAmbOljghFjNoIvArcsBlSFgk7x4Ag96IY=)
                          19: hM4RUMXGkSsGKGeXFlPc5WdVja8.roa (hash: +27OhfsKET5J+JAUfDDgfUlvTDk8tRsjQoV0ueuKdsc=)
                          20: i61yJhWlIpiU3IaDDJOUzTLy3CI.roa (hash: 1EGI7WgAJYqPotcGFTR+YSEC2Cd3Jis75UUmneXHYjQ=)
                          21: iWm57G_OhEZoZtm420opEVVmjwk.roa (hash: tplvQrByHA3nV7i/oHw26AKWQE0TqsWHR752F20xeg8=)
                          22: wsFGJdFqxDSrc6ZPuYUM3OEPBt4.roa (hash: 5N2lY2rir++DNkU0rNQwk4o3De67eUBe63z0gVaBPpI=)
                          23: yX38jt3vI8i36FvJ3E_-UlmiSxQ.roa (hash: stQu9DFDxjZu1F/qyBAVnzlmn5IHuu+7EIChhkt6oKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:e1:51:af:dc:b1:fa:89:96:e2:d3:9b:47:43:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Oct 19 12:01:47 2025 GMT
            Not After : Oct 20 12:01:47 2025 GMT
        Subject: CN=c5d6d88d7a432ebb70fefdf5b823e6487569d960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:f1:a1:fb:e1:9e:50:ed:d5:98:78:1f:e4:
                    18:ba:94:dc:c6:39:34:fb:51:81:66:1b:cc:80:66:
                    6f:86:ed:04:6f:df:4d:3d:5a:64:29:52:47:4a:e8:
                    aa:c8:16:80:cf:b3:67:b4:b5:83:da:75:3d:7d:6c:
                    08:6b:de:3e:c0:b3:f9:71:63:17:1c:ed:77:15:1f:
                    8b:63:8c:f1:a1:37:8a:30:2c:de:be:24:6a:c0:ab:
                    ac:6d:03:76:48:d1:de:ec:46:7b:bd:4c:13:e8:3d:
                    ad:3d:9b:26:38:4a:2c:90:f1:b6:97:ec:d6:24:d1:
                    94:52:66:42:c6:39:9b:e2:d9:24:59:46:ec:27:80:
                    2a:42:6c:b3:4e:d5:ef:89:91:8f:cb:62:e7:97:c4:
                    5d:c9:a2:64:ca:5e:95:02:65:21:17:93:5d:fb:13:
                    71:f8:21:38:ee:17:eb:be:2b:e9:1b:14:55:ad:aa:
                    55:60:a5:35:7b:31:42:2e:ec:d6:19:51:20:7f:84:
                    4b:f8:cb:d6:2b:b1:59:75:5f:90:2d:51:df:f4:71:
                    be:3e:ee:90:00:e4:f1:da:3a:eb:73:17:46:fb:c9:
                    33:6a:1b:f1:4c:b2:e8:e3:c6:a8:66:cb:22:a7:dd:
                    e4:4f:17:29:19:b4:56:11:08:92:12:85:a8:e3:38:
                    f8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D6:D8:8D:7A:43:2E:BB:70:FE:FD:F5:B8:23:E6:48:75:69:D9:60
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ab:25:e7:c7:27:b9:6b:e2:b9:34:7e:dd:a0:eb:44:f8:21:
         47:67:aa:cf:a2:6b:6c:4a:a6:c8:be:25:0f:38:c8:86:4e:82:
         75:86:a0:df:48:39:d2:94:57:79:32:16:d2:39:3d:3f:46:82:
         0e:6c:b0:33:9e:1d:ce:fa:90:5c:af:ef:f5:64:b2:8d:e2:f3:
         9f:90:a0:70:27:f2:3c:a8:38:e7:aa:c8:ab:32:a3:55:40:0c:
         03:81:d3:24:76:93:47:c1:72:7e:e9:c4:e7:65:4e:12:28:1e:
         a0:57:70:22:b0:f0:65:f0:7c:8b:45:cc:70:aa:2e:78:de:30:
         99:92:ff:06:a7:ee:f4:cc:49:d5:13:57:b2:1c:1e:73:55:51:
         62:3b:19:67:ab:37:b5:e7:b9:33:69:00:61:0b:ea:64:cb:07:
         8f:c2:f6:70:90:2c:6f:5d:cf:25:df:15:7c:30:aa:1b:09:75:
         6f:31:2d:31:07:04:52:77:80:a1:6d:10:59:d2:b7:05:07:5c:
         85:81:a5:65:05:64:9a:57:21:48:33:e5:da:f1:dd:e5:31:e1:
         de:21:6f:8c:e1:8a:d2:9b:7e:94:06:d7:d6:fd:f2:c9:a8:d3:
         d5:ce:a1:6b:f7:74:51:f5:84:47:d0:45:b1:0d:13:0a:33:94:
         d5:57:13:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:22 2025 by rpki-client