Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
File:                     BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json)
Hash identifier:          kMATLhxpm0Odi48M/+np8lDr3qjnl9gAmThao7BInNI=
Subject key identifier:   2F:A4:CE:60:CC:C6:22:82:18:2E:F9:F7:D8:10:0C:2D:54:EB:59:A1
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       019D270491C046AC7BA1265A8E3E384E48E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
Manifest number:          142B
Signing time:             Wed 25 Mar 2026 22:01:43 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:43 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:43 +0000
Files and hashes:         1: 9OXwbbo9zr_3BQj52xJjo87B1H0.roa (hash: nd0RN9d/PlTgDX+aJhBlBpTwb0az6QSS6Oggok8UdKw=)
                          2: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: Le/KOvXmcihJ30z8Tc8ysHEL10GWyzrdCB5Gu/Rxs48=)
                          3: IV_vu7OX7GeGa8lSfJg8_q8xCvo.roa (hash: EqnLgWYSsbEEljSlnCDlnIwQvLw5hISyxs/7YKEWdm4=)
                          4: Klar462pF_C7Uti8GK6IYP2krDE.roa (hash: 3WyNeae+niIgGbLc2lmu97xevrRHuow2kNsFvJfq+R8=)
                          5: LhUoyafw0eBO0Ih4BQB3S8BEgpc.roa (hash: +v0l6P5r3gLGYQgL2479m1StjC9ighRFwkqys6s0Hnw=)
                          6: P2LjaDtYMpe_CWSncsWRaVlnCFw.roa (hash: rv+G8zQN4NdUsb52K+K9v2QbvUnYOnNmTAPUjYU2K6M=)
                          7: QQg-EV4YSeTtW88liCvZE3JZJN4.roa (hash: BlNIOZivnagMRQWrTBwPXmJaq1VIGQ1ABsuvUyI4XEE=)
                          8: QomjpQx9_CU1bmLVLsZtPoZDq78.roa (hash: HNmZtCav5oDUjr+7p6DMbvp4B1wr1fA/JAYD/NDabk4=)
                          9: SOgaP1DH2swEptFsywDuWJ897xw.roa (hash: LYHLoXM2uerJ8kW5uG4y1NPyevrNKVqu8gNCKOXwcIo=)
                          10: T7oxV4Rmv2aGG5h-sq_bbfp7cXk.roa (hash: 56UkEBVR91odUYAEuW3iMxqImg8YTpwGiDV/Dlr2y/A=)
                          11: T86y2lb6VM9SYijib5Gx6TXU_P8.roa (hash: ExJprcrpe0RGYOZUNA24jfKZT7aUwu9YCrRRkzYlGpo=)
                          12: TEFZXyi-TdJJ-8c3Jqvj55TRRvo.roa (hash: Cxi33yaEo3wewSE6aiUk4NlD+VA3nEwo0JszGNifnSk=)
                          13: TSAciExIDDLBEcTIBLpyxR8oUe8.roa (hash: xuR6T02zCPYtUbw7NwiqXuHRlL2/+geA0rMQimehzsE=)
                          14: TsfF6totEPD5J_SD01aG26CeNlU.roa (hash: pacbzaruVfidutobZhr9cP689NUwwKv7FUw+m6XxsRo=)
                          15: W5olfq9Y7_Lj6KMnAWRUMCZAxjo.roa (hash: qmwFKXQc7nyx5IpOYqlWD91kE3wC9gbI51Kb8YcehEw=)
                          16: YKYYd-HmDONZzhNy7AZPruAczLQ.roa (hash: vW22etpUmfQZNAgNwW3NzuTrwiYhU9D/ujqkIZK/8ZM=)
                          17: YrCSoDY2gBELylrBp80qKY1mLFw.roa (hash: n1TS2t+Errsfcdk3+b0U++Qmqd3Sf71dOOXviQAbSkY=)
                          18: ZdmHkUJ9PRKhmoc8jv7LUUj_Wd4.roa (hash: F/KMJPmsP3cXeV6hR2o7i96s5m6Ldck+0oyUPjMxPwI=)
                          19: _oMS8vQNhi6R4XyJHn3Kgm85oW8.roa (hash: G/zJxy7ZK39KBuYYRk7Yf3yrVTAyUCZvIxiOw4FGcYk=)
                          20: dR1FwcJNtOENeWduGS1W4IRoKdw.roa (hash: +9CjJthEGbnvthzXzxC8O9FIZmQ7n15CGApTOCLI5Nc=)
                          21: fKtoyxRVW8bUMI_rB5p-nLcW5mU.roa (hash: ps8RU8VkZlyeWoj9Je22w0i7MXOLJvXdQve7pnVShE0=)
                          22: gcfkhZxQJRY2JxV0AthvNcj_rjc.roa (hash: h29/Nmh5obPjMzkhKe9RGF8ktB4gZsgSrw2M8VnSAWY=)
                          23: o82wJADBHFkJX5vOdfLDcdz7SfI.roa (hash: u+qyev6ZaFOmLJt2UGgP85ay/0TbQc+SxI2fnx4Zyc4=)
                          24: qO2ZYDlru8D0qKA_PlIfPHuJ87Y.roa (hash: yAQHrlDWiEN3OIpMgVB3JbW0VXL3siiz0W9Zs2LsAnQ=)
                          25: qpMUFqbg_01nqmll8WKGqUhaRKU.roa (hash: shJV+eC5RH0MlPfYyy61cbtv+g4CqZaYC7XyO4CDx6U=)
                          26: rTo0UEeW4WSn2MjXsG-3uABsPfY.roa (hash: Imb7IO3Q8rHzQrWinxJegVt8mzKf4/246lxnQ0sa3no=)
                          27: rpVLr8z0Q-daVQyM2phBebLHi-c.roa (hash: t15MMtXGB4+ZqruHYd6ECdAxV9EJz5rFd075EMYE3Bg=)
                          28: sZn_8RaubZPigyXGXO2IjK2MOTM.roa (hash: bEBPF8tv/kM4E97KTe1cHoW9Ts80r9Q2pr3xoQ63Ogc=)
                          29: xM-FcmqLH2Fk4MxXGNAUdHPs5WA.roa (hash: zAQ/rpcpYL8nwkL4BP7Yry3eVEA7iIIHw5MMjWEuGzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:91:c0:46:ac:7b:a1:26:5a:8e:3e:38:4e:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Mar 25 22:01:43 2026 GMT
            Not After : Mar 26 22:01:43 2026 GMT
        Subject: CN=2fa4ce60ccc62282182ef9f7d8100c2d54eb59a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:19:a7:9f:92:50:3e:77:89:f6:2c:4d:8e:
                    1a:b7:82:a2:4b:53:19:f1:a5:97:94:9d:45:16:63:
                    4f:b8:5c:67:0c:24:dc:da:e4:94:a2:82:e6:16:48:
                    32:4e:33:56:06:a1:86:62:6b:33:6d:17:42:6a:68:
                    e8:00:cc:19:32:46:0e:d2:00:fd:a8:78:69:c5:34:
                    ad:79:f4:dd:88:c9:2c:2b:d1:ea:1c:72:b2:d1:82:
                    c9:d1:6d:35:e3:92:a9:1e:d6:21:3b:80:37:d6:75:
                    10:a2:21:21:b8:4b:a2:42:cf:35:65:c5:d7:a0:65:
                    41:c6:85:51:3f:b4:a9:46:77:f8:49:0f:64:c9:a8:
                    56:b4:b8:0e:12:4f:96:21:11:1f:da:ae:6c:b3:b3:
                    c7:dd:ca:e1:c9:9a:d8:5d:84:d3:4a:60:36:54:a7:
                    35:e9:25:f5:2e:ed:4b:02:cf:7b:4f:4f:7b:09:44:
                    9c:f6:8f:5f:8d:ad:c9:f1:0e:6c:28:39:03:f5:ea:
                    ff:84:87:4f:3e:c5:fd:94:65:4c:e5:b2:07:d1:64:
                    c9:0c:33:f5:51:70:05:37:07:4f:bf:ed:37:58:ed:
                    2a:1c:7a:d8:65:a0:60:a8:7f:60:62:35:64:64:34:
                    de:55:4c:14:83:1e:2f:9b:80:5a:a9:b8:6f:46:2c:
                    88:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A4:CE:60:CC:C6:22:82:18:2E:F9:F7:D8:10:0C:2D:54:EB:59:A1
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bc:1f:e0:f8:1b:8a:c8:e2:6a:68:4d:6d:62:84:35:b1:29:
         31:93:35:24:01:f7:06:c6:73:08:c0:e1:c6:9e:79:63:4e:57:
         4a:05:57:82:d7:a1:81:98:ab:a6:32:be:34:3c:e1:b7:81:94:
         a1:8c:e7:f2:6c:39:17:7f:31:78:6c:dc:7c:aa:53:66:ae:38:
         15:e6:84:9d:d1:23:b9:60:74:a2:d1:a2:d7:95:b7:86:64:f3:
         d2:af:84:45:0f:8a:7b:25:19:9b:95:a1:77:6f:f0:96:4d:a7:
         9a:e1:c7:1a:bd:c2:b8:08:aa:48:ab:4c:21:eb:d4:70:6d:71:
         3f:de:fb:f3:58:bd:8b:0c:40:e7:e9:25:f1:db:fe:a3:2f:2f:
         b6:6a:e7:b0:71:3b:90:4b:52:45:17:fb:19:60:d7:47:a8:24:
         38:5d:a6:3a:16:73:f8:40:3f:24:76:2a:b7:63:f8:25:73:a5:
         9e:4c:23:e6:86:04:2b:20:87:d3:6c:c4:11:fc:79:81:78:f5:
         e8:a6:1a:15:61:d2:b7:2e:b7:63:8c:d9:1a:a5:82:14:66:49:
         d9:23:df:d6:e9:30:38:2a:c4:e3:e1:17:0e:15:3f:f9:8c:50:
         01:0d:46:d9:b0:b7:42:c4:eb:5a:ba:cc:3c:b1:f8:6f:6c:32:
         87:d3:b8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:54 2026 by rpki-client