Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File:                     myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier:          4hDnWE1+FyueBoiDAeIPRPU90k5d0YCNsM7kRVKHn/Y=
Subject key identifier:   AC:36:E0:E9:C9:EC:CB:FB:55:17:F8:78:6B:CD:21:ED:D2:F9:F7:94
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer:       /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial:       019F9512AE22890DCFBA90CBDECB7E143100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number:          19D1
Signing time:             Fri 24 Jul 2026 17:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:57 +0000
Files and hashes:         1: JkPCW3hZrgqzBOdEJnW7e2RP1G8.roa (hash: q2BHsD4zNAIXxXBTi/hz0TC1Y/B9jk8wfXpL9Wx05JU=)
                          2: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: AE0+eNctq8Zl0n1gVvRgVN+PJY/zGAzDfyUT7nlsT0M=)
                          3: q0hXo__MCYbBoR7iChz8rniPI6M.roa (hash: iTsszB/0K2SiC8hyLh2CRCMWHvU50TZNj9sPsIVxWo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:ae:22:89:0d:cf:ba:90:cb:de:cb:7e:14:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
        Validity
            Not Before: Jul 24 17:00:57 2026 GMT
            Not After : Jul 25 17:00:57 2026 GMT
        Subject: CN=ac36e0e9c9eccbfb5517f8786bcd21edd2f9f794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:2c:59:cb:ca:02:31:a9:8e:f7:52:8c:8a:
                    38:bb:f0:93:56:c8:6b:f2:2f:53:31:ac:25:d0:f9:
                    c3:f5:a8:15:0c:14:b3:bc:f1:92:a5:93:31:f3:70:
                    e3:a2:a5:f6:c7:7a:45:2d:aa:df:2f:f5:e6:cb:ac:
                    b2:e3:d7:5a:3d:87:2e:aa:36:57:70:f8:2d:82:f0:
                    d7:a5:53:91:1d:5c:e9:97:e5:60:b9:18:09:2d:95:
                    15:24:ee:4d:a0:21:7c:b9:61:d1:73:f8:e3:af:6a:
                    e4:97:76:cd:f5:c9:95:53:9e:04:47:8f:b9:0e:6e:
                    dd:a3:1e:d8:c9:1e:91:68:fb:2e:65:c8:08:47:6c:
                    2b:c5:09:2c:da:8c:4b:6e:ee:50:2e:1f:92:19:66:
                    7d:c2:f9:ae:65:f7:8c:e4:5a:1f:fc:b1:2a:8b:0e:
                    a7:b2:3e:d9:98:eb:1d:00:b0:02:de:1e:98:aa:52:
                    b1:40:04:68:bf:47:02:36:69:9a:7a:df:85:d2:45:
                    1b:9b:f4:38:8a:12:98:95:91:be:cf:7a:be:6b:ed:
                    cf:be:c1:94:33:65:b8:ef:ea:25:26:f6:c7:e5:95:
                    40:1c:5f:47:e9:66:2e:ef:83:5f:ab:71:f4:79:6f:
                    18:e6:c1:18:86:32:37:78:98:48:ce:85:ac:63:a1:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:36:E0:E9:C9:EC:CB:FB:55:17:F8:78:6B:CD:21:ED:D2:F9:F7:94
            X509v3 Authority Key Identifier:
                keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:88:2e:13:94:c5:f1:7d:ac:78:a2:30:08:58:12:b8:a1:76:
         6c:12:8b:24:bb:f7:af:95:2c:db:e6:21:bf:b0:4d:fe:62:cc:
         18:52:17:0c:d5:15:10:5b:f4:af:e8:83:0e:8c:e6:d8:40:a0:
         5a:1b:3b:4e:54:5e:70:aa:77:93:08:25:e2:e4:c7:87:8a:d3:
         8c:74:c2:29:67:5a:72:24:51:79:63:92:d7:bc:25:35:b2:7e:
         79:ae:14:06:35:79:37:89:6b:00:b9:5c:5e:cd:69:d9:9e:5b:
         3c:1a:b2:89:a0:5e:31:c0:92:9b:81:75:80:51:cc:d0:b9:8a:
         59:f9:61:12:e9:6d:65:b8:cb:ad:40:eb:1e:c3:eb:70:cc:9f:
         3e:d3:69:7a:ae:10:7b:f1:e8:1f:2c:fd:2e:02:67:68:70:79:
         5a:f6:ee:85:54:e2:fb:e0:8b:f0:42:f8:21:93:fa:ff:69:42:
         f7:db:92:1d:aa:bc:d2:d8:0b:20:87:98:d6:8e:d7:ac:05:4a:
         cb:99:28:d9:f6:2c:1e:e5:29:1e:81:41:1f:f3:91:61:e9:ea:
         31:89:df:72:7a:60:3f:2a:c6:63:3f:42:dc:ae:ab:1f:64:ee:
         18:6f:22:af:07:04:c6:70:4a:77:ea:b2:b0:f8:75:d7:56:4c:
         fb:97:68:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:29 2026 by rpki-client