Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File:                     myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier:          oGvAP/D+S55KhArCSJlDs+ka3fmq2LmAWpWRWci+7y0=
Subject key identifier:   73:4F:70:49:D7:9F:48:0B:28:5A:2F:DD:57:B3:20:08:13:79:FF:AF
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer:       /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial:       019E1E6C6E2DDA58C167EB86AD89C8A9F015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number:          190E
Signing time:             Tue 12 May 2026 23:01:22 +0000
Manifest this update:     Tue 12 May 2026 23:01:22 +0000
Manifest next update:     Wed 13 May 2026 23:01:22 +0000
Files and hashes:         1: OEhJas96pDHXZgaMA_s5Lgp04cY.roa (hash: jxsNaFig0GGgXoj7CMTehSb9YCJBvykYHf4DMMEwiVs=)
                          2: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: c5l5nDagJ33r67iTZ3gsnUX173QvvleBVRMCqKOqp/o=)
                          3: q0hXo__MCYbBoR7iChz8rniPI6M.roa (hash: iTsszB/0K2SiC8hyLh2CRCMWHvU50TZNj9sPsIVxWo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:6e:2d:da:58:c1:67:eb:86:ad:89:c8:a9:f0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
        Validity
            Not Before: May 12 23:01:22 2026 GMT
            Not After : May 13 23:01:22 2026 GMT
        Subject: CN=734f7049d79f480b285a2fdd57b320081379ffaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:64:c9:4e:e1:42:71:9f:09:e3:f0:32:e8:
                    ae:90:16:d5:1f:83:3a:1d:46:d8:b5:f4:8e:15:b3:
                    db:79:c2:1c:c4:30:8c:18:b9:65:e1:cb:eb:18:1c:
                    f2:41:41:4e:6b:47:47:17:4e:d2:b5:bc:7c:d3:4b:
                    65:af:83:44:27:d4:a7:35:69:a8:88:f7:c3:7a:af:
                    d5:77:ba:14:e8:91:82:f8:1c:01:a2:a4:45:72:20:
                    5e:d6:78:1b:50:0b:0f:58:86:11:ec:d3:cf:ee:53:
                    e0:68:bd:77:b1:99:7c:e5:4d:bc:dc:6c:02:77:2f:
                    94:ef:f4:d8:ee:2b:85:d8:38:96:97:73:c1:e3:53:
                    98:92:db:29:4b:40:27:b8:37:08:cc:27:4c:1b:e4:
                    37:c2:dd:83:a7:27:f2:2d:04:dd:e1:84:86:36:12:
                    37:30:45:4d:81:16:27:5f:ac:4c:4d:55:91:0a:be:
                    1a:a4:0a:80:50:65:ef:bc:27:52:76:95:10:9f:77:
                    b6:ba:d3:2d:cf:51:36:f7:33:83:b1:e0:b2:dd:08:
                    60:46:b4:a2:1f:de:64:a0:a8:8f:9d:5d:7f:fd:9e:
                    de:2d:32:15:36:b2:bd:f3:d3:1d:1e:f1:e6:55:88:
                    c1:c7:d6:bb:8e:ee:cb:34:77:d5:0c:99:07:6d:6b:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4F:70:49:D7:9F:48:0B:28:5A:2F:DD:57:B3:20:08:13:79:FF:AF
            X509v3 Authority Key Identifier:
                keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:44:2f:3b:ba:dc:e4:fe:49:d9:71:c2:63:f1:39:a3:1d:b0:
         09:b5:56:af:fc:c2:6e:d9:34:e7:36:95:e3:f5:29:4e:19:30:
         83:34:e0:6d:b7:32:9c:6c:00:0d:e2:77:b7:86:9d:d2:2e:34:
         4a:ef:4e:12:43:60:cc:b3:ef:3e:16:92:d4:a1:53:cf:d2:af:
         a9:a2:ff:ad:6c:4b:4a:bf:03:ab:e9:02:4a:3d:c0:da:6b:59:
         7f:61:c8:9d:58:82:78:99:f2:e3:b5:0d:6b:89:8d:42:c4:b1:
         ff:09:9d:64:dd:5a:0b:49:8e:d3:2c:79:9d:38:f6:55:9d:e2:
         12:63:4f:62:fe:29:5a:ca:fe:e8:e1:60:d3:53:58:16:f5:6d:
         db:2c:32:53:1e:b6:61:f8:dc:da:20:46:0e:a3:cc:73:f8:86:
         a4:bf:47:43:f0:1e:a7:87:39:ee:d9:5c:47:92:35:c1:85:aa:
         e4:87:8e:90:4a:4f:22:74:4f:37:17:46:14:e2:f5:74:cc:ba:
         c5:1e:e6:b4:d2:f1:db:38:d1:fc:e0:66:07:e0:d1:ba:9e:1a:
         01:9b:7a:dd:ce:e8:db:93:78:2b:59:a1:0c:1f:30:31:77:24:
         28:d0:56:7f:76:2d:93:64:04:c7:aa:de:96:79:f4:90:29:43:
         d7:5e:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:26:32 2026 by rpki-client