Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File:                     Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier:          dtGiCSoz4r1efkoC9dUqV1yA+FP9F3RUcvHVBk8j2rw=
Subject key identifier:   A3:F6:D9:32:39:F8:17:72:F1:3D:3B:3C:BE:E4:74:BF:C9:4D:6F:1C
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer:       /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial:       019E1D909215425D215F8A4A2A939A08A9EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number:          190C
Signing time:             Tue 12 May 2026 19:01:14 +0000
Manifest this update:     Tue 12 May 2026 19:01:14 +0000
Manifest next update:     Wed 13 May 2026 19:01:14 +0000
Files and hashes:         1: F9LtIp7aRZvTu10CPCfjgsVeCH4.roa (hash: lyI0E0/eZw0Stmmyys17aMBQvOW4Meb+VaWbd7L0/zA=)
                          2: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: fWFheXzTZVYmrZuMweHB5+9rBSoVvDqjOvFY3tfbtf0=)
                          3: UPey1Iuc4KMtyO1x8bek9due93Y.roa (hash: KVMCzWDHAl6h2diMgEjiCZzLxzK2gigmEPW2UtR5si4=)
                          4: VWwoUGBYya7dT91k9xew3HleyiE.roa (hash: anOodm7+F8Ug5vPU/y7WyVSFPtcBXGPmpebjW6VOHsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:92:15:42:5d:21:5f:8a:4a:2a:93:9a:08:a9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
        Validity
            Not Before: May 12 19:01:14 2026 GMT
            Not After : May 13 19:01:14 2026 GMT
        Subject: CN=a3f6d93239f81772f13d3b3cbee474bfc94d6f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:02:e3:e6:47:a1:b9:91:b4:ca:5c:66:e5:
                    42:0d:d3:c2:4c:3b:29:c6:91:fe:f8:92:f0:ee:a8:
                    e1:8b:66:e7:c6:d5:b4:63:7f:c5:27:46:3d:ce:51:
                    e5:b4:02:7d:f8:dc:58:d8:cb:96:88:66:7f:e8:75:
                    0f:70:08:ca:f3:a3:f8:ff:a6:d8:c5:17:ae:f8:2e:
                    d6:fa:47:5f:62:fe:5e:fe:4f:8c:b9:67:cd:b2:53:
                    f7:bc:68:7b:15:17:69:a0:f6:fc:b3:b5:97:42:62:
                    67:b8:7f:39:96:0a:05:91:ad:1f:3a:27:b7:ff:88:
                    08:2e:a2:9d:76:eb:1c:40:ef:a8:c2:6a:ac:4d:9e:
                    02:c1:67:c5:90:ef:d0:0a:24:4f:b7:02:29:37:61:
                    bf:2b:b8:59:46:27:a8:72:be:cc:8d:16:a4:e6:48:
                    c8:12:38:6b:f5:42:3d:c8:d2:08:c7:97:92:40:be:
                    22:5c:25:45:c2:47:22:c8:08:51:95:84:b1:c3:d7:
                    9b:79:8e:1c:bd:3e:6d:52:33:b4:ea:f6:4a:b7:3f:
                    b9:89:99:ee:9c:03:37:fc:61:ee:66:5a:78:c1:6e:
                    31:34:c9:2b:77:c6:a9:a2:6a:96:28:7f:41:e2:a6:
                    78:d7:6b:d4:57:d0:3e:f5:00:e0:37:4d:77:cb:cf:
                    b0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F6:D9:32:39:F8:17:72:F1:3D:3B:3C:BE:E4:74:BF:C9:4D:6F:1C
            X509v3 Authority Key Identifier:
                keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b9:0e:1c:a1:ce:bb:6e:20:aa:bd:9e:2a:35:56:93:be:03:
         fb:56:0d:87:63:e5:59:cf:7b:76:4b:77:5d:70:42:e3:f3:92:
         c3:d1:99:fe:af:5e:a7:01:1a:ac:b0:6d:e5:98:df:fd:1c:a9:
         95:20:54:f6:23:ad:6e:41:52:b0:1e:1e:22:64:45:4b:03:c7:
         4e:90:2e:d9:a4:47:4c:96:20:b7:dd:27:c9:de:10:5a:3d:dd:
         e7:92:cc:0f:41:ed:1d:73:4a:c1:ef:5c:44:08:7a:e8:09:02:
         f5:d3:3a:1d:9b:6a:05:c9:50:e9:10:74:3b:f0:67:ae:6f:db:
         45:88:dd:2d:4c:8b:5b:e2:3a:23:3e:ed:2c:44:c2:76:21:9f:
         2e:4d:1a:f2:63:60:c6:9f:5b:f6:27:4e:6e:ce:b7:f5:fd:9f:
         3e:eb:e1:63:0d:c9:9c:cb:90:7d:af:66:ba:1a:35:09:b1:9e:
         9a:35:8c:11:a4:14:3e:b2:39:6c:e2:80:a7:dd:6b:6b:30:eb:
         6a:21:4b:d0:d4:91:e0:65:de:25:18:07:d6:7a:24:59:0f:39:
         f8:d3:fc:7d:68:ea:14:bc:0f:23:8d:3c:be:4d:2c:e5:d3:3a:
         85:3e:ee:a3:92:a1:a1:c8:a0:c3:29:8a:dc:c7:55:99:cf:61:
         82:c7:6b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:25 2026 by rpki-client