Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File:                     YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier:          HnKZqYht99N9JGDnnmwjlySXX0Xzrypq5TufySkYu28=
Subject key identifier:   AD:75:3B:D7:AA:B3:F1:1F:8D:FB:96:82:12:40:7D:FE:B1:59:29:B1
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer:       /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial:       019E1E6C7CE0A2F3215A7F6B9EA06A23729A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number:          190A
Signing time:             Tue 12 May 2026 23:01:26 +0000
Manifest this update:     Tue 12 May 2026 23:01:26 +0000
Manifest next update:     Wed 13 May 2026 23:01:26 +0000
Files and hashes:         1: OgWEvpt9l3fjUZPTGCjCIeBKF7g.roa (hash: ERaqLzlMb64hRM2SkbR4/skAX7oKEBTPX2o20Ce35C4=)
                          2: YNe4buptuJ7UBEwKBogeIyq80jg.roa (hash: NkTj5ifZYkof4P8g9p6OTOx3j64mOVFXyYQzcr25aXA=)
                          3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: NXQ3rDgR/IH6uO/K6DLWSeK7DjXbPTlubERkSlyOBwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:7c:e0:a2:f3:21:5a:7f:6b:9e:a0:6a:23:72:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
        Validity
            Not Before: May 12 23:01:26 2026 GMT
            Not After : May 13 23:01:26 2026 GMT
        Subject: CN=ad753bd7aab3f11f8dfb968212407dfeb15929b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:05:f3:e1:13:c6:36:a9:f3:24:23:53:4a:
                    82:4d:af:34:1b:84:96:20:c5:2a:87:6a:1e:27:c4:
                    aa:d0:fa:7e:f0:61:c8:72:d1:9f:ac:d9:d4:50:6d:
                    1f:df:27:67:f9:f8:5b:dd:d5:a8:58:f1:75:81:6c:
                    e7:a3:84:79:62:fe:99:5c:0c:9e:c5:5d:31:57:6a:
                    f4:a3:29:4c:7f:68:72:fd:4e:d3:2d:e4:a9:45:79:
                    6a:21:7c:3e:a3:24:cc:15:90:ac:46:2f:7d:67:a4:
                    5d:0b:3d:54:0f:f9:13:7f:7b:a1:69:25:36:f9:1f:
                    60:e4:eb:6d:22:89:6a:4a:5d:4d:2b:03:f8:8a:3e:
                    0a:96:3d:9e:ec:09:e0:02:ac:ad:a6:8b:68:61:02:
                    16:ec:68:90:e4:c0:17:42:0e:22:97:eb:ac:a8:fe:
                    3d:0a:9c:7c:50:d1:9b:de:0a:ed:00:9e:ee:59:7d:
                    4a:f5:34:94:c2:64:f2:5e:bd:2f:fe:8b:a8:50:09:
                    7c:69:3a:20:1c:13:25:61:63:e7:55:81:d0:0c:71:
                    2b:db:49:0a:3e:2e:da:fc:2d:fd:e3:a1:8f:ef:f8:
                    3d:99:be:3d:56:9b:50:19:0a:33:75:b9:7b:c9:a3:
                    49:79:67:46:8c:eb:e3:e0:34:12:c8:64:ce:7a:21:
                    1c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:75:3B:D7:AA:B3:F1:1F:8D:FB:96:82:12:40:7D:FE:B1:59:29:B1
            X509v3 Authority Key Identifier:
                keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:45:99:90:10:32:7c:f2:58:0c:69:c9:e8:f9:2f:28:48:c6:
         e7:8e:6e:e5:d3:5a:86:11:78:44:98:be:7e:e1:de:2c:ab:39:
         a1:0c:25:5e:dd:8a:94:14:99:16:17:86:bc:a0:73:78:8e:59:
         fd:df:d9:df:9f:a5:b5:2c:65:7e:ce:bd:76:8f:e5:62:0b:a2:
         44:1f:84:73:c0:34:92:ed:a9:04:c9:1d:5a:01:9b:14:7a:06:
         38:57:72:43:d6:f7:71:a8:4f:ef:1f:f4:a3:ef:77:ab:18:cc:
         78:cc:c7:2f:e5:50:a6:bf:6c:cd:b5:a7:c8:15:cc:2a:b6:28:
         d1:b6:1c:08:3b:ec:a4:26:09:a4:9b:07:b6:8c:55:d9:02:3e:
         aa:fb:3b:ce:87:7f:33:ca:06:1e:17:7c:04:85:f3:36:c2:d8:
         c0:11:7d:dd:22:af:19:c4:77:b0:96:79:52:e7:87:83:17:e5:
         d8:cf:f7:3d:4f:7c:50:e7:b6:5a:9f:d1:16:e5:ff:82:45:28:
         14:1c:4f:f6:e2:06:df:35:59:c3:a4:60:19:6b:38:e0:7a:dd:
         1a:cc:27:85:46:70:8c:e7:f9:15:39:05:06:7f:98:09:f7:28:
         e3:7c:0d:4d:a8:b9:f4:3d:67:a5:ef:42:26:36:36:40:d0:2c:
         1a:ac:29:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:56 2026 by rpki-client