Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
File:                     Ahs-o17f3ROMFVBtdKdgIt03aUs.mft (raw, json)
Hash identifier:          1pt+DYciI6ISKSeiJlbdXvrAlu858hqH6596o3xPLT0=
Subject key identifier:   66:35:34:C2:55:A3:E2:8C:57:EF:B5:43:6B:BA:D8:E1:40:AD:C5:B7
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Certificate issuer:       /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial:       019E1D90BE3D9747C82A6A80CFCDB9D9472A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
Manifest number:          190B
Signing time:             Tue 12 May 2026 19:01:25 +0000
Manifest this update:     Tue 12 May 2026 19:01:25 +0000
Manifest next update:     Wed 13 May 2026 19:01:25 +0000
Files and hashes:         1: Ahs-o17f3ROMFVBtdKdgIt03aUs.crl (hash: iFZB922JGSimSW1ffZwaG4wFdqhBA7frVX+zMxVGRr4=)
                          2: LBRMtk276o1fDtnMdAqhTW7DXC4.roa (hash: 0YIiI16RKFGdQ0JcFhz3zqT49nyQkj7P8gkQ5o32XYM=)
                          3: M8dYp-L4dw1v-tRfvEaBeetOZDM.asa (hash: BxKqO0ZY48OCWqUnkol0bWVuXrmCWGF4F2EIRoXKyLI=)
                          4: QmzS2ptv4L0wreFRKwR2b7sYT9o.roa (hash: V15c6ZmrAVOZnZkD5NcAPinTv/zGPeEWxtJ3s9KDwPs=)
                          5: Rj9rY8c-WTz58dRjWStkxywCLns.roa (hash: 2qqmCIzo+/ipPZRDGptoSNuyqwN9eUc4eLGE8JL6fME=)
                          6: T64D7DIdeVevp7C-fmZ9i_3HGBI.roa (hash: kO6AaVNTX79L37zwJju08wk0fWE2dJSQ0KHv71bE1XY=)
                          7: U8u1b5Pq3pRMcKbM8GicLTeR9Tk.roa (hash: R5sho8p6NKUCSWgu2hqUkQHKto75y0jfre83Hes2hwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:be:3d:97:47:c8:2a:6a:80:cf:cd:b9:d9:47:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
        Validity
            Not Before: May 12 19:01:25 2026 GMT
            Not After : May 13 19:01:25 2026 GMT
        Subject: CN=663534c255a3e28c57efb5436bbad8e140adc5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:da:52:b3:ef:a0:73:01:2d:7a:63:2d:7e:d9:
                    e1:54:66:6e:ef:3e:0f:c4:c3:3d:ed:e5:84:4f:1b:
                    ee:87:de:20:b0:94:d3:0e:59:42:c5:ca:9a:22:c2:
                    9c:c1:29:49:4a:21:63:98:b5:bc:4f:04:45:48:ad:
                    4d:83:f4:9b:15:e8:53:5e:2c:9e:22:7b:e1:a3:8f:
                    e2:ab:0f:0e:4b:fd:dc:67:62:9b:44:3f:49:9c:8a:
                    e4:4e:5c:31:ea:15:36:0f:80:29:43:b9:49:bc:d5:
                    63:24:d6:e1:d4:73:4c:b1:09:52:94:2f:30:d8:d4:
                    03:b9:6b:c0:72:ee:7a:e7:b6:ec:6b:f8:60:3a:21:
                    62:ec:4e:1c:13:b2:a8:71:4a:21:52:60:68:b0:fa:
                    01:15:69:45:79:8e:a1:66:12:b3:c4:d3:e5:7e:b3:
                    84:59:ec:fa:5c:c6:8e:ac:db:24:51:85:77:18:f9:
                    ee:a4:7b:f0:d9:f8:8a:ac:ee:70:4c:1c:e8:32:70:
                    95:0e:e6:88:3a:5b:4b:55:5b:1b:d2:93:ae:ea:3f:
                    75:30:06:cb:cc:aa:71:8b:10:20:fb:f1:84:1c:da:
                    4a:f8:1a:d8:60:13:44:18:89:33:ce:57:09:08:f5:
                    c9:9c:fd:18:be:9e:f1:a9:19:ca:e0:d0:dc:64:62:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:35:34:C2:55:A3:E2:8C:57:EF:B5:43:6B:BA:D8:E1:40:AD:C5:B7
            X509v3 Authority Key Identifier:
                keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:07:e4:e9:4e:32:d6:e5:11:64:fb:08:73:75:5b:de:9e:ed:
         6b:b2:d4:9d:e4:c4:8b:f4:25:70:cc:c8:ae:fd:87:0a:fd:07:
         aa:1a:bc:5e:96:fd:52:81:ab:8e:88:31:fd:fa:82:ad:1c:e9:
         b7:d1:56:fa:ce:ae:a4:8b:fb:7a:55:08:c6:2a:f3:bb:78:c7:
         16:9e:e6:06:13:39:f0:f6:df:0b:ca:57:ca:af:f6:cb:70:14:
         e1:08:ec:be:a9:13:77:7a:d6:6f:82:b5:f1:d6:16:f9:2e:99:
         bf:08:3a:6d:97:31:02:88:b9:f6:b9:f2:9c:34:3d:7f:34:88:
         04:4c:54:04:e6:b1:48:56:80:90:86:bb:5f:6b:e7:75:ac:12:
         8b:9c:89:f2:5b:2e:bc:f2:b9:0e:2c:a2:9b:8a:c5:f0:f2:b3:
         ec:d5:e6:a6:e4:c8:2f:fc:a2:9a:69:e8:12:3f:63:89:61:17:
         63:c3:2a:8c:1a:a3:6f:15:1e:6e:4c:02:2f:09:7d:ac:ab:f0:
         35:bf:63:0a:51:4a:a0:a8:ea:cc:98:ee:c5:f2:08:34:5c:29:
         59:fb:72:f3:00:cc:59:6f:df:72:02:ee:fd:20:4a:9d:64:3d:
         20:98:63:00:e6:82:bc:92:d9:f1:43:bd:4d:6f:ae:aa:2e:4a:
         af:a4:25:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:31 2026 by rpki-client