Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File:                     NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier:          jbkjQCdPMo9GLtySu4LvWZ+62i1rs0D4MRfCp3ThWuk=
Subject key identifier:   12:2D:9E:62:2F:48:3B:09:91:32:19:23:4D:CC:5D:A9:C7:35:AB:9B
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer:       /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial:       019E1C467B5961F418F923BF9511BA4B6764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number:          190A
Signing time:             Tue 12 May 2026 13:00:41 +0000
Manifest this update:     Tue 12 May 2026 13:00:41 +0000
Manifest next update:     Wed 13 May 2026 13:00:41 +0000
Files and hashes:         1: 0pBVrnwaMrvHC0mWbltAonQIV6s.roa (hash: nBJhwfttH5k4hcqYR4xXAgBBGUVFInHTXZxBXLHIH+8=)
                          2: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: /yiS9DW0LjFwNXESOOy6yVMkqKhypU7TN8z/cbk/rqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:7b:59:61:f4:18:f9:23:bf:95:11:ba:4b:67:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
        Validity
            Not Before: May 12 13:00:41 2026 GMT
            Not After : May 13 13:00:41 2026 GMT
        Subject: CN=122d9e622f483b09913219234dcc5da9c735ab9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:23:e9:33:4d:77:04:bf:11:3f:d6:57:99:07:
                    0d:37:bf:a9:e9:04:44:f6:a3:5c:15:fd:32:47:13:
                    0f:d5:52:ff:69:70:bf:dc:a0:ac:5e:99:bb:1a:5c:
                    35:45:b8:d4:53:21:7a:be:4d:4a:b9:2d:f0:a1:cc:
                    be:64:88:bb:74:02:4d:d0:a3:88:a2:a2:6a:fc:89:
                    db:6a:2f:40:74:72:c2:5d:ab:f2:74:25:21:44:3a:
                    6e:08:b4:3d:de:3f:37:2e:1f:89:1f:55:0f:26:9a:
                    3b:b1:a8:e5:2d:f5:1d:d5:43:ca:24:81:d9:0f:a0:
                    ec:17:b9:14:01:c7:6e:bc:73:f5:db:8c:8f:a9:dc:
                    f9:5f:b3:e3:15:0d:32:ce:b9:0a:64:44:cf:8d:4f:
                    93:e7:28:b3:e9:f3:80:7a:45:ef:7b:eb:9a:34:ff:
                    22:65:bc:fc:dc:02:ac:d8:52:e4:fa:de:a7:59:8a:
                    25:b6:c8:f3:f3:74:05:51:60:e5:66:76:da:eb:4a:
                    a7:f7:0e:71:2b:6b:50:52:76:4b:31:6e:53:60:df:
                    0e:0a:27:b4:be:49:aa:dd:1f:c5:25:38:2a:76:19:
                    12:93:57:b2:e4:cf:46:a1:d4:5b:af:b4:a1:59:00:
                    62:a6:e9:fb:1f:c2:d2:42:35:69:6b:3e:68:eb:dc:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2D:9E:62:2F:48:3B:09:91:32:19:23:4D:CC:5D:A9:C7:35:AB:9B
            X509v3 Authority Key Identifier:
                keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c1:d5:a4:ce:b8:4c:1a:5e:83:44:6c:69:5b:47:f1:e1:6a:
         2a:b4:e8:99:d6:30:ae:f8:35:70:e2:8a:a9:52:91:36:d7:5f:
         d7:04:97:ba:e6:44:d4:35:87:f3:eb:b8:c4:3d:96:93:0b:66:
         4e:a8:87:78:a6:ad:a0:5c:12:cf:95:32:5f:40:d1:48:15:04:
         3a:dd:c7:0d:0a:cd:ec:1c:cd:39:c7:75:01:d0:05:5e:06:77:
         2b:48:ff:71:e7:c7:95:f7:56:d3:2f:82:50:0c:38:cf:04:97:
         c5:ef:70:c1:dc:b6:ef:d6:18:9d:16:30:aa:6b:b4:e8:3b:1d:
         bf:50:06:b0:c5:eb:f8:76:2a:ac:bf:ee:5e:6f:80:52:ca:bf:
         48:c2:63:a2:b8:6a:15:69:f0:22:a3:ef:b5:a3:df:9d:6c:57:
         b7:a4:33:95:2d:41:a5:0d:43:04:77:7f:92:1a:c7:85:1c:63:
         e1:c0:ef:1e:a6:49:07:bf:76:c6:bc:44:8f:a1:17:2c:2c:62:
         fb:c4:71:0a:99:b6:0c:7d:ed:f2:38:62:15:82:18:63:e2:63:
         ad:20:25:73:b2:95:2f:a6:bb:c1:62:eb:05:1c:d9:20:99:29:
         c3:51:8b:04:8e:8a:c6:92:ea:76:13:cd:fb:33:86:74:fd:3f:
         6e:45:8b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:12:18 2026 by rpki-client