Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File:                     ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier:          tuC6+uQWxoeLtzw0hZEU10fiTLjYmn3OsrnNgfXyKNU=
Subject key identifier:   E2:D9:20:CA:5C:E9:96:99:CC:BB:B3:7C:BC:54:77:B5:29:05:04:A5
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer:       /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial:       019E20FFECF787E1E009740C04AD9623959F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 11:01:43 +0000
Manifest this update:     Wed 13 May 2026 11:01:43 +0000
Manifest next update:     Thu 14 May 2026 11:01:43 +0000
Files and hashes:         1: FomC0OD_NwetWkEPOTha3fWVMKU.roa (hash: dczkmLKUdcB3drX74PqMZvKfYmTs+5M5HtjBYhjGfvk=)
                          2: drBhV9alP4OW6ofNZOxW9TLw2f0.roa (hash: lbZ8swZRlTMR5bgvRpyD4YhMPyncb/ksvL8xrpAMysA=)
                          3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: que4geDtLyhgYP/xxDnaqnw0Cw/xLOv2zwMztDpXpxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:ec:f7:87:e1:e0:09:74:0c:04:ad:96:23:95:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
        Validity
            Not Before: May 13 11:01:43 2026 GMT
            Not After : May 14 11:01:43 2026 GMT
        Subject: CN=e2d920ca5ce99699ccbbb37cbc5477b5290504a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:70:bb:7e:ac:08:cd:3f:9e:4d:30:d7:bc:c2:
                    e6:c4:bd:c0:77:96:b9:be:67:af:4c:42:7d:fd:ab:
                    e3:18:3b:81:4a:bf:47:12:63:8b:21:f2:88:a3:ab:
                    0b:0f:e2:f0:4d:07:f7:77:cf:9c:8e:2d:7c:29:01:
                    6b:0d:35:73:00:63:4e:16:b0:2f:85:ad:35:57:d7:
                    43:b2:d8:2b:90:fc:2c:f4:29:81:a2:99:2e:ce:1d:
                    a2:77:d6:64:37:ae:ff:7b:a5:da:5d:0a:b1:06:ec:
                    ef:fa:95:09:d4:88:ee:ab:56:37:d7:aa:97:52:09:
                    c5:62:79:a1:3f:fd:be:32:b2:49:2a:b3:a7:83:b4:
                    5a:ed:f5:dd:a6:a6:04:c6:7f:c3:e4:ed:e6:a6:35:
                    7c:4b:e5:c4:22:67:8d:10:3c:8d:60:44:0a:5f:39:
                    04:1a:3d:85:11:af:08:16:18:b8:ba:30:77:04:2e:
                    a3:09:c9:a2:89:fb:91:6b:40:cd:74:e9:4d:82:4a:
                    56:d3:78:1a:1a:f7:44:f5:2d:c5:42:42:8b:29:57:
                    05:e6:1b:9e:ca:3b:ac:36:1e:9b:46:33:34:05:1a:
                    3a:fb:fe:7d:fe:71:39:94:a3:56:fc:5d:fd:ba:ed:
                    e7:17:f9:61:01:c7:54:47:ec:00:20:89:14:0c:60:
                    06:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D9:20:CA:5C:E9:96:99:CC:BB:B3:7C:BC:54:77:B5:29:05:04:A5
            X509v3 Authority Key Identifier:
                keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:97:4d:50:a8:36:cc:08:d1:5c:1d:9c:e0:68:d2:89:f7:99:
         96:42:44:75:34:87:44:f2:d5:d3:a4:ae:74:65:28:71:45:c0:
         58:b2:f2:7d:95:5c:0f:d2:f6:e7:70:bb:e3:7f:9f:13:a8:1b:
         3d:03:72:c5:18:b5:c4:09:0e:12:94:80:b6:a6:60:25:63:64:
         c0:f5:91:52:a9:5a:2c:32:f2:03:4c:62:99:09:5f:99:6d:69:
         46:6c:51:6d:25:76:db:07:78:c9:75:21:ea:e4:b0:cb:c1:c2:
         7d:f1:c2:12:14:8c:91:4c:fb:c6:17:8f:8a:22:57:fa:f2:62:
         bc:1b:4f:30:1d:4f:d8:3a:f4:54:bd:3e:d0:a9:2c:18:31:47:
         61:af:17:2f:2c:c6:31:9e:7e:9b:fa:89:44:9e:3e:ec:9f:d2:
         0c:da:52:3e:1b:09:4f:a4:bd:13:83:f1:1d:b6:ca:98:2c:c9:
         f1:9f:ca:38:c1:4d:df:6e:2a:28:d7:09:d7:6b:3b:d4:88:21:
         12:b7:ea:4c:30:20:10:51:f9:96:74:4f:18:4f:c2:03:eb:8b:
         d5:b2:03:00:ee:f3:46:b9:cc:9a:f0:35:c1:f0:93:b8:60:6d:
         de:44:4e:03:f4:94:3f:c5:ae:1a:c7:24:df:84:e5:cb:26:4a:
         c8:23:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:11 2026 by rpki-client