Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
File:                     ANCpW-DmARCcsZiEJouiIERVx5A.mft (raw, json)
Hash identifier:          Jx9Mks4V/jw85nPhZbhQ+daq+BVcxMPFmdW2ylAD2tc=
Subject key identifier:   DC:6F:72:BE:5E:EF:16:56:79:8C:70:5E:BB:18:46:E7:F4:18:E3:12
Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
Certificate issuer:       /CN=00d0a95be0e601109cb19884268ba2204455c790
Certificate serial:       019E303B8BE7B20E3A68AFEE8F0DB7BE769A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 10:01:09 +0000
Manifest this update:     Sat 16 May 2026 10:01:09 +0000
Manifest next update:     Sun 17 May 2026 10:01:09 +0000
Files and hashes:         1: 7LsBYX6UnQJjHO1OTwDr7b5AbQQ.roa (hash: x1DmSRqiESbAlCSOZoAMtbVAuMjmRTF3G6bOp+G4clM=)
                          2: ANCpW-DmARCcsZiEJouiIERVx5A.crl (hash: H4ucAT1RDpHXpKZDgGy0Xbi+0wj4sWQKD4CcTOVLLLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:8b:e7:b2:0e:3a:68:af:ee:8f:0d:b7:be:76:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790
        Validity
            Not Before: May 16 10:01:09 2026 GMT
            Not After : May 17 10:01:09 2026 GMT
        Subject: CN=dc6f72be5eef1656798c705ebb1846e7f418e312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:a5:eb:96:d5:45:07:b7:ea:e5:ef:2b:0d:
                    9a:fc:54:ce:76:20:82:b9:56:80:d3:fc:97:96:7a:
                    ec:a8:53:16:5c:fd:f7:3e:85:f4:46:27:bb:45:e3:
                    18:a2:e9:9d:58:c8:7d:bb:e8:98:1c:2c:e4:7f:ed:
                    ba:c8:c6:6b:1b:0f:ae:68:03:c9:f4:7e:61:6d:25:
                    3c:d0:83:1e:8a:b7:49:cd:0c:66:bd:38:43:32:4a:
                    40:86:f2:64:f3:2f:15:b8:d9:b7:32:ff:6d:26:05:
                    61:9f:4c:52:9b:a6:b1:47:69:10:b8:fc:b3:f0:b8:
                    52:2c:35:ab:0d:28:d2:c8:d5:4d:bb:39:e1:23:ce:
                    98:2d:38:3a:ee:dd:f8:d1:f8:a0:8c:06:0d:1a:91:
                    d2:9d:27:e5:48:03:86:41:27:70:c4:cc:32:d1:dc:
                    97:54:c1:da:ee:63:92:76:1a:5c:e9:2f:bc:bb:46:
                    77:0a:70:bb:99:1d:06:80:d6:97:a6:69:2a:1f:a0:
                    82:82:3d:de:79:56:ca:c7:96:2e:21:e6:ba:ff:f4:
                    5a:ba:54:04:2a:ad:57:03:1c:71:b7:d5:2a:70:05:
                    69:7d:60:b5:77:c1:9f:f4:f1:0d:7d:ff:c0:c1:2c:
                    c4:29:96:5a:ed:83:18:07:b5:5f:bc:cf:59:7a:7e:
                    78:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6F:72:BE:5E:EF:16:56:79:8C:70:5E:BB:18:46:E7:F4:18:E3:12
            X509v3 Authority Key Identifier:
                keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a4:89:ba:32:9e:11:66:7b:1b:34:17:37:51:77:8b:3f:44:
         18:93:ee:c9:a3:46:36:71:64:09:1a:6c:2e:d4:53:5b:71:1f:
         d7:22:71:a1:d1:97:a0:27:ce:ff:8f:09:35:c0:26:47:a9:97:
         fe:77:a6:14:f1:97:38:24:0f:94:21:0a:d8:ac:f6:22:b6:3c:
         62:a2:13:cb:3d:0f:c9:eb:1b:ce:5a:7b:f9:d8:37:e6:52:06:
         8a:b4:17:62:2a:f0:6f:6e:cf:35:9c:bd:3c:4f:8a:c6:b1:a6:
         95:92:f7:e2:83:f9:ad:e1:35:6e:30:02:da:58:31:6c:4d:8c:
         2d:04:e8:1b:08:9a:20:9c:f9:c8:f5:72:2c:c0:51:08:de:b3:
         1f:ad:56:58:3f:a3:4f:3a:9f:a2:3d:2a:8a:39:61:80:21:61:
         06:14:66:c7:c1:40:34:44:65:93:91:d4:9a:af:5a:f8:88:22:
         1f:05:ee:af:02:3b:1e:02:bd:fa:fb:f7:29:fc:c5:92:98:6e:
         82:8d:b7:af:6e:81:cc:a1:29:a5:09:85:92:88:72:24:4e:e5:
         cf:92:5e:7f:38:09:1f:6e:56:86:29:d7:01:dd:5f:0a:3d:0b:
         da:c9:6f:08:34:56:67:d7:4c:0e:89:63:ce:76:af:69:1c:55:
         b9:7e:73:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO4vnsg46aK/ujw23vnaaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZDBhOTViZTBlNjAxMTA5Y2IxOTg4NDI2OGJhMjIwNDQ1
NWM3OTAwHhcNMjYwNTE2MTAwMTA5WhcNMjYwNTE3MTAwMTA5WjAzMTEwLwYDVQQD
EyhkYzZmNzJiZTVlZWYxNjU2Nzk4YzcwNWViYjE4NDZlN2Y0MThlMzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDKl65bVRQe36uXvKw2a/FTOdiCC
uVaA0/yXlnrsqFMWXP33PoX0Rie7ReMYoumdWMh9u+iYHCzkf+26yMZrGw+uaAPJ
9H5hbSU80IMeirdJzQxmvThDMkpAhvJk8y8VuNm3Mv9tJgVhn0xSm6axR2kQuPyz
8LhSLDWrDSjSyNVNuznhI86YLTg67t340figjAYNGpHSnSflSAOGQSdwxMwy0dyX
VMHa7mOSdhpc6S+8u0Z3CnC7mR0GgNaXpmkqH6CCgj3eeVbKx5YuIea6//RaulQE
Kq1XAxxxt9UqcAVpfWC1d8Gf9PENff/AwSzEKZZa7YMYB7VfvM9Zen54dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxvcr5e7xZWeYxwXrsYRuf0GOMSMB8GA1UdIwQY
MBaAFADQqVvg5gEQnLGYhCaLoiBEVceQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU5DcFctRG1BUkNjc1ppRUpvdWlJRVJWeDVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yZTVhMzQtNWFlMy00Y2JlLTkwOTAt
ZDFmZDRkYTJkNWNiLzEvQU5DcFctRG1BUkNjc1ppRUpvdWlJRVJWeDVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8yZTVhMzQtNWFlMy00Y2JlLTkwOTAtZDFmZDRkYTJkNWNi
LzEvQU5DcFctRG1BUkNjc1ppRUpvdWlJRVJWeDVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6SJujKe
EWZ7GzQXN1F3iz9EGJPuyaNGNnFkCRpsLtRTW3Ef1yJxodGXoCfO/48JNcAmR6mX
/nemFPGXOCQPlCEK2Kz2IrY8YqITyz0Pyesbzlp7+dg35lIGirQXYirwb27PNZy9
PE+KxrGmlZL34oP5reE1bjAC2lgxbE2MLQToGwiaIJz5yPVyLMBRCN6zH61WWD+j
Tzqfoj0qijlhgCFhBhRmx8FANERlk5HUmq9a+IgiHwXurwI7HgK9+vv3KfzFkphu
go23r26BzKEppQmFkohyJE7lz5JefzgJH25WhinXAd1fCj0L2slvCDRWZ9dMDolj
znavaRxVuX5zFg==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:07 2026 by rpki-client