Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
File:                     ANCpW-DmARCcsZiEJouiIERVx5A.mft (raw, json)
Hash identifier:          9UvuwmE4t2Zpl8lsd1yH5MjfFyaQP9puRcHRo9xzvaY=
Subject key identifier:   DE:73:07:C6:24:AE:06:B6:8C:D2:74:B7:55:BA:CB:DC:7E:9E:EA:D6
Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
Certificate issuer:       /CN=00d0a95be0e601109cb19884268ba2204455c790
Certificate serial:       019F17F9BF84568DAD06A7D116B362B5D682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
Manifest number:          1987
Signing time:             Tue 30 Jun 2026 10:01:11 +0000
Manifest this update:     Tue 30 Jun 2026 10:01:11 +0000
Manifest next update:     Wed 01 Jul 2026 10:01:11 +0000
Files and hashes:         1: 7LsBYX6UnQJjHO1OTwDr7b5AbQQ.roa (hash: x1DmSRqiESbAlCSOZoAMtbVAuMjmRTF3G6bOp+G4clM=)
                          2: ANCpW-DmARCcsZiEJouiIERVx5A.crl (hash: FKKy5t3JyW0nrNEnTgAV3AxgJIzUKlaS3hx5CYdsiEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:bf:84:56:8d:ad:06:a7:d1:16:b3:62:b5:d6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790
        Validity
            Not Before: Jun 30 10:01:11 2026 GMT
            Not After : Jul  1 10:01:11 2026 GMT
        Subject: CN=de7307c624ae06b68cd274b755bacbdc7e9eead6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:51:49:61:42:38:8f:d7:a1:8d:d0:d9:69:
                    96:38:7f:68:bd:dc:33:85:a8:a9:a5:5f:41:2c:23:
                    ba:74:64:17:3f:4c:74:02:aa:c8:40:e9:78:44:6b:
                    17:92:98:46:2d:1b:dd:0e:8d:fc:16:4d:87:c6:c3:
                    1a:49:0e:ef:26:8f:ee:b1:fb:f3:3f:3e:3d:1c:b9:
                    ce:a1:77:8f:e9:89:43:d6:87:9a:0d:18:50:93:c2:
                    72:bf:1d:da:37:83:8a:2f:e1:6e:56:a9:7a:4a:69:
                    85:b9:9f:33:36:95:14:1b:88:0b:d1:e2:4e:22:7f:
                    db:15:43:22:ce:ed:ad:2d:17:df:51:39:06:c2:36:
                    62:29:e6:6d:db:2b:26:9e:2e:1d:d8:35:42:00:d8:
                    8a:c0:b6:83:a8:b3:cb:5f:bb:63:b8:91:38:a8:94:
                    b4:db:5a:ae:e1:15:1b:c3:08:34:54:5a:a4:10:78:
                    50:52:b6:8b:fd:13:d3:c2:ed:0e:95:59:d7:ae:02:
                    c6:30:20:c1:6e:db:e7:af:02:d5:4b:a2:1e:25:5b:
                    ca:cd:50:2f:49:48:7e:b2:1f:34:af:b8:c3:96:2d:
                    29:fe:36:a4:40:70:70:22:99:63:31:1e:a6:5d:59:
                    d0:af:36:0b:7f:bd:be:ea:bc:71:11:ad:a1:69:0c:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:73:07:C6:24:AE:06:B6:8C:D2:74:B7:55:BA:CB:DC:7E:9E:EA:D6
            X509v3 Authority Key Identifier:
                keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:87:d0:b6:00:c6:b7:25:4c:17:a0:f4:12:85:c4:73:e2:65:
         53:9e:7e:b1:e6:07:e5:d0:d4:56:b8:d3:dd:52:6d:94:c8:76:
         83:8e:45:a5:49:a9:60:a4:b6:ea:67:37:45:d7:ed:80:af:5d:
         80:18:a4:48:89:87:6a:9a:76:a6:5a:da:17:17:cd:65:0a:98:
         c4:f0:26:a9:0e:68:58:35:2b:d6:7d:b2:c4:04:65:93:28:c2:
         03:f0:70:db:11:2c:a9:9b:c6:1d:94:5a:6c:00:95:70:ba:cf:
         17:75:7f:9b:2b:6a:8a:df:4d:f9:09:05:57:e6:d1:23:16:71:
         62:4a:be:73:2d:fe:5c:2e:28:fe:24:0c:b3:43:84:ec:a1:e2:
         e1:20:6d:63:4f:2f:6a:16:02:22:78:ac:43:4c:3b:f1:55:28:
         cb:48:7e:e3:92:f6:aa:68:d6:0b:31:24:8b:37:61:c0:da:c6:
         52:42:f6:66:11:cc:13:f3:1d:15:db:5a:27:e7:f5:a3:95:bc:
         a8:4e:d6:e1:a5:f7:af:e5:66:11:8e:76:5f:69:f0:8c:fd:c2:
         41:59:8a:fb:ce:7e:58:3a:93:e0:36:ab:fb:23:ca:89:29:56:
         cd:ca:1f:9f:09:d8:f3:28:cc:72:a8:76:45:c0:43:31:d3:e1:
         3e:d5:4c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:30 2026 by rpki-client