Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File:                     klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier:          ks/LhqZPjlu4TU+gVibTuWl3waM98R9FEQKh66GaX4k=
Subject key identifier:   16:7F:51:66:1D:01:09:95:4E:3F:07:15:02:73:8C:54:D0:C4:56:FE
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer:       /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial:       019E295E278E0D951B396F70794EB1016BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number:          190D
Signing time:             Fri 15 May 2026 02:01:36 +0000
Manifest this update:     Fri 15 May 2026 02:01:36 +0000
Manifest next update:     Sat 16 May 2026 02:01:36 +0000
Files and hashes:         1: 8JbX4W9CpZR4sp8oXbshsMu3qhg.roa (hash: hCHQyL16C72+1THFmVb/zaNecTBJgYxVKSF0WwCJuaU=)
                          2: AVx1s96DRHZcCwdlQg5COsBPl7g.asa (hash: wYwV0iDMhs5FKfv+LLpy2aNRbVxO/Y+rGm83NlQ+S24=)
                          3: BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa (hash: ube55hCllmSHhMFruM84ELj1ZKtITmMvONboq60emvo=)
                          4: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: 5raVLy1lxJhXcrNuRBN3cyFCtXO5dRKyHe7MvHablbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5e:27:8e:0d:95:1b:39:6f:70:79:4e:b1:01:6b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
        Validity
            Not Before: May 15 02:01:36 2026 GMT
            Not After : May 16 02:01:36 2026 GMT
        Subject: CN=167f51661d0109954e3f071502738c54d0c456fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:00:60:2e:41:5b:58:e1:a3:af:4c:8a:9e:79:
                    f7:d1:e9:3a:2e:d9:90:47:d4:02:0f:04:9b:35:0f:
                    f6:77:ae:14:47:f4:4b:37:50:1c:ea:15:59:3e:99:
                    55:3f:5a:1f:01:c9:51:4e:2d:31:da:0a:ab:10:ea:
                    2c:ee:5b:9a:62:b1:82:77:dd:35:81:1a:b4:b7:56:
                    a6:bc:b0:86:39:b6:ba:de:7a:08:c1:dc:a0:af:67:
                    cc:00:a2:d9:04:a8:e4:8d:c9:04:2f:15:75:b3:ac:
                    e1:6f:87:71:26:f1:a6:52:01:6a:ab:4e:77:10:b0:
                    d7:80:82:55:0e:b6:cd:62:e4:d4:30:c4:09:12:b1:
                    61:88:3c:55:d7:97:d7:3e:3e:b1:cf:72:80:ac:cc:
                    b2:92:2a:a1:77:ee:25:ad:f8:1c:b2:66:7e:b3:4c:
                    28:2b:e3:d5:d8:4f:6c:1c:f1:3b:2b:f0:8a:1c:59:
                    09:f9:f9:db:d7:f1:33:43:ff:56:ab:00:24:fa:71:
                    fd:e6:06:58:bb:31:df:3b:cc:02:8f:4f:05:c4:58:
                    fe:fd:e1:2a:47:c5:85:5d:77:3a:9f:a5:a2:47:2c:
                    b0:61:31:51:4f:2a:b6:40:88:ff:25:ee:4f:23:c5:
                    9b:42:c6:1c:59:ec:bd:cf:f9:ff:56:42:2e:9f:2d:
                    2d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7F:51:66:1D:01:09:95:4E:3F:07:15:02:73:8C:54:D0:C4:56:FE
            X509v3 Authority Key Identifier:
                keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:26:63:31:41:dc:f4:d4:52:04:03:b2:f9:cb:88:47:f8:2f:
         71:b7:13:42:ea:07:4b:32:74:70:17:99:fa:b5:67:e5:8c:ad:
         7d:d2:25:76:b4:c2:18:dd:44:da:ca:20:8a:aa:31:e7:3f:05:
         c5:ff:4b:94:ab:75:d2:e1:8c:a1:01:bb:c4:54:ea:2d:17:68:
         70:3d:5b:b7:b3:c9:e8:7a:69:1e:98:59:c0:2e:10:61:4c:5a:
         f0:b7:ee:7e:6b:72:39:ca:9c:28:b4:0b:78:24:ef:a4:f9:77:
         dc:89:14:93:42:d5:47:7e:c1:26:14:5b:a5:b3:22:54:5b:1c:
         37:a9:d2:d8:ab:a2:bf:54:85:8d:cb:41:3d:5b:81:97:ea:8f:
         a9:3b:70:df:f5:e5:fa:a6:f0:28:fb:a7:e0:3c:d7:e8:be:41:
         f9:03:3a:af:c2:fa:10:50:10:59:84:9e:f3:92:28:cd:e8:67:
         0c:19:07:19:0f:57:83:94:f6:d9:cb:71:57:43:68:19:35:b8:
         35:02:e7:14:4b:ed:dc:0c:42:0b:a7:9d:85:90:aa:f4:2b:07:
         7c:59:da:27:a1:48:d5:f0:31:91:33:29:d5:26:18:b8:90:c5:
         14:a2:71:62:77:33:5e:01:7e:72:e2:35:e8:d3:2d:08:d9:99:
         eb:ba:92:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pXieODZUbOW9weU6xAWv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTEwYTY4NzFjMjliYzAyOTIwNjhhOWI3MmRjMzRmZjgx
YjRmYzcwHhcNMjYwNTE1MDIwMTM2WhcNMjYwNTE2MDIwMTM2WjAzMTEwLwYDVQQD
EygxNjdmNTE2NjFkMDEwOTk1NGUzZjA3MTUwMjczOGM1NGQwYzQ1NmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ABgLkFbWOGjr0yKnnn30ek6LtmQ
R9QCDwSbNQ/2d64UR/RLN1Ac6hVZPplVP1ofAclRTi0x2gqrEOos7luaYrGCd901
gRq0t1amvLCGOba63noIwdygr2fMAKLZBKjkjckELxV1s6zhb4dxJvGmUgFqq053
ELDXgIJVDrbNYuTUMMQJErFhiDxV15fXPj6xz3KArMyykiqhd+4lrfgcsmZ+s0wo
K+PV2E9sHPE7K/CKHFkJ+fnb1/EzQ/9WqwAk+nH95gZYuzHfO8wCj08FxFj+/eEq
R8WFXXc6n6WiRyywYTFRTyq2QIj/Je5PI8WbQsYcWey9z/n/VkIuny0tewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZ/UWYdAQmVTj8HFQJzjFTQxFb+MB8GA1UdIwQY
MBaAFJJRCmhxwpvAKSBoqbctw0/4G0/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZGM3MDMtMTYzMS00MGY4LTkwYzUt
MThhMzBjMzAyOTBkLzEva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84ZGM3MDMtMTYzMS00MGY4LTkwYzUtMThhMzBjMzAyOTBk
LzEva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiZjMUHc
9NRSBAOy+cuIR/gvcbcTQuoHSzJ0cBeZ+rVn5YytfdIldrTCGN1E2sogiqox5z8F
xf9LlKt10uGMoQG7xFTqLRdocD1bt7PJ6HppHphZwC4QYUxa8LfufmtyOcqcKLQL
eCTvpPl33IkUk0LVR37BJhRbpbMiVFscN6nS2Kuiv1SFjctBPVuBl+qPqTtw3/Xl
+qbwKPun4DzX6L5B+QM6r8L6EFAQWYSe85IozehnDBkHGQ9Xg5T22ctxV0NoGTW4
NQLnFEvt3AxCC6edhZCq9CsHfFnaJ6FI1fAxkTMp1SYYuJDFFKJxYnczXgF+cuI1
6NMtCNmZ67qSaA==
-----END CERTIFICATE-----
Generated at Fri May 15 06:59:37 2026 by rpki-client