Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File:                     klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier:          k8o48Y/+cpM3o/KR3GR3+W8HKMOQ1R8/iWyt/i9/Zl0=
Subject key identifier:   83:37:C7:FF:A9:38:86:02:D0:75:D6:9B:D8:C2:7A:0C:4E:E9:86:32
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer:       /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial:       019F111C760B4BEC542100EC82527D7C9176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number:          1985
Signing time:             Mon 29 Jun 2026 02:01:45 +0000
Manifest this update:     Mon 29 Jun 2026 02:01:45 +0000
Manifest next update:     Tue 30 Jun 2026 02:01:45 +0000
Files and hashes:         1: 8JbX4W9CpZR4sp8oXbshsMu3qhg.roa (hash: hCHQyL16C72+1THFmVb/zaNecTBJgYxVKSF0WwCJuaU=)
                          2: AVx1s96DRHZcCwdlQg5COsBPl7g.asa (hash: wYwV0iDMhs5FKfv+LLpy2aNRbVxO/Y+rGm83NlQ+S24=)
                          3: BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa (hash: ube55hCllmSHhMFruM84ELj1ZKtITmMvONboq60emvo=)
                          4: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: gfKdBp45b6zrPBBH1KWvoA5ubdCLdfHeiY8n5zkaUQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:1c:76:0b:4b:ec:54:21:00:ec:82:52:7d:7c:91:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
        Validity
            Not Before: Jun 29 02:01:45 2026 GMT
            Not After : Jun 30 02:01:45 2026 GMT
        Subject: CN=8337c7ffa9388602d075d69bd8c27a0c4ee98632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:84:a5:af:32:71:26:24:1b:88:b6:ce:bd:46:
                    b9:54:e3:aa:23:91:20:88:37:55:90:af:a4:5e:e4:
                    9d:f1:07:89:d2:6d:3c:07:aa:4f:1c:2c:dd:fb:88:
                    fe:5e:80:75:6f:77:3e:eb:54:07:7a:8f:df:0b:57:
                    25:cd:c1:a9:fc:4a:8a:1a:c7:05:7c:a5:f5:79:74:
                    c1:cb:57:bb:9c:02:80:f4:6d:76:fc:ee:0c:b0:89:
                    29:bf:45:12:80:8c:0b:04:29:69:1e:7a:c6:ab:92:
                    17:99:ff:69:54:4f:46:52:f7:66:62:25:93:a1:02:
                    f1:67:69:53:80:56:41:d9:60:7c:a0:03:43:34:42:
                    fa:6f:50:6d:01:15:3f:ee:dd:f9:43:62:08:55:fd:
                    b0:d0:7a:47:6f:a8:bd:1c:98:0d:63:bd:82:01:6c:
                    5e:ce:e5:a1:a2:44:51:5a:44:c6:82:54:9f:b5:d0:
                    b5:03:d4:4a:6a:0a:8b:30:dd:8a:72:8f:95:0e:96:
                    d1:9a:f5:b5:7a:6a:c7:36:6e:0f:00:15:7a:84:0b:
                    04:97:ff:7c:11:e3:f2:a6:eb:c4:92:8c:d3:b0:ca:
                    eb:f2:db:8a:0b:f4:c5:d7:63:3b:36:d6:ad:98:1f:
                    4a:13:7d:05:51:70:92:d4:66:1c:ba:da:ed:d8:33:
                    1b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:37:C7:FF:A9:38:86:02:D0:75:D6:9B:D8:C2:7A:0C:4E:E9:86:32
            X509v3 Authority Key Identifier:
                keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:44:85:4a:0e:09:cb:2b:d1:3f:ac:56:c6:93:3a:03:3d:
         c4:76:57:e0:f2:21:b3:5e:a3:63:be:8b:24:3f:23:5b:5b:b2:
         93:07:55:20:92:01:5c:07:0f:0c:05:ce:2c:71:5f:9c:c6:3a:
         6a:43:ef:68:68:9f:50:bd:7f:03:bb:41:2f:22:03:85:30:e6:
         e2:63:b4:3c:91:71:77:10:f5:28:c2:03:ca:d3:a9:3c:50:7a:
         c4:d3:7b:55:83:ad:b3:7e:a2:6f:cc:73:16:f8:9a:cb:56:06:
         b0:c9:28:78:b8:06:30:75:d1:c5:a4:12:89:f4:df:c4:7a:fe:
         8f:7e:9e:8a:06:0e:8d:cd:ff:cc:2a:47:1e:85:c4:f2:62:8a:
         b7:a6:65:44:1d:62:92:00:fc:b1:a1:40:a5:b5:33:9c:ef:c1:
         9d:92:dc:92:64:15:2d:02:60:86:87:0f:b6:ac:29:bf:09:ed:
         76:98:e4:c7:49:de:54:12:d9:65:eb:22:5f:e9:23:d8:bc:f7:
         c0:17:90:5d:56:b2:ac:63:3e:7f:86:1c:c1:48:70:5a:62:c5:
         f2:d5:32:dc:30:0f:12:45:de:d8:f7:59:1a:e2:eb:7b:72:62:
         bd:30:d6:a1:99:3b:a2:69:79:a9:e7:72:fb:97:79:b7:39:61:
         67:f2:5b:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RHHYLS+xUIQDsglJ9fJF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTEwYTY4NzFjMjliYzAyOTIwNjhhOWI3MmRjMzRmZjgx
YjRmYzcwHhcNMjYwNjI5MDIwMTQ1WhcNMjYwNjMwMDIwMTQ1WjAzMTEwLwYDVQQD
Eyg4MzM3YzdmZmE5Mzg4NjAyZDA3NWQ2OWJkOGMyN2EwYzRlZTk4NjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ISlrzJxJiQbiLbOvUa5VOOqI5Eg
iDdVkK+kXuSd8QeJ0m08B6pPHCzd+4j+XoB1b3c+61QHeo/fC1clzcGp/EqKGscF
fKX1eXTBy1e7nAKA9G12/O4MsIkpv0USgIwLBClpHnrGq5IXmf9pVE9GUvdmYiWT
oQLxZ2lTgFZB2WB8oANDNEL6b1BtARU/7t35Q2IIVf2w0HpHb6i9HJgNY72CAWxe
zuWhokRRWkTGglSftdC1A9RKagqLMN2Kco+VDpbRmvW1emrHNm4PABV6hAsEl/98
EePypuvEkozTsMrr8tuKC/TF12M7NtatmB9KE30FUXCS1GYcutrt2DMbYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIM3x/+pOIYC0HXWm9jCegxO6YYyMB8GA1UdIwQY
MBaAFJJRCmhxwpvAKSBoqbctw0/4G0/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZGM3MDMtMTYzMS00MGY4LTkwYzUt
MThhMzBjMzAyOTBkLzEva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84ZGM3MDMtMTYzMS00MGY4LTkwYzUtMThhMzBjMzAyOTBk
LzEva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRpEhUoO
Ccsr0T+sVsaTOgM9xHZX4PIhs16jY76LJD8jW1uykwdVIJIBXAcPDAXOLHFfnMY6
akPvaGifUL1/A7tBLyIDhTDm4mO0PJFxdxD1KMIDytOpPFB6xNN7VYOts36ib8xz
Fviay1YGsMkoeLgGMHXRxaQSifTfxHr+j36eigYOjc3/zCpHHoXE8mKKt6ZlRB1i
kgD8saFApbUznO/BnZLckmQVLQJghocPtqwpvwntdpjkx0neVBLZZesiX+kj2Lz3
wBeQXVayrGM+f4YcwUhwWmLF8tUy3DAPEkXe2PdZGuLre3JivTDWoZk7oml5qedy
+5d5tzlhZ/Jbxw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:18 2026 by rpki-client