Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File:                     kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier:          z5W8wmWU709s1Z2B00BuQn/BoZo2QLe5a0nx68axj/4=
Subject key identifier:   B9:4B:E9:75:2E:20:4A:6F:CE:48:8A:FE:49:BD:11:D9:8E:C9:3F:25
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer:       /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial:       01A04017C3CD07BFB943DC0358C1055720E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number:          137E
Signing time:             Wed 26 Aug 2026 22:01:34 +0000
Manifest this update:     Wed 26 Aug 2026 22:01:34 +0000
Manifest next update:     Thu 27 Aug 2026 22:01:34 +0000
Files and hashes:         1: 5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa (hash: wP+hA2isPzwkkopr2bJuiDjKXExJINvAfGb0Q8S5VWM=)
                          2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: ym69leg7FrGS3HByXOxaWxGVbtUZ0qMQUEOp1IKrPRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:17:c3:cd:07:bf:b9:43:dc:03:58:c1:05:57:20:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
        Validity
            Not Before: Aug 26 22:01:34 2026 GMT
            Not After : Aug 27 22:01:34 2026 GMT
        Subject: CN=b94be9752e204a6fce488afe49bd11d98ec93f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ee:a1:ac:4e:cc:5a:6d:97:5c:f5:94:bc:2a:
                    13:ac:53:28:3c:f7:fd:0f:ac:79:8c:30:06:71:aa:
                    bc:a9:95:4e:63:5f:5b:7b:cb:67:0f:55:b2:5a:44:
                    ea:48:0b:e9:e7:13:2b:1d:c2:e1:78:ae:95:5e:40:
                    7f:7b:32:36:d9:24:bb:df:6a:26:13:ea:cc:d7:4c:
                    33:37:7a:ad:bc:9b:cc:9e:b3:06:f2:13:3a:87:f2:
                    74:e5:5a:95:b6:01:fb:45:ac:87:f7:ef:b4:e0:f7:
                    5e:a3:2f:a3:b7:b1:a1:e6:90:85:67:bb:f0:fa:6d:
                    59:bb:44:8b:5f:d3:09:d0:1d:cd:da:78:8e:0f:3c:
                    64:d5:eb:5e:1b:04:25:5e:e6:8f:9a:40:a6:7b:e5:
                    8c:3a:93:5c:b2:c6:3a:df:ec:68:28:0f:a2:35:30:
                    47:6b:e2:62:b1:67:89:de:a4:21:fc:58:80:6b:73:
                    6a:fe:ef:0b:97:c9:dd:06:c7:4c:0b:ac:9e:56:bf:
                    05:c5:9c:5f:79:82:72:87:67:81:60:78:71:da:a1:
                    ff:59:62:7d:47:f4:31:d8:d3:9c:85:02:4f:ef:38:
                    b1:4e:6b:da:f5:b3:65:18:df:fe:dc:f4:d4:88:35:
                    09:2f:0a:02:51:3f:f4:d0:4b:f5:0a:a9:c9:75:2a:
                    a2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4B:E9:75:2E:20:4A:6F:CE:48:8A:FE:49:BD:11:D9:8E:C9:3F:25
            X509v3 Authority Key Identifier:
                keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:bd:82:d0:36:fc:f7:fd:15:9b:ae:4c:0f:7e:a6:f9:44:6f:
         56:f8:bc:5d:1d:46:aa:f8:70:6b:f2:fa:98:2d:63:86:e1:a6:
         65:29:37:c9:8f:e7:e9:6c:20:f0:bc:d2:17:9a:45:da:e9:10:
         19:c5:27:fc:f3:64:11:02:f6:ab:7f:5f:5e:e4:55:ac:70:e5:
         b6:0a:5c:f1:2e:9a:c5:8a:fd:6b:78:51:28:9c:14:bb:dc:7b:
         f3:12:d7:01:bf:f0:be:36:f3:68:24:41:88:d4:b9:5b:30:5e:
         47:51:70:95:8b:b4:ec:ce:53:aa:f8:68:b2:e4:74:cc:5c:d8:
         aa:f7:4d:b6:78:98:cc:e8:2b:b1:2e:db:fc:cb:33:93:13:53:
         37:9c:4d:58:cf:1d:3f:31:7f:9a:ba:89:ab:44:b7:ad:fd:62:
         61:b6:9f:74:d0:c8:95:a8:80:35:97:f8:13:40:f5:5f:86:bf:
         d4:3f:54:84:9a:d8:bc:a9:89:b2:65:38:06:7b:fd:46:38:a6:
         ee:4c:9f:07:4c:cc:78:f9:e0:0c:49:ec:e9:b6:71:39:05:ed:
         e0:d6:31:d8:d1:9e:74:d2:f0:51:9f:74:bb:61:d8:e7:6e:78:
         f7:6c:d1:ad:ef:d5:e6:72:6a:82:ea:13:29:76:59:7b:b5:2f:
         67:3e:76:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAF8PNB7+5Q9wDWMEFVyDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzkxNjc3YWRlZjdhMmU5YjBiMGU0MGU5M2IyYzRhZmM0
ZGIzNWUwHhcNMjYwODI2MjIwMTM0WhcNMjYwODI3MjIwMTM0WjAzMTEwLwYDVQQD
EyhiOTRiZTk3NTJlMjA0YTZmY2U0ODhhZmU0OWJkMTFkOThlYzkzZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O6hrE7MWm2XXPWUvCoTrFMoPPf9
D6x5jDAGcaq8qZVOY19be8tnD1WyWkTqSAvp5xMrHcLheK6VXkB/ezI22SS732om
E+rM10wzN3qtvJvMnrMG8hM6h/J05VqVtgH7RayH9++04Pdeoy+jt7Gh5pCFZ7vw
+m1Zu0SLX9MJ0B3N2niODzxk1eteGwQlXuaPmkCme+WMOpNcssY63+xoKA+iNTBH
a+JisWeJ3qQh/FiAa3Nq/u8Ll8ndBsdMC6yeVr8FxZxfeYJyh2eBYHhx2qH/WWJ9
R/Qx2NOchQJP7zixTmva9bNlGN/+3PTUiDUJLwoCUT/00Ev1CqnJdSqi/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlL6XUuIEpvzkiK/km9EdmOyT8lMB8GA1UdIwQY
MBaAFJE5Fnet73oumwsOQOk7LEr8TbNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMt
NDZiY2IzNmRmNGIzLzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMtNDZiY2IzNmRmNGIz
LzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvL2C0Db8
9/0Vm65MD36m+URvVvi8XR1Gqvhwa/L6mC1jhuGmZSk3yY/n6Wwg8LzSF5pF2ukQ
GcUn/PNkEQL2q39fXuRVrHDltgpc8S6axYr9a3hRKJwUu9x78xLXAb/wvjbzaCRB
iNS5WzBeR1FwlYu07M5TqvhosuR0zFzYqvdNtniYzOgrsS7b/MszkxNTN5xNWM8d
PzF/mrqJq0S3rf1iYbafdNDIlaiANZf4E0D1X4a/1D9UhJrYvKmJsmU4Bnv9Rjim
7kyfB0zMePngDEns6bZxOQXt4NYx2NGedNLwUZ90u2HY525492zRre/V5nJqguoT
KXZZe7UvZz52Rw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 01:30:50 2026 by rpki-client