Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File:                     kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier:          7H2qQtt6gnK8UJPsdjkp2UPAjecp6IyCt2IYdCY2mZA=
Subject key identifier:   5E:8D:32:D9:FD:C2:2C:31:B9:15:CC:C0:85:3D:BF:57:65:E7:30:93
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer:       /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial:       019E57EDE5A9FDDEF2204D66B207F6447DDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number:          194E
Signing time:             Sun 24 May 2026 03:01:09 +0000
Manifest this update:     Sun 24 May 2026 03:01:09 +0000
Manifest next update:     Mon 25 May 2026 03:01:09 +0000
Files and hashes:         1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=)
                          2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=)
                          3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=)
                          4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=)
                          5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=)
                          6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=)
                          7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=)
                          8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: 3Ki+ighaGx4PNhk3/35oTRgSvgDsr6Zw38CTfesPfmw=)
                          9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=)
                          10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 May 2026 03:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:57:ed:e5:a9:fd:de:f2:20:4d:66:b2:07:f6:44:7d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
        Validity
            Not Before: May 24 03:01:09 2026 GMT
            Not After : May 25 03:01:09 2026 GMT
        Subject: CN=5e8d32d9fdc22c31b915ccc0853dbf5765e73093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:c2:7b:39:01:77:15:d8:7d:62:39:89:b4:
                    49:cb:75:56:83:71:46:8a:30:3f:1f:d9:5f:9c:07:
                    9b:20:a5:20:61:ea:8b:45:da:bf:64:51:2a:06:1f:
                    cc:cd:42:19:54:27:eb:1a:2a:7d:fe:af:03:f5:72:
                    5e:ba:a3:92:7a:f5:48:96:54:2b:a1:5c:dc:08:33:
                    27:8b:c0:44:2e:90:f1:c0:58:22:5a:ba:c6:42:09:
                    10:c6:78:cd:91:ac:ff:8c:88:54:43:88:cc:61:5a:
                    f9:20:65:8b:76:e5:4b:b6:f1:30:c7:0e:a2:92:9b:
                    9d:f3:52:77:34:f3:52:b1:4a:a7:e7:a7:da:6e:24:
                    36:6a:05:c1:78:12:c9:8f:24:ce:02:10:34:f6:00:
                    73:70:24:d8:ff:35:1a:fe:d8:c8:57:d7:6d:66:57:
                    b5:ad:a4:1f:78:a9:ba:1e:58:17:80:5d:4d:d3:6e:
                    b2:e7:ec:3d:8f:76:25:fe:f9:c1:99:1a:2a:04:94:
                    8e:6f:9d:8a:e2:b5:9e:d4:bf:65:5d:12:8e:f9:f0:
                    0e:26:ed:96:06:33:4e:4e:e8:c6:a3:92:dc:04:a7:
                    d8:f6:c6:75:66:19:25:f3:2e:78:1b:09:8e:cb:73:
                    3b:02:a2:46:78:00:ce:0b:51:0a:73:95:6e:08:e9:
                    4c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8D:32:D9:FD:C2:2C:31:B9:15:CC:C0:85:3D:BF:57:65:E7:30:93
            X509v3 Authority Key Identifier:
                keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6d:60:2a:5e:62:a3:aa:9c:10:84:a9:0e:05:42:f4:c0:0e:
         8a:f0:a8:ab:69:fc:6b:18:49:20:9c:f6:90:2f:4f:94:8a:7e:
         77:a2:83:de:c1:38:b6:76:8b:f9:8f:08:30:e9:06:a4:d3:28:
         34:9d:0c:07:b8:43:6d:ff:27:25:0d:28:37:7f:0d:4d:36:96:
         c1:e2:f9:37:31:d3:55:b0:83:33:76:38:a1:f9:54:75:0f:9d:
         1e:81:90:88:0f:af:11:6c:d5:ae:d0:59:d6:f8:0e:bf:bf:cd:
         1b:e4:0f:9e:c4:21:a9:b5:48:01:08:a8:55:db:91:db:da:bd:
         74:ca:1c:3c:8f:d2:e5:df:62:7d:98:05:36:15:60:f6:c3:30:
         d7:8f:48:ee:cd:34:0c:71:84:be:82:18:18:bc:5e:33:7a:e4:
         80:98:69:12:46:89:3c:da:90:fa:43:ee:f2:e7:9b:b8:cd:5a:
         ba:70:cd:bd:a7:32:df:d3:5b:75:36:ab:9f:89:62:01:26:3a:
         c4:85:66:54:77:9d:e8:df:ce:84:f2:9c:2d:90:a6:60:ab:4a:
         01:0d:c4:a1:8a:53:c2:ec:a0:d0:7c:20:6f:ff:c4:ed:0c:2c:
         71:f9:11:9d:c0:5b:68:45:05:cf:98:b0:21:bd:0a:33:9a:c6:
         b0:69:11:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5X7eWp/d7yIE1msgf2RH3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5
ZTUwNTUwHhcNMjYwNTI0MDMwMTA5WhcNMjYwNTI1MDMwMTA5WjAzMTEwLwYDVQQD
Eyg1ZThkMzJkOWZkYzIyYzMxYjkxNWNjYzA4NTNkYmY1NzY1ZTczMDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApufCezkBdxXYfWI5ibRJy3VWg3FG
ijA/H9lfnAebIKUgYeqLRdq/ZFEqBh/MzUIZVCfrGip9/q8D9XJeuqOSevVIllQr
oVzcCDMni8BELpDxwFgiWrrGQgkQxnjNkaz/jIhUQ4jMYVr5IGWLduVLtvEwxw6i
kpud81J3NPNSsUqn56fabiQ2agXBeBLJjyTOAhA09gBzcCTY/zUa/tjIV9dtZle1
raQfeKm6HlgXgF1N026y5+w9j3Yl/vnBmRoqBJSOb52K4rWe1L9lXRKO+fAOJu2W
BjNOTujGo5LcBKfY9sZ1Zhkl8y54GwmOy3M7AqJGeADOC1EKc5VuCOlM2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6NMtn9wiwxuRXMwIU9v1dl5zCTMB8GA1UdIwQY
MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt
OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy
LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARm1gKl5i
o6qcEISpDgVC9MAOivCoq2n8axhJIJz2kC9PlIp+d6KD3sE4tnaL+Y8IMOkGpNMo
NJ0MB7hDbf8nJQ0oN38NTTaWweL5NzHTVbCDM3Y4oflUdQ+dHoGQiA+vEWzVrtBZ
1vgOv7/NG+QPnsQhqbVIAQioVduR29q9dMocPI/S5d9ifZgFNhVg9sMw149I7s00
DHGEvoIYGLxeM3rkgJhpEkaJPNqQ+kPu8uebuM1aunDNvacy39NbdTarn4liASY6
xIVmVHed6N/OhPKcLZCmYKtKAQ3EoYpTwuyg0Hwgb//E7QwscfkRncBbaEUFz5iw
Ib0KM5rGsGkRRA==
-----END CERTIFICATE-----
Generated at Sun May 24 11:22:03 2026 by rpki-client