Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File:                     kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier:          WM9Lo5KRlQRZi9o3B6vQjgSNPT69PnOogYcNVfVFYiw=
Subject key identifier:   A4:CB:31:5E:ED:12:C4:B4:B2:F9:80:94:F0:30:92:0C:A3:F5:A3:EE
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer:       /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial:       019EBA6B153FA3310AC12B4B739838134076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number:          197D
Signing time:             Fri 12 Jun 2026 06:00:40 +0000
Manifest this update:     Fri 12 Jun 2026 06:00:40 +0000
Manifest next update:     Sat 13 Jun 2026 06:00:40 +0000
Files and hashes:         1: Ey-dQQ-b6D2JxAtl1tAirq1PpoM.asa (hash: B5MNhEwcfTqjF8H4A+QQFdaliNoWUEp7gf/35pg9Rbk=)
                          2: TNljeYPXxYIj5lo4d5l5EQLTZdU.roa (hash: CfzLFBITnlNK1XZxNhkSFtNXwo43Z88uKiUP3w2UsN0=)
                          3: UxN_iPmj1i5VVwJh2wPj2iaUaVM.asa (hash: +kSZr95TCNO+Jxjrh8oERrLS0jlz5ECdtQ/K2vdi+cQ=)
                          4: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: eD3fbYgZSIRtKuYzqGAcdGCwNGCuQEK1lk/jXe1OPME=)
                          5: pvrzZs8nm8ie9zDZhpBcHaIBCCY.asa (hash: iIYioZLzMA8MH9b2racO6xb3a/8R+kHNVUc/GDc8+W4=)
                          6: snlFadvdcM00ncJFWRG-pTa8eHA.roa (hash: 9LDuoi+waDnjJ5h6Bt5yAaxEDStiyfH1brajFG+wFiQ=)
                          7: ujd_58sugEeAoF5jMpUipoqtW4s.roa (hash: EUJlvM7IyZpw1wssBYGFhzm/HlXJCYuSLXzoCbLldiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 06:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:6b:15:3f:a3:31:0a:c1:2b:4b:73:98:38:13:40:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
        Validity
            Not Before: Jun 12 06:00:40 2026 GMT
            Not After : Jun 13 06:00:40 2026 GMT
        Subject: CN=a4cb315eed12c4b4b2f98094f030920ca3f5a3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e5:db:0f:d4:eb:94:4f:69:ae:c9:bd:c2:3e:
                    9d:13:75:10:73:d3:4c:f5:b2:3d:24:d8:72:40:1f:
                    37:a2:6f:03:d0:29:5e:83:1e:67:fd:de:9c:ab:d6:
                    78:dc:22:73:7e:d4:b7:09:ea:87:d4:85:07:db:9a:
                    4f:b1:ec:82:c2:a2:7b:11:de:02:08:5c:b2:ca:1b:
                    31:ef:55:97:b3:27:11:45:9f:e7:dc:e8:81:d1:3c:
                    1c:7b:2e:ba:93:87:5f:47:3d:6c:13:21:df:88:14:
                    7b:54:a7:09:87:a8:93:98:19:2e:e1:ed:40:66:2b:
                    80:60:6f:2d:b8:3e:0c:30:cf:71:e0:9d:8b:b9:88:
                    e4:bc:16:3e:f2:d7:e9:5b:90:85:7a:cb:78:28:7b:
                    c0:8e:45:f4:a3:1b:68:19:53:9a:9b:fa:99:59:19:
                    09:86:03:55:a4:59:ed:5b:85:cc:de:73:96:85:71:
                    e7:81:2c:2b:f4:64:42:b5:e4:a9:b8:e6:bf:37:de:
                    b5:4c:d2:55:52:4f:64:26:45:45:b5:7a:ce:64:6d:
                    81:0b:d5:cf:e6:bb:4d:8a:87:0d:90:99:ad:e7:9e:
                    3c:6e:40:bf:9b:46:ef:03:ce:bf:9f:c8:cd:f0:f8:
                    3f:e3:3f:08:29:ec:c5:60:61:1a:8c:b0:b6:76:e7:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CB:31:5E:ED:12:C4:B4:B2:F9:80:94:F0:30:92:0C:A3:F5:A3:EE
            X509v3 Authority Key Identifier:
                keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b8:e1:7e:7f:cf:3b:4a:90:98:01:8e:8f:ee:45:3c:0e:08:
         89:a9:63:c4:5f:50:88:a1:39:6c:ae:08:d3:4f:6f:72:eb:8b:
         0a:76:cd:e5:d2:38:0c:e9:47:e3:eb:ca:b3:11:07:c6:5f:11:
         0e:0d:3b:80:9d:b9:0b:46:f4:f2:ba:c4:e4:76:bf:58:08:cf:
         9c:cc:41:f5:2b:04:ff:e8:9a:49:fe:2a:76:1e:96:44:de:f2:
         95:b9:b9:7c:80:6c:69:19:b0:5d:51:8a:79:42:81:16:a7:da:
         78:33:69:e0:14:68:6e:1a:40:d9:0f:ad:dd:18:59:2a:26:cb:
         3e:87:49:d8:45:d5:29:3a:de:4e:14:f5:d8:d2:5b:63:4a:db:
         02:db:a0:e9:f5:89:0a:56:5b:c7:f5:5c:56:f5:07:73:d1:87:
         29:b3:5c:4a:7d:74:d9:a8:45:6e:aa:4f:a7:d0:81:bb:39:87:
         11:69:6e:20:d4:38:07:4f:9a:88:ff:81:d7:8c:93:f9:2d:e1:
         a1:e4:14:24:b8:26:ac:f7:22:54:25:be:7b:27:f6:8a:6e:3f:
         e8:0a:1a:89:c9:7f:07:dc:a4:b5:e5:86:5a:be:45:96:a7:3c:
         b3:f7:6a:cd:1d:d5:17:6b:d5:14:dd:f3:4d:2a:45:78:54:68:
         11:4b:31:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66axU/ozEKwStLc5g4E0B2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj
MmEwOTUwHhcNMjYwNjEyMDYwMDQwWhcNMjYwNjEzMDYwMDQwWjAzMTEwLwYDVQQD
EyhhNGNiMzE1ZWVkMTJjNGI0YjJmOTgwOTRmMDMwOTIwY2EzZjVhM2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eXbD9TrlE9prsm9wj6dE3UQc9NM
9bI9JNhyQB83om8D0Clegx5n/d6cq9Z43CJzftS3CeqH1IUH25pPseyCwqJ7Ed4C
CFyyyhsx71WXsycRRZ/n3OiB0Twcey66k4dfRz1sEyHfiBR7VKcJh6iTmBku4e1A
ZiuAYG8tuD4MMM9x4J2LuYjkvBY+8tfpW5CFest4KHvAjkX0oxtoGVOam/qZWRkJ
hgNVpFntW4XM3nOWhXHngSwr9GRCteSpuOa/N961TNJVUk9kJkVFtXrOZG2BC9XP
5rtNiocNkJmt5548bkC/m0bvA86/n8jN8Pg/4z8IKezFYGEajLC2duf7UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTLMV7tEsS0svmAlPAwkgyj9aPuMB8GA1UdIwQY
MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct
MDRkNzRmMzY4Njk4LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4
LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrjhfn/P
O0qQmAGOj+5FPA4IialjxF9QiKE5bK4I009vcuuLCnbN5dI4DOlH4+vKsxEHxl8R
Dg07gJ25C0b08rrE5Ha/WAjPnMxB9SsE/+iaSf4qdh6WRN7ylbm5fIBsaRmwXVGK
eUKBFqfaeDNp4BRobhpA2Q+t3RhZKibLPodJ2EXVKTreThT12NJbY0rbAtug6fWJ
ClZbx/VcVvUHc9GHKbNcSn102ahFbqpPp9CBuzmHEWluINQ4B0+aiP+B14yT+S3h
oeQUJLgmrPciVCW+eyf2im4/6Aoaicl/B9ykteWGWr5Flqc8s/dqzR3VF2vVFN3z
TSpFeFRoEUsxcw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 10:59:07 2026 by rpki-client