Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File:                     kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier:          W10rTtD+X5tqFe0AAQxabiWMaiVrKgAzvyI5jH3bdAc=
Subject key identifier:   0F:14:EF:FE:50:36:BC:AC:E5:B3:D3:A1:E8:BA:23:B3:FE:FF:95:AF
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer:       /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial:       019DD12CC9D6F1AB4C1ADF46B1507523D3A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number:          1903
Signing time:             Mon 27 Apr 2026 23:01:06 +0000
Manifest this update:     Mon 27 Apr 2026 23:01:06 +0000
Manifest next update:     Tue 28 Apr 2026 23:01:06 +0000
Files and hashes:         1: Ey-dQQ-b6D2JxAtl1tAirq1PpoM.asa (hash: B5MNhEwcfTqjF8H4A+QQFdaliNoWUEp7gf/35pg9Rbk=)
                          2: JTb4e3DUii0zPLQ9Ckw5esCwjG0.roa (hash: byIs4fDxzbStmpUulXvsLFDQrTroJupl22yHc01W9sA=)
                          3: MIyWfq9gpX_eI_ED1ii5vOGaWmM.roa (hash: u6guXrywPfx5K9H1XrSR92ZwtD6DI3B8S7D6GcWPq6E=)
                          4: UxN_iPmj1i5VVwJh2wPj2iaUaVM.asa (hash: +kSZr95TCNO+Jxjrh8oERrLS0jlz5ECdtQ/K2vdi+cQ=)
                          5: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: PlJOxfwAtQqhuv7MetaKnLQnse2XTrv1GERg0/1b8J0=)
                          6: pvrzZs8nm8ie9zDZhpBcHaIBCCY.asa (hash: iIYioZLzMA8MH9b2racO6xb3a/8R+kHNVUc/GDc8+W4=)
                          7: xhbUbHJfWuIcC58a_mlqpEgQiTA.roa (hash: 7RamenGY9nZYZ3O4Ws9uXcb/b++6NDmV6mvSM+ZRA6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d1:2c:c9:d6:f1:ab:4c:1a:df:46:b1:50:75:23:d3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
        Validity
            Not Before: Apr 27 23:01:06 2026 GMT
            Not After : Apr 28 23:01:06 2026 GMT
        Subject: CN=0f14effe5036bcace5b3d3a1e8ba23b3feff95af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:b4:b9:88:55:38:14:f5:0f:34:6a:47:fd:
                    cf:93:0f:bc:fc:ae:fb:4d:f9:07:29:6f:18:d2:9a:
                    fe:5b:f1:57:2c:20:80:fa:e8:76:6f:08:b3:7f:66:
                    d4:a2:22:30:ec:a2:bc:7f:73:3c:71:5a:60:af:02:
                    e2:67:06:67:f8:a0:0e:ec:ee:60:d9:cd:7b:9c:5f:
                    e4:5f:fe:e4:40:53:fb:4f:9c:08:c3:08:d7:61:08:
                    f1:0b:3c:09:65:3f:9b:93:ac:ff:fd:84:18:47:88:
                    70:78:4b:08:86:a9:3f:cb:fa:58:31:7d:13:2b:a3:
                    2f:98:be:09:f7:fe:09:27:0f:8f:75:35:3a:8d:bd:
                    f7:d2:6b:bc:1e:53:86:f3:0e:1c:4f:e5:41:48:93:
                    57:b8:e6:9d:03:e2:f2:64:71:ef:c5:c8:d3:c2:47:
                    d4:34:c6:66:5e:b2:a6:c5:de:fe:31:78:45:88:6e:
                    3c:8b:ab:2f:12:95:ba:e2:f3:a6:fd:7e:d5:43:02:
                    73:a7:e8:86:b7:62:93:87:97:c9:56:34:d2:f7:ce:
                    c2:4b:b2:73:b2:0a:ca:58:56:c0:64:94:70:be:14:
                    8e:e2:1d:05:08:44:a8:38:09:31:33:c3:cb:96:d7:
                    51:c7:71:ae:fb:43:3f:0f:52:01:3e:17:e1:d7:d9:
                    77:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:14:EF:FE:50:36:BC:AC:E5:B3:D3:A1:E8:BA:23:B3:FE:FF:95:AF
            X509v3 Authority Key Identifier:
                keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e0:7b:50:43:d9:ad:51:31:41:82:b2:03:b3:c6:3a:6c:bb:
         d9:a0:41:f4:eb:77:db:cf:b4:bb:a0:5d:af:b6:91:75:4b:52:
         60:4b:b2:75:87:93:2a:d6:9e:17:75:f1:19:53:5c:73:ad:cd:
         87:f0:9c:36:19:27:ba:34:44:8d:ca:e6:ef:b5:00:06:34:1c:
         62:3c:b5:4b:43:8c:3b:6b:d8:7c:c4:50:49:a3:ec:13:b9:59:
         98:34:5e:c3:cd:37:bb:83:48:ad:23:8c:02:7d:19:b8:2b:62:
         bf:0c:b3:81:18:7c:2d:c8:15:6f:0b:fc:e4:f0:48:de:77:6b:
         4f:6c:8d:15:7f:c2:3d:e1:45:0b:28:e6:8f:a5:14:a1:32:25:
         5a:c4:63:da:bb:c7:e2:dd:98:21:15:0c:02:3b:0e:1f:b6:4f:
         eb:b2:02:9e:c5:26:a5:52:39:cb:cc:9c:13:b3:16:0c:ce:8e:
         8a:ab:0d:5f:00:2e:0a:39:41:a6:d9:0d:a9:97:da:a2:ae:65:
         6a:07:83:21:99:2b:3a:58:aa:1f:d7:c6:0e:8c:e4:8f:2a:ca:
         37:bc:9e:89:04:3a:5a:a7:73:d3:18:5c:1f:10:69:a2:81:37:
         5d:d4:26:18:3c:18:c7:aa:41:b1:56:fa:c2:e3:b5:e7:49:ba:
         cd:45:bd:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3RLMnW8atMGt9GsVB1I9OkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj
MmEwOTUwHhcNMjYwNDI3MjMwMTA2WhcNMjYwNDI4MjMwMTA2WjAzMTEwLwYDVQQD
EygwZjE0ZWZmZTUwMzZiY2FjZTViM2QzYTFlOGJhMjNiM2ZlZmY5NWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHy0uYhVOBT1DzRqR/3Pkw+8/K77
TfkHKW8Y0pr+W/FXLCCA+uh2bwizf2bUoiIw7KK8f3M8cVpgrwLiZwZn+KAO7O5g
2c17nF/kX/7kQFP7T5wIwwjXYQjxCzwJZT+bk6z//YQYR4hweEsIhqk/y/pYMX0T
K6MvmL4J9/4JJw+PdTU6jb330mu8HlOG8w4cT+VBSJNXuOadA+LyZHHvxcjTwkfU
NMZmXrKmxd7+MXhFiG48i6svEpW64vOm/X7VQwJzp+iGt2KTh5fJVjTS987CS7Jz
sgrKWFbAZJRwvhSO4h0FCESoOAkxM8PLltdRx3Gu+0M/D1IBPhfh19l3nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8U7/5QNrys5bPToei6I7P+/5WvMB8GA1UdIwQY
MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct
MDRkNzRmMzY4Njk4LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4
LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOB7UEPZ
rVExQYKyA7PGOmy72aBB9Ot328+0u6Bdr7aRdUtSYEuydYeTKtaeF3XxGVNcc63N
h/CcNhknujREjcrm77UABjQcYjy1S0OMO2vYfMRQSaPsE7lZmDRew803u4NIrSOM
An0ZuCtivwyzgRh8LcgVbwv85PBI3ndrT2yNFX/CPeFFCyjmj6UUoTIlWsRj2rvH
4t2YIRUMAjsOH7ZP67ICnsUmpVI5y8ycE7MWDM6OiqsNXwAuCjlBptkNqZfaoq5l
ageDIZkrOliqH9fGDozkjyrKN7yeiQQ6Wqdz0xhcHxBpooE3XdQmGDwYx6pBsVb6
wuO150m6zUW9cw==
-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:43 2026 by rpki-client