Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File:                     kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier:          1WgfryjqaT5L0Y+iGVLN5GiiZ5pRpBJ0YO/gkxeTD0I=
Subject key identifier:   39:C3:B7:87:66:30:8B:24:66:3B:10:8C:5F:84:91:10:FB:D2:0B:FB
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer:       /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial:       019E1DFDDEF95193F2C7A3AB9452EB5E2ED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number:          192B
Signing time:             Tue 12 May 2026 21:00:37 +0000
Manifest this update:     Tue 12 May 2026 21:00:37 +0000
Manifest next update:     Wed 13 May 2026 21:00:37 +0000
Files and hashes:         1: Ey-dQQ-b6D2JxAtl1tAirq1PpoM.asa (hash: B5MNhEwcfTqjF8H4A+QQFdaliNoWUEp7gf/35pg9Rbk=)
                          2: JTb4e3DUii0zPLQ9Ckw5esCwjG0.roa (hash: byIs4fDxzbStmpUulXvsLFDQrTroJupl22yHc01W9sA=)
                          3: TNljeYPXxYIj5lo4d5l5EQLTZdU.roa (hash: CfzLFBITnlNK1XZxNhkSFtNXwo43Z88uKiUP3w2UsN0=)
                          4: UxN_iPmj1i5VVwJh2wPj2iaUaVM.asa (hash: +kSZr95TCNO+Jxjrh8oERrLS0jlz5ECdtQ/K2vdi+cQ=)
                          5: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: QdrO9RL1WX/w7p9VlsO+70zqUsvPCkoh/XeQtdYBbiM=)
                          6: pvrzZs8nm8ie9zDZhpBcHaIBCCY.asa (hash: iIYioZLzMA8MH9b2racO6xb3a/8R+kHNVUc/GDc8+W4=)
                          7: ujd_58sugEeAoF5jMpUipoqtW4s.roa (hash: EUJlvM7IyZpw1wssBYGFhzm/HlXJCYuSLXzoCbLldiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fd:de:f9:51:93:f2:c7:a3:ab:94:52:eb:5e:2e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
        Validity
            Not Before: May 12 21:00:37 2026 GMT
            Not After : May 13 21:00:37 2026 GMT
        Subject: CN=39c3b78766308b24663b108c5f849110fbd20bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:6b:64:c4:03:a6:18:6d:8d:8d:87:1a:83:
                    a3:ad:9c:e5:a9:52:68:06:03:ee:64:e9:2c:b3:4f:
                    72:63:14:3c:e0:f5:56:d1:b9:09:4a:69:45:9a:be:
                    31:49:37:33:97:4b:77:e8:05:6e:15:ba:8c:9b:4b:
                    dd:4c:bc:e1:4c:f8:bf:8d:63:77:47:2d:ef:e8:99:
                    4f:92:23:d8:60:5b:78:97:19:78:36:63:b5:c2:50:
                    50:fc:08:f6:95:10:d1:78:94:b5:3d:2f:38:3b:c9:
                    6f:1d:dc:dd:77:a5:e4:8a:15:34:e6:16:49:9d:2f:
                    84:28:33:67:31:79:3f:55:8a:3a:28:a8:09:35:5e:
                    b3:2c:25:d7:8b:e5:2a:e4:3b:f5:e4:61:7c:6e:0f:
                    44:fa:83:9d:a7:ac:17:48:45:85:f0:20:db:55:e8:
                    c4:2c:5c:20:4b:a6:91:15:05:a7:31:b8:24:1b:5c:
                    79:d8:91:2f:ba:90:d6:b6:8a:05:a1:76:c2:9a:3e:
                    94:40:2d:53:ab:b1:dd:06:77:cf:f3:57:db:67:b1:
                    db:b7:92:5f:a2:72:66:67:16:41:d8:b3:4e:b8:43:
                    3a:82:11:58:ec:e1:8e:40:bf:98:36:49:21:4c:8f:
                    f9:7f:4b:a4:8d:63:6e:ec:a1:4e:c7:94:cc:5a:d5:
                    f8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C3:B7:87:66:30:8B:24:66:3B:10:8C:5F:84:91:10:FB:D2:0B:FB
            X509v3 Authority Key Identifier:
                keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c8:7d:b9:f7:f1:ad:37:e1:ab:15:7b:45:55:1f:b2:9b:39:
         c5:cd:08:1e:2d:ce:81:7d:b4:4f:53:4e:ff:d0:51:30:ae:0d:
         2c:43:a2:91:4a:3a:29:1e:35:ea:a6:ae:64:60:89:cc:2b:19:
         24:56:a6:07:03:8e:29:dd:b2:e9:19:b1:db:ac:98:59:bc:4e:
         6d:d0:bb:55:b4:93:bf:9e:4f:f3:81:08:41:c1:d5:ad:45:0a:
         68:92:d9:ff:30:74:f5:2c:4f:05:c1:f9:29:fe:6d:80:47:e7:
         58:c1:33:5a:60:83:d5:ea:c6:ac:81:1b:c8:77:17:e0:d1:1d:
         61:a0:fe:00:ce:79:e1:e8:9c:2a:e0:e0:aa:29:38:48:2f:d0:
         19:b0:20:f0:04:d7:24:92:e8:c1:3e:50:05:97:08:19:02:f2:
         1f:e0:29:28:dc:dd:21:dc:a5:fe:86:ba:89:47:e1:b7:d4:d5:
         07:45:38:0e:e6:bb:7f:81:ee:3c:2b:62:af:02:64:12:76:73:
         02:dc:41:5f:a0:72:e3:10:c6:a6:00:64:f6:23:f1:8b:2f:7d:
         01:04:c0:41:5c:75:d5:1b:3f:0d:36:4a:a2:48:10:ab:97:58:
         07:37:51:73:00:48:b3:10:57:91:51:9f:78:4a:b9:75:fc:dd:
         d6:3d:73:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/d75UZPyx6OrlFLrXi7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj
MmEwOTUwHhcNMjYwNTEyMjEwMDM3WhcNMjYwNTEzMjEwMDM3WjAzMTEwLwYDVQQD
EygzOWMzYjc4NzY2MzA4YjI0NjYzYjEwOGM1Zjg0OTExMGZiZDIwYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRJrZMQDphhtjY2HGoOjrZzlqVJo
BgPuZOkss09yYxQ84PVW0bkJSmlFmr4xSTczl0t36AVuFbqMm0vdTLzhTPi/jWN3
Ry3v6JlPkiPYYFt4lxl4NmO1wlBQ/Aj2lRDReJS1PS84O8lvHdzdd6XkihU05hZJ
nS+EKDNnMXk/VYo6KKgJNV6zLCXXi+Uq5Dv15GF8bg9E+oOdp6wXSEWF8CDbVejE
LFwgS6aRFQWnMbgkG1x52JEvupDWtooFoXbCmj6UQC1Tq7HdBnfP81fbZ7Hbt5Jf
onJmZxZB2LNOuEM6ghFY7OGOQL+YNkkhTI/5f0ukjWNu7KFOx5TMWtX4NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnDt4dmMIskZjsQjF+EkRD70gv7MB8GA1UdIwQY
MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct
MDRkNzRmMzY4Njk4LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4
LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8h9uffx
rTfhqxV7RVUfsps5xc0IHi3OgX20T1NO/9BRMK4NLEOikUo6KR416qauZGCJzCsZ
JFamBwOOKd2y6Rmx26yYWbxObdC7VbSTv55P84EIQcHVrUUKaJLZ/zB09SxPBcH5
Kf5tgEfnWMEzWmCD1erGrIEbyHcX4NEdYaD+AM554eicKuDgqik4SC/QGbAg8ATX
JJLowT5QBZcIGQLyH+ApKNzdIdyl/oa6iUfht9TVB0U4Dua7f4HuPCtirwJkEnZz
AtxBX6By4xDGpgBk9iPxiy99AQTAQVx11Rs/DTZKokgQq5dYBzdRcwBIsxBXkVGf
eEq5dfzd1j1zwA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:51:57 2026 by rpki-client