Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File:                     kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier:          mZT9DFcQxPN6lVGZT8MED0Ht4hJe+EUkSqKJO5DvtKM=
Subject key identifier:   0F:5D:39:10:41:EB:E1:BB:55:C8:C7:43:20:73:32:9B:16:9D:40:3A
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer:       /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial:       019F8EA303007610F889D56DE79EE52C07E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number:          19EB
Signing time:             Thu 23 Jul 2026 11:01:15 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:15 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:15 +0000
Files and hashes:         1: Ey-dQQ-b6D2JxAtl1tAirq1PpoM.asa (hash: B5MNhEwcfTqjF8H4A+QQFdaliNoWUEp7gf/35pg9Rbk=)
                          2: TNljeYPXxYIj5lo4d5l5EQLTZdU.roa (hash: CfzLFBITnlNK1XZxNhkSFtNXwo43Z88uKiUP3w2UsN0=)
                          3: UxN_iPmj1i5VVwJh2wPj2iaUaVM.asa (hash: +kSZr95TCNO+Jxjrh8oERrLS0jlz5ECdtQ/K2vdi+cQ=)
                          4: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: Tc8eDGMk2Q2rd83yDE3/u3IWk9rQj35zH4xPHgWCZ1c=)
                          5: pvrzZs8nm8ie9zDZhpBcHaIBCCY.asa (hash: iIYioZLzMA8MH9b2racO6xb3a/8R+kHNVUc/GDc8+W4=)
                          6: snlFadvdcM00ncJFWRG-pTa8eHA.roa (hash: 9LDuoi+waDnjJ5h6Bt5yAaxEDStiyfH1brajFG+wFiQ=)
                          7: ujd_58sugEeAoF5jMpUipoqtW4s.roa (hash: EUJlvM7IyZpw1wssBYGFhzm/HlXJCYuSLXzoCbLldiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a3:03:00:76:10:f8:89:d5:6d:e7:9e:e5:2c:07:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
        Validity
            Not Before: Jul 23 11:01:15 2026 GMT
            Not After : Jul 24 11:01:15 2026 GMT
        Subject: CN=0f5d391041ebe1bb55c8c7432073329b169d403a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b9:32:0d:4f:8c:24:5c:16:5a:a5:a8:33:1c:
                    05:e5:7d:53:28:d8:2f:05:77:ce:ed:c3:b6:02:b5:
                    18:31:1d:a1:af:ae:fa:76:dd:4e:a7:f7:01:14:84:
                    c2:76:a6:da:67:76:cc:6f:e6:71:ee:04:6d:7e:11:
                    cc:67:46:94:a8:d4:71:36:3d:43:31:56:af:a5:6f:
                    7b:29:a4:05:60:b0:f0:10:fb:e3:0e:ed:a6:78:93:
                    b5:9a:06:9c:ed:4c:ec:03:ca:9f:3b:c4:91:0b:f7:
                    c0:80:ed:cb:c9:c0:42:d1:8f:18:e7:54:63:11:dc:
                    ab:4d:15:dd:65:e5:19:03:84:77:86:5c:86:be:17:
                    4e:e3:ae:78:1f:9f:bc:f5:33:70:d1:6c:2a:41:c3:
                    d7:e4:59:5c:ce:d0:66:a0:ec:a5:ca:eb:89:a3:81:
                    9a:be:ef:1b:4b:af:b4:71:53:b1:32:74:79:34:99:
                    8e:5d:30:b4:4f:b4:ec:21:7f:1f:37:f8:eb:18:05:
                    aa:75:6e:45:75:a8:bf:a4:58:31:dc:86:ab:86:b6:
                    8e:85:a2:e8:c0:55:0d:41:5b:b7:e8:3a:60:5c:b9:
                    61:f6:3e:60:fe:15:6a:3c:40:34:6d:36:e5:d0:3c:
                    72:e4:d0:b0:2d:de:23:50:53:3c:be:cb:e9:f5:c2:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5D:39:10:41:EB:E1:BB:55:C8:C7:43:20:73:32:9B:16:9D:40:3A
            X509v3 Authority Key Identifier:
                keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d6:6c:ae:8a:62:62:47:08:c5:4a:90:44:70:81:65:37:db:
         0b:a3:a4:c2:e4:37:05:d7:ec:8f:9e:b7:aa:ef:35:06:5d:fc:
         dd:74:ec:2f:20:64:99:b6:79:0b:0c:47:c7:a6:ac:fc:e2:e9:
         ad:2f:6a:c1:80:1e:cc:92:39:22:04:91:98:51:79:d8:67:f4:
         af:be:f8:35:54:55:98:42:70:a4:37:47:f6:c2:12:b1:1b:29:
         3b:ec:12:fc:eb:3c:bd:13:33:ea:a6:f7:1e:bb:25:0f:62:40:
         85:ee:25:7c:f3:df:f2:4d:27:72:d6:c1:c6:0b:f8:89:1c:2f:
         a2:2e:7f:fa:02:41:29:83:e9:f7:c9:21:ae:fe:5d:9c:46:9a:
         aa:a2:12:a4:02:bb:1d:fb:83:69:de:d7:ee:0e:0d:7e:a5:be:
         b9:d0:5b:de:00:c7:46:66:14:69:82:aa:13:ab:bc:e2:87:81:
         d6:aa:4e:64:cc:49:61:de:cb:b1:dc:37:57:d0:bd:7a:bb:07:
         21:6f:16:9d:79:e7:9f:d9:82:d5:31:7d:24:10:21:d4:b1:cf:
         1f:e4:d9:7f:f4:f0:ad:3f:7d:71:55:2b:c7:60:94:ae:e9:f6:
         3a:c3:8b:51:cd:2c:ce:ab:57:ce:42:33:cd:43:fa:3e:84:a7:
         f4:70:5c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:23 2026 by rpki-client