Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
File:                     KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft (raw, json)
Hash identifier:          eSPb6GGMS9LcAIHWZPH4ZZZr5OL3ue0bJpgNVCmlc+Q=
Subject key identifier:   5E:A1:BD:10:BF:E1:36:FB:A9:1A:2F:28:4E:64:F7:8A:FD:69:B3:54
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Certificate issuer:       /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial:       019F9059DA7C5B2AD3D4E8B426031136E9A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
Manifest number:          19CD
Signing time:             Thu 23 Jul 2026 19:00:35 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:35 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:35 +0000
Files and hashes:         1: 1zH4HR_jPm-8SwLa0qimE97-P5A.asa (hash: tYxSixnm08xFTCmXHsgsP7H6MfcHJGSd+ujhmOmOLlE=)
                          2: CRy037_i_cUr7ivvwFkaM0Oecc8.roa (hash: 2BvO8Ta902Qq1EYmMVKwFCPEx1ueB5rtDCTKXW2UYFU=)
                          3: GV3rHMHaqZh85X7GW_djNwAYsOQ.asa (hash: MrfqDCvqnvYb6uuxXgWmjLxPfmlym5eT0CjhOIOM+sw=)
                          4: KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl (hash: ywbKNtYgRAi6zpTnRuNhyf2T+EUSp6D2BhzcioSGiSA=)
                          5: mra6PNQALIJ4cXHv3iTX1S7RUK8.roa (hash: 5i9ye/QA8fnoRb0KmqSlxn4ykxEHMPNjIM5js5S5I9Y=)
                          6: nxOlTeeVwbJvP0L8gxUuYbskG8I.asa (hash: MikecboX8HHDFogf33eR5geZ8eAmOY2OzEKHUF/uBE0=)
                          7: v6LodvYpOGGUhWjXnG4-LMGPe68.asa (hash: Hf1wgRy5JTLjGpN4VTbA8OHkeD4wSqOV5xdGmFiUEDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:da:7c:5b:2a:d3:d4:e8:b4:26:03:11:36:e9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
        Validity
            Not Before: Jul 23 19:00:35 2026 GMT
            Not After : Jul 24 19:00:35 2026 GMT
        Subject: CN=5ea1bd10bfe136fba91a2f284e64f78afd69b354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ef:5a:a7:78:17:99:f8:1c:da:6c:85:ee:8e:
                    ee:42:69:6a:a0:1c:c4:7b:cf:b9:4c:27:3a:85:a3:
                    2f:2e:91:01:25:e1:76:fe:5d:af:50:78:64:1b:4f:
                    de:28:12:53:f4:45:11:89:99:48:ac:93:bd:93:f2:
                    42:35:6b:59:8d:76:df:e4:27:07:ce:c9:9a:48:81:
                    d6:07:0c:d0:2b:f1:f0:50:28:25:ef:7d:38:8c:0d:
                    41:6d:4f:a2:84:cb:97:5f:a5:c2:41:a0:01:05:b3:
                    55:d4:ab:8c:75:14:4e:ca:49:1c:c1:2a:b5:8f:c9:
                    1f:b0:52:e6:fb:64:13:82:fe:a4:50:e5:2e:0d:64:
                    c3:8c:0a:6e:2b:31:c9:ea:ab:fd:f5:01:aa:5d:6e:
                    3a:62:6d:57:57:0b:9a:e3:ba:5f:1e:7f:c6:77:cc:
                    9c:e8:ce:3f:7c:90:92:58:e3:ae:5d:a2:97:01:e7:
                    73:6f:97:dd:81:e0:8e:d2:4a:0c:f7:25:ac:13:e5:
                    20:cf:bf:55:c8:cf:bb:cb:11:79:cb:10:85:ed:93:
                    64:04:53:17:52:eb:a4:b4:ad:1a:f8:6d:8b:cc:0b:
                    47:bc:48:6f:66:3e:bf:69:80:a6:29:a4:96:80:eb:
                    9e:52:cb:1b:b2:d5:b8:60:39:78:37:56:c2:97:c9:
                    8e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A1:BD:10:BF:E1:36:FB:A9:1A:2F:28:4E:64:F7:8A:FD:69:B3:54
            X509v3 Authority Key Identifier:
                keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c6:d8:47:70:c3:5e:09:c7:05:42:54:7f:02:72:19:a4:e8:
         c2:8d:7d:60:ad:c5:21:7a:29:66:e8:1e:de:46:4d:c5:a2:0e:
         f4:19:60:96:74:e0:f3:e1:c4:6d:33:bb:c1:5d:fe:d6:21:cc:
         eb:1f:fd:4d:57:1c:79:44:74:3d:4b:a0:a0:75:84:04:f6:29:
         08:5d:77:19:45:e8:71:15:ed:0e:01:5d:00:5a:39:fd:36:e9:
         a7:18:df:5c:b3:51:29:1e:db:39:2d:71:4e:fa:b1:1d:78:cd:
         b6:33:00:86:55:b4:7a:55:65:94:79:18:fd:2c:e5:39:9c:c2:
         68:e5:90:56:c1:0a:6b:e5:39:97:f4:c3:b7:74:d1:bb:0b:46:
         0b:eb:1b:8f:ac:75:ae:11:0c:8c:d7:ca:02:ab:0b:7b:04:5d:
         6d:3e:35:64:4a:76:ff:b7:09:72:5b:1f:61:f7:51:e8:37:04:
         3e:62:66:9d:51:5d:08:9d:53:c3:24:13:8e:7e:2c:dc:32:7a:
         bf:2b:8c:3f:ac:cd:da:ef:1d:5d:94:e8:16:7b:b8:9d:3d:ef:
         35:4d:8a:4c:a2:8c:14:e0:e5:90:ec:05:b0:81:2c:05:12:9e:
         77:75:78:07:9e:34:14:95:c5:cd:99:af:55:4f:d2:da:48:1d:
         8e:99:86:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWdp8WyrT1Oi0JgMRNumpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTA5ZGE2NjJmOWQzMDJmZmYyYzVjNGI0YWZiOGY5NDdm
ZWMxYzAwHhcNMjYwNzIzMTkwMDM1WhcNMjYwNzI0MTkwMDM1WjAzMTEwLwYDVQQD
Eyg1ZWExYmQxMGJmZTEzNmZiYTkxYTJmMjg0ZTY0Zjc4YWZkNjliMzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO9ap3gXmfgc2myF7o7uQmlqoBzE
e8+5TCc6haMvLpEBJeF2/l2vUHhkG0/eKBJT9EURiZlIrJO9k/JCNWtZjXbf5CcH
zsmaSIHWBwzQK/HwUCgl7304jA1BbU+ihMuXX6XCQaABBbNV1KuMdRROykkcwSq1
j8kfsFLm+2QTgv6kUOUuDWTDjApuKzHJ6qv99QGqXW46Ym1XVwua47pfHn/Gd8yc
6M4/fJCSWOOuXaKXAedzb5fdgeCO0koM9yWsE+Ugz79VyM+7yxF5yxCF7ZNkBFMX
UuuktK0a+G2LzAtHvEhvZj6/aYCmKaSWgOueUssbstW4YDl4N1bCl8mOMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6hvRC/4Tb7qRovKE5k94r9abNUMB8GA1UdIwQY
MBaAFCkQnaZi+dMC//LFxLSvuPlH/sHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JDZHBtTDUwd0xfOHNYRXRLLTQtVWYtd2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85MzAyNzktMzE4Ny00N2E1LTgxMzct
ZjRmYjVjODgwNTA5LzEvS1JDZHBtTDUwd0xfOHNYRXRLLTQtVWYtd2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85MzAyNzktMzE4Ny00N2E1LTgxMzctZjRmYjVjODgwNTA5
LzEvS1JDZHBtTDUwd0xfOHNYRXRLLTQtVWYtd2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8bYR3DD
XgnHBUJUfwJyGaTowo19YK3FIXopZuge3kZNxaIO9BlglnTg8+HEbTO7wV3+1iHM
6x/9TVcceUR0PUugoHWEBPYpCF13GUXocRXtDgFdAFo5/TbppxjfXLNRKR7bOS1x
TvqxHXjNtjMAhlW0elVllHkY/SzlOZzCaOWQVsEKa+U5l/TDt3TRuwtGC+sbj6x1
rhEMjNfKAqsLewRdbT41ZEp2/7cJclsfYfdR6DcEPmJmnVFdCJ1TwyQTjn4s3DJ6
vyuMP6zN2u8dXZToFnu4nT3vNU2KTKKMFODlkOwFsIEsBRKed3V4B540FJXFzZmv
VU/S2kgdjpmGFQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:29:33 2026 by rpki-client