Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
File:                     KgzEYwHIsf1GOSkwGPulNlOiZbI.mft (raw, json)
Hash identifier:          Vm/aaskHWbNx1Actd6ViLQdVWjN2reOp+J+AfcyP4R8=
Subject key identifier:   80:06:74:96:F6:52:00:56:E4:41:F3:6C:1F:7C:C9:44:DC:D6:11:B9
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Certificate issuer:       /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial:       019EBF5AB84D3381D8349F69460F2048D1B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
Manifest number:          1962
Signing time:             Sat 13 Jun 2026 05:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:54 +0000
Files and hashes:         1: Dol_Yn1EUI6Y4JETRI7DtbG1wTY.roa (hash: oEleDgSfi1/0GdFoPLAt8sQUnHsmQoFm+KbSbKM7DK8=)
                          2: KgzEYwHIsf1GOSkwGPulNlOiZbI.crl (hash: hk96upl39sn3hOy6xMw6+mhzdtqiIJ9qvezuR01RDP4=)
                          3: N0-9D9Mqaj9fas9-h3bJI6Ip0sE.asa (hash: KMMXyURtnd2DY6HcFTJMERVv9TEECMM6e6EyJkA5WWY=)
                          4: XBi0FPt3Tgj9Z2jUXrybiKJEHnU.asa (hash: GAqZiwsCXXJxCZ9EujMbC6ioGg7tK0Ic1Zx8khPbgSE=)
                          5: fL0H--TKQBb-D8qsXRg-ndg2SW4.asa (hash: MpJx0FBsk8ZEbC887zbST7va3ASLMexA4WQhUuLBBBA=)
                          6: gK2Rq9Zs-Y9rHAKXi0YVfwz0vlI.roa (hash: soCJxr1Be9fMlxT+zXNdcRqutbnVfTkKZ0DnRO9Wh6M=)
                          7: kUwG0iZuxyNBHJJd8N9jQGPedHQ.roa (hash: hPe1XR077zP9VhoNA1k11ZvtiSoFyhO3Q2vyCxM6cZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:b8:4d:33:81:d8:34:9f:69:46:0f:20:48:d1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
        Validity
            Not Before: Jun 13 05:00:54 2026 GMT
            Not After : Jun 14 05:00:54 2026 GMT
        Subject: CN=80067496f6520056e441f36c1f7cc944dcd611b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:b0:4b:ed:17:f1:16:8f:c5:78:74:e2:c6:
                    6e:f7:20:48:65:14:d6:dc:47:03:59:bc:0b:e1:05:
                    35:3a:b6:8e:e9:a7:f5:67:f4:ba:6f:7e:e6:56:da:
                    8f:5b:50:b3:e6:3f:24:67:6c:8c:c6:97:8a:df:8f:
                    ad:70:5a:51:18:70:41:4c:47:f0:93:dc:09:f9:02:
                    66:20:be:8f:fd:76:e3:ef:1c:3b:6c:97:6f:ef:c9:
                    98:d9:69:1d:67:90:4a:b7:56:ca:9c:24:12:47:80:
                    11:c1:08:84:8f:f3:fb:5a:3c:8f:9b:85:35:45:ee:
                    56:a3:09:70:0c:b5:89:26:c2:03:c2:7a:39:95:c1:
                    f3:03:fd:3e:ec:31:43:ee:36:fd:5c:34:16:9e:52:
                    c9:14:91:bf:6e:e3:1d:1e:0a:c2:e5:d1:b2:cf:22:
                    60:76:d2:25:0c:86:7a:d5:4b:15:7a:36:ea:5e:d0:
                    52:a5:35:4e:11:08:b2:a9:39:a1:9b:7e:cc:9c:70:
                    53:25:e7:1e:de:c3:9b:4b:a1:2d:80:f0:5f:07:d6:
                    9c:2d:42:cf:03:00:4f:97:dc:72:02:ea:ca:7f:18:
                    86:5e:4d:3b:dd:84:6d:87:06:de:80:e3:07:ed:63:
                    d7:94:86:56:a2:0d:7c:44:54:3b:bd:9d:e7:3d:e8:
                    7e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:06:74:96:F6:52:00:56:E4:41:F3:6C:1F:7C:C9:44:DC:D6:11:B9
            X509v3 Authority Key Identifier:
                keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2b:a9:38:57:9a:1d:32:61:0b:da:58:a1:3e:cb:45:bd:79:
         54:8a:6a:01:b5:d6:a0:9c:94:69:fe:40:a1:d6:0e:0b:26:d4:
         01:73:96:68:c5:c4:07:1a:c3:82:f8:bb:52:d3:88:05:7a:25:
         e4:30:72:e4:a8:29:81:c6:3c:2d:bc:20:e5:a0:4f:a6:7e:a2:
         8a:3c:66:b4:ff:01:e8:46:77:f4:7e:9c:1b:d0:55:95:d2:39:
         dd:6b:50:93:e5:fa:78:03:b2:9d:8c:af:77:0a:90:67:73:93:
         bf:2c:e9:60:86:c3:25:72:09:7c:9b:6a:c7:e3:80:eb:97:18:
         2f:66:24:00:46:bc:5d:67:1b:43:2b:ad:ea:c9:e3:b2:f4:0c:
         91:55:30:61:94:c7:b2:36:5f:85:d8:09:a9:ce:db:35:97:91:
         84:c5:3b:b3:44:35:6a:6f:84:0e:7e:05:64:64:93:1f:b8:af:
         01:a2:c2:57:55:3c:b5:6d:02:a7:59:bc:e3:bf:89:5c:63:e2:
         10:00:f3:4d:d8:22:4e:33:36:a6:9d:81:2a:de:aa:0c:cf:f6:
         e8:f6:e9:7f:90:c6:11:d7:ff:f3:d6:fb:0f:77:f8:c3:d2:95:
         45:48:17:a7:d2:53:e5:48:1d:5a:94:c3:32:d5:0c:77:bb:27:
         ab:25:4a:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WrhNM4HYNJ9pRg8gSNG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMGNjNDYzMDFjOGIxZmQ0NjM5MjkzMDE4ZmJhNTM2NTNh
MjY1YjIwHhcNMjYwNjEzMDUwMDU0WhcNMjYwNjE0MDUwMDU0WjAzMTEwLwYDVQQD
Eyg4MDA2NzQ5NmY2NTIwMDU2ZTQ0MWYzNmMxZjdjYzk0NGRjZDYxMWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxduwS+0X8RaPxXh04sZu9yBIZRTW
3EcDWbwL4QU1OraO6af1Z/S6b37mVtqPW1Cz5j8kZ2yMxpeK34+tcFpRGHBBTEfw
k9wJ+QJmIL6P/Xbj7xw7bJdv78mY2WkdZ5BKt1bKnCQSR4ARwQiEj/P7WjyPm4U1
Re5WowlwDLWJJsIDwno5lcHzA/0+7DFD7jb9XDQWnlLJFJG/buMdHgrC5dGyzyJg
dtIlDIZ61UsVejbqXtBSpTVOEQiyqTmhm37MnHBTJece3sObS6EtgPBfB9acLULP
AwBPl9xyAurKfxiGXk073YRthwbegOMH7WPXlIZWog18RFQ7vZ3nPeh+iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAGdJb2UgBW5EHzbB98yUTc1hG5MB8GA1UdIwQY
MBaAFCoMxGMByLH9RjkpMBj7pTZTomWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2d6RVl3SElzZjFHT1Nrd0dQdWxObE9pWmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yODYyZDEtMmNjOS00NTY1LTg2YzIt
MmJiNTU5N2EyNDM1LzEvS2d6RVl3SElzZjFHT1Nrd0dQdWxObE9pWmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yODYyZDEtMmNjOS00NTY1LTg2YzItMmJiNTU5N2EyNDM1
LzEvS2d6RVl3SElzZjFHT1Nrd0dQdWxObE9pWmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCupOFea
HTJhC9pYoT7LRb15VIpqAbXWoJyUaf5AodYOCybUAXOWaMXEBxrDgvi7UtOIBXol
5DBy5KgpgcY8Lbwg5aBPpn6iijxmtP8B6EZ39H6cG9BVldI53WtQk+X6eAOynYyv
dwqQZ3OTvyzpYIbDJXIJfJtqx+OA65cYL2YkAEa8XWcbQyut6snjsvQMkVUwYZTH
sjZfhdgJqc7bNZeRhMU7s0Q1am+EDn4FZGSTH7ivAaLCV1U8tW0Cp1m847+JXGPi
EADzTdgiTjM2pp2BKt6qDM/26Pbpf5DGEdf/89b7D3f4w9KVRUgXp9JT5UgdWpTD
MtUMd7snqyVK2w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:08 2026 by rpki-client