Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File:                     kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier:          4/GHScYgebJZzUvNYYqpECvNEsDuAO4+EPPhxtDPQE0=
Subject key identifier:   14:C7:F6:3F:19:E8:71:50:91:E2:17:89:21:07:02:E5:EC:B4:A3:CD
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer:       /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial:       019EC148B61F6D62C188279ECB490AD79930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 14:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:28 +0000
Files and hashes:         1: f_NbFcXhsPWXIxa4Q-RL2lQE9H8.roa (hash: r4M7joZLYltcoMhevwH4wLr16D2gCWd/Vhwm8RHpnDM=)
                          2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: s2TLU8COHsqXEVeipSdHBhswCWMFhxr7xpx1LRIZkdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:b6:1f:6d:62:c1:88:27:9e:cb:49:0a:d7:99:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
        Validity
            Not Before: Jun 13 14:00:28 2026 GMT
            Not After : Jun 14 14:00:28 2026 GMT
        Subject: CN=14c7f63f19e8715091e21789210702e5ecb4a3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:f9:c1:e8:81:2b:75:6c:6c:7c:56:73:5a:
                    fc:12:ec:20:cf:17:cf:ee:f2:9d:6e:e9:ff:42:b2:
                    54:f4:b4:23:51:46:f9:f7:e1:d5:0a:07:29:76:f6:
                    eb:45:6e:03:47:d1:fa:a3:ea:60:0d:1a:65:af:ce:
                    50:f6:39:eb:ae:af:fd:12:aa:db:84:14:d8:3c:79:
                    7a:58:9c:4c:a4:18:2e:22:58:ed:af:22:bb:07:f0:
                    53:4c:21:38:58:88:2f:91:bb:63:74:59:1d:e1:d9:
                    36:b9:3f:90:d6:2e:fa:bb:46:2b:0d:16:02:aa:7d:
                    71:42:d7:62:dc:8c:35:4e:a7:6e:c3:2a:74:e8:28:
                    0c:db:77:ed:57:c4:1a:1d:ca:aa:b5:0c:db:d5:76:
                    2e:c8:c2:5f:9d:fc:4b:52:e3:af:1d:be:99:e1:43:
                    6e:ee:d3:e9:5c:0e:c9:65:8f:7f:53:8d:8c:88:73:
                    7d:fd:00:41:1f:e3:21:e7:10:33:d6:25:ff:74:64:
                    63:0e:fa:8d:9e:bb:47:2a:f1:a1:bf:85:83:8f:ad:
                    03:ea:72:1d:1d:d5:87:fc:e3:e7:ea:1e:8d:b3:17:
                    ca:3b:26:0e:3f:60:91:99:49:4e:30:e1:35:dd:e1:
                    51:cb:cf:55:f4:f6:e1:8e:98:94:42:84:45:85:53:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C7:F6:3F:19:E8:71:50:91:E2:17:89:21:07:02:E5:EC:B4:A3:CD
            X509v3 Authority Key Identifier:
                keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:fe:14:ab:ca:39:fd:aa:42:61:0c:61:82:a3:63:1e:dd:17:
         52:2e:8c:b6:63:4e:bb:18:d2:2c:fc:f5:49:f0:dc:ff:2d:59:
         08:f1:5e:23:17:ce:91:ba:d3:3a:10:9c:40:9e:7a:7f:01:83:
         a8:a9:57:f2:fd:6c:c5:50:cb:21:98:94:09:a9:1d:06:d1:16:
         f8:f4:e1:49:ea:08:13:b8:37:bf:db:d7:0e:a4:b9:8e:48:61:
         a1:95:ad:b3:ba:7f:b2:92:19:a3:29:e5:ef:9e:53:9e:0b:44:
         6f:5a:6c:31:2f:b1:47:a4:90:bc:dd:42:40:3a:84:00:dd:97:
         40:0e:4a:aa:0a:b4:28:ca:d1:f5:36:5a:0c:f8:a9:12:40:3b:
         a3:90:8f:3d:c4:30:a6:37:fe:0d:ed:6f:71:24:d4:af:6b:9c:
         fa:49:67:c7:6d:04:07:39:0d:0a:07:e7:f0:f8:79:22:93:33:
         bb:a4:eb:1a:2d:5b:a2:f1:da:00:d9:2a:f5:51:f4:8d:30:f8:
         3e:bf:31:55:0f:12:67:7d:c0:87:22:e2:52:ac:67:01:6c:e5:
         7d:68:db:71:ed:4d:6a:e1:56:74:4e:3b:2a:4b:c9:5f:8c:61:
         bf:9a:b0:e4:dc:cd:78:ed:7b:3a:29:5b:f5:ef:cc:42:99:22:
         e8:5d:00:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSLYfbWLBiCeey0kK15kwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMjZiMTlmMGU5NTRkY2Y1ODE2ZmRmMzcxNjk0Yjc4NGRk
N2YzNjYwHhcNMjYwNjEzMTQwMDI4WhcNMjYwNjE0MTQwMDI4WjAzMTEwLwYDVQQD
EygxNGM3ZjYzZjE5ZTg3MTUwOTFlMjE3ODkyMTA3MDJlNWVjYjRhM2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+75weiBK3VsbHxWc1r8EuwgzxfP
7vKdbun/QrJU9LQjUUb59+HVCgcpdvbrRW4DR9H6o+pgDRplr85Q9jnrrq/9Eqrb
hBTYPHl6WJxMpBguIljtryK7B/BTTCE4WIgvkbtjdFkd4dk2uT+Q1i76u0YrDRYC
qn1xQtdi3Iw1Tqduwyp06CgM23ftV8QaHcqqtQzb1XYuyMJfnfxLUuOvHb6Z4UNu
7tPpXA7JZY9/U42MiHN9/QBBH+Mh5xAz1iX/dGRjDvqNnrtHKvGhv4WDj60D6nId
HdWH/OPn6h6NsxfKOyYOP2CRmUlOMOE13eFRy89V9PbhjpiUQoRFhVPR+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTH9j8Z6HFQkeIXiSEHAuXstKPNMB8GA1UdIwQY
MBaAFJEmsZ8OlU3PWBb983FpS3hN1/NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUt
ZDJlY2I2NDczYjIzLzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUtZDJlY2I2NDczYjIz
LzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAof4Uq8o5
/apCYQxhgqNjHt0XUi6MtmNOuxjSLPz1SfDc/y1ZCPFeIxfOkbrTOhCcQJ56fwGD
qKlX8v1sxVDLIZiUCakdBtEW+PThSeoIE7g3v9vXDqS5jkhhoZWts7p/spIZoynl
755TngtEb1psMS+xR6SQvN1CQDqEAN2XQA5Kqgq0KMrR9TZaDPipEkA7o5CPPcQw
pjf+De1vcSTUr2uc+klnx20EBzkNCgfn8Ph5IpMzu6TrGi1bovHaANkq9VH0jTD4
Pr8xVQ8SZ33AhyLiUqxnAWzlfWjbce1NauFWdE47KkvJX4xhv5qw5NzNeO17Oilb
9e/MQpki6F0A8A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:10 2026 by rpki-client