Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
File:                     KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json)
Hash identifier:          sVtKXQofqS1Y9r6zqOkzw4Naxv827gZaCsjXzrjrwBM=
Subject key identifier:   87:76:86:D8:3D:06:16:71:26:C9:61:97:1C:94:D7:7F:E1:7C:87:E5
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Certificate issuer:       /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial:       019EBFFEF5A96D43579086F564EDF75F6020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
Manifest number:          1978
Signing time:             Sat 13 Jun 2026 08:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:17 +0000
Files and hashes:         1: 8Hj63DuSPA7Ht457MhBvt5rAzCo.roa (hash: /JX6zlbBh/f3Q4c+ifBYnU8yxbIOW6a8gYL/3LC86tc=)
                          2: 9DusrtcNuEKlX3-m9foPJH2szlI.roa (hash: b8raHEJQGNgJfwuoWcURy2P5Ad5oX4Bo6uvIPpzRudA=)
                          3: 9tcHbPB03Z8eEKZg676gB-TlqvI.roa (hash: 0EY6tBHpX7uJe3hmSPPM5eq+qwso1DAT1la3CCjjUOs=)
                          4: EO_HO_nFyWVTdx6SDz8m4wUOlnI.roa (hash: gFB+9g7cOaJTdIFNt34NfO0b7Xz0U9fpgCXRfQJDw48=)
                          5: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: g1hEXv0wUQuhs8E1E9vtkD2Lt0mBPx4ZixGaIE/HFUk=)
                          6: LcfjvM3VKxWMWMCxo2UYzOGhdNM.roa (hash: qwiD82k0GJBEu4EGgOxSBm88SaDWlnEZJMmEJL+CMw8=)
                          7: LgqwiddErCeqmONalEAccIe_9ZI.roa (hash: vUvF2iqoGKYdCngh26+3XZdI1nh5UcCaB/cJvH2Dedw=)
                          8: X_WvLqJE85_JLPG8u8QOORQ8vrY.roa (hash: 3lJYcwNuNWaK/TxwzxDQE8C+SHvEtkNNzsxVBp4XmNA=)
                          9: fNYW0E0mrdFedNKBb3zR-gEkNFA.roa (hash: nh3ZGXFkTGVxlA9H+fmw3V84hDZ1pU+3aDOZwNEcWRI=)
                          10: mzyrfk0_SKXJ4jm3l-g7rtem-Ng.roa (hash: 64Bq4BjaquUNa/q+gUB1JEszW2wTR9StXwwTroa+sNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:fe:f5:a9:6d:43:57:90:86:f5:64:ed:f7:5f:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
        Validity
            Not Before: Jun 13 08:00:17 2026 GMT
            Not After : Jun 14 08:00:17 2026 GMT
        Subject: CN=877686d83d06167126c961971c94d77fe17c87e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:a2:61:8f:cd:87:6b:74:f8:f9:52:1f:f6:
                    fa:46:0f:1f:bd:1d:a4:9b:8a:ec:df:7a:8c:3d:aa:
                    76:e4:03:e7:2b:6c:b8:6d:92:f6:8d:f9:af:a4:1d:
                    27:d4:3c:e8:1a:48:f9:d0:2a:a6:fa:37:0f:12:8a:
                    73:23:36:86:56:e4:4b:ff:9c:8c:7c:3e:13:56:55:
                    51:3a:65:91:1f:0f:78:5b:fd:b1:8e:ca:d1:62:2d:
                    99:9a:bd:a1:c4:95:b8:d3:72:7a:dc:e9:c6:3c:92:
                    14:13:93:c1:7a:41:40:3b:83:e7:77:f1:d8:35:01:
                    5c:ad:fd:11:42:08:9c:79:14:66:a0:32:a1:90:fc:
                    d7:73:c0:ab:e8:45:e4:01:3f:08:96:25:2c:ff:f5:
                    bf:f7:f2:89:57:bc:29:fa:d9:ee:4d:5c:56:ea:2d:
                    29:74:60:20:de:f9:4a:f9:56:94:22:b8:62:f4:f5:
                    ca:f6:7f:c3:b5:16:56:0c:53:b2:0f:52:4e:1f:6b:
                    87:86:29:2e:4a:82:54:3a:09:df:2a:15:0c:7e:7e:
                    7f:4e:e3:57:eb:ed:08:d7:54:a0:3c:af:c1:82:80:
                    15:d9:27:eb:a2:92:6d:b1:1d:81:db:cf:cf:e9:ca:
                    a4:39:88:26:72:61:23:ba:4b:cb:70:66:8e:72:81:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:76:86:D8:3D:06:16:71:26:C9:61:97:1C:94:D7:7F:E1:7C:87:E5
            X509v3 Authority Key Identifier:
                keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d4:b8:a7:c6:c2:66:d7:d2:04:cb:c7:3a:10:ae:94:86:b3:
         90:ff:ee:5a:8f:d0:53:45:3e:53:38:c3:c4:3c:76:37:42:14:
         51:76:7c:30:d8:7c:76:e4:bb:16:0a:69:ff:b4:f3:5b:1a:60:
         29:75:63:56:76:0c:0e:8f:70:05:12:48:44:50:a3:1d:1a:3a:
         a9:0c:53:58:d9:24:bc:e2:2d:03:1d:06:a7:fd:6c:69:94:d6:
         39:d4:5f:a3:81:d0:f7:1e:a0:26:6c:1d:ee:98:c7:22:16:8e:
         ef:fc:2d:94:25:95:7c:39:0c:4a:d5:95:60:a5:76:e2:03:33:
         07:4d:f1:5e:e8:24:b1:7a:c0:72:a4:9d:de:e2:20:6c:8f:a4:
         90:02:07:30:2d:60:88:55:dd:3b:8c:d7:ab:c5:30:87:01:00:
         14:f2:39:7b:45:44:ed:19:3c:eb:f4:a4:92:24:c9:60:bd:e5:
         7a:13:39:e9:1a:fc:c4:a7:9b:5b:88:da:22:b1:72:86:7b:13:
         f2:64:1c:7f:26:b1:8b:02:10:d1:6a:1e:54:2b:a3:d3:0d:5f:
         8c:cc:df:60:13:43:2b:90:9b:82:f3:7b:7d:39:af:37:27:12:
         df:4c:30:f2:ad:6d:d4:51:2b:b0:a2:84:da:64:c1:c1:6a:cf:
         7a:3d:ca:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//vWpbUNXkIb1ZO33X2AgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy
ZjM5NzEwHhcNMjYwNjEzMDgwMDE3WhcNMjYwNjE0MDgwMDE3WjAzMTEwLwYDVQQD
Eyg4Nzc2ODZkODNkMDYxNjcxMjZjOTYxOTcxYzk0ZDc3ZmUxN2M4N2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy+iYY/Nh2t0+PlSH/b6Rg8fvR2k
m4rs33qMPap25APnK2y4bZL2jfmvpB0n1DzoGkj50Cqm+jcPEopzIzaGVuRL/5yM
fD4TVlVROmWRHw94W/2xjsrRYi2Zmr2hxJW403J63OnGPJIUE5PBekFAO4Pnd/HY
NQFcrf0RQgiceRRmoDKhkPzXc8Cr6EXkAT8IliUs//W/9/KJV7wp+tnuTVxW6i0p
dGAg3vlK+VaUIrhi9PXK9n/DtRZWDFOyD1JOH2uHhikuSoJUOgnfKhUMfn5/TuNX
6+0I11SgPK/BgoAV2SfropJtsR2B28/P6cqkOYgmcmEjukvLcGaOcoEUfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFId2htg9BhZxJslhlxyU13/hfIflMB8GA1UdIwQY
MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt
NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2
LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdS4p8bC
ZtfSBMvHOhCulIazkP/uWo/QU0U+UzjDxDx2N0IUUXZ8MNh8duS7Fgpp/7TzWxpg
KXVjVnYMDo9wBRJIRFCjHRo6qQxTWNkkvOItAx0Gp/1saZTWOdRfo4HQ9x6gJmwd
7pjHIhaO7/wtlCWVfDkMStWVYKV24gMzB03xXugksXrAcqSd3uIgbI+kkAIHMC1g
iFXdO4zXq8UwhwEAFPI5e0VE7Rk86/SkkiTJYL3lehM56Rr8xKebW4jaIrFyhnsT
8mQcfyaxiwIQ0WoeVCuj0w1fjMzfYBNDK5CbgvN7fTmvNycS30ww8q1t1FErsKKE
2mTBwWrPej3KTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:08:57 2026 by rpki-client