Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File:                     kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier:          jJkkZJ2rw+7n/aDqDUT3NFI1rGMyWtDWrTFkNun1s0g=
Subject key identifier:   B5:7B:DC:A5:F5:7E:84:CA:BD:99:84:75:0C:7A:AD:7D:7E:4B:FA:C7
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer:       /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial:       019EC2C9B8F32DEFD8E1CA9B3358E5E83044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 21:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:00 +0000
Files and hashes:         1: SggDrxFFsWWs12xC5aQkzP-tlSU.roa (hash: 9cLRIhlE0/G5tYsZFx8+yzpMIrF34vwAUkKOhMbaUZc=)
                          2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: gP4GpdNWGP2PAYC7wsccXCGnuzqml5mMHpPMgpHwDb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:b8:f3:2d:ef:d8:e1:ca:9b:33:58:e5:e8:30:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
        Validity
            Not Before: Jun 13 21:01:00 2026 GMT
            Not After : Jun 14 21:01:00 2026 GMT
        Subject: CN=b57bdca5f57e84cabd9984750c7aad7d7e4bfac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:9d:02:12:1f:7f:7a:b2:7f:04:4d:1f:07:
                    2c:ef:02:b4:8c:f6:8e:14:05:cc:21:f0:78:3e:a2:
                    6d:ce:fe:8f:bb:a9:06:9c:4d:31:47:5e:bf:29:94:
                    27:f1:48:3e:ab:28:d4:dc:df:55:a0:a6:02:f6:d8:
                    d1:40:3e:e5:af:7a:c3:c2:9c:6e:68:13:1f:68:1d:
                    b6:a9:ba:75:02:ee:9b:9c:42:09:5f:8b:f8:5e:0d:
                    de:6d:2e:69:d5:fa:0f:6c:f4:92:5c:e7:d4:66:2d:
                    6e:c9:45:07:fd:31:d9:ae:a6:f9:17:e5:e5:e1:6f:
                    3a:de:26:cc:1a:d6:80:10:60:b1:67:e1:53:71:26:
                    14:5c:cb:8c:c1:0a:12:53:90:81:81:46:53:0d:f4:
                    58:52:aa:07:93:8e:c3:bd:31:ce:32:f2:86:19:f0:
                    38:20:1f:00:4b:c6:49:e0:17:63:b8:aa:13:a8:74:
                    09:8f:f3:ca:46:08:52:0d:ac:d5:9c:d2:42:1b:3c:
                    2f:92:db:9d:f3:23:a5:ca:10:9c:7f:86:80:32:a7:
                    c9:b9:8c:87:b9:1d:6d:38:4f:48:0b:24:3c:c3:3d:
                    b8:70:ca:06:f1:b2:a6:1c:a9:ea:3a:96:0a:30:a0:
                    fa:b4:13:ff:2a:d4:d8:26:98:8f:ef:20:32:55:44:
                    e8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7B:DC:A5:F5:7E:84:CA:BD:99:84:75:0C:7A:AD:7D:7E:4B:FA:C7
            X509v3 Authority Key Identifier:
                keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:00:ab:fc:b8:a2:12:db:0c:86:8f:81:6b:5c:b4:01:95:7c:
         13:55:cd:1f:6b:17:77:07:8d:5b:3a:4e:5d:cb:60:69:f7:c1:
         c7:b5:26:f1:9e:c7:29:02:3a:ac:c3:50:e4:b6:20:23:13:df:
         47:43:12:99:de:b3:2a:50:a2:f4:58:96:8b:82:59:ab:a5:ab:
         6b:1a:45:2b:14:54:04:33:4e:66:8d:f6:31:bf:9c:b4:cd:cf:
         45:6b:3a:29:9f:d2:c7:73:91:09:44:2a:f7:9b:49:7e:b9:6b:
         85:09:fb:02:0f:11:fb:48:f9:77:8e:60:20:1b:f5:43:17:c8:
         36:69:c6:69:97:4d:98:c8:09:2a:ca:c2:11:cd:c7:60:8e:55:
         0c:37:cd:53:73:5d:0c:66:5a:49:64:70:78:b7:98:a4:b0:5e:
         71:b6:fc:61:a7:c6:c7:8f:e6:ec:8f:e4:36:90:e6:d1:af:db:
         58:63:82:e2:a6:ff:8c:ad:a8:cf:ec:61:8b:f5:95:28:a5:b8:
         ef:2c:4d:5e:c9:a1:7b:d0:0a:1e:8f:5d:0b:35:24:2f:ba:d9:
         a6:51:71:2a:c5:b6:bf:47:39:c6:5f:ae:0f:2b:a4:b5:f2:e1:
         45:53:93:e7:7f:d4:42:45:2a:08:01:a0:46:06:12:27:a3:e7:
         24:58:17:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CybjzLe/Y4cqbM1jl6DBEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxODMxNmFiNGVhMTNlYmI1NDU2MGMxYTY3MDQyZDQ3ZTk2
NmQ4MjMwHhcNMjYwNjEzMjEwMTAwWhcNMjYwNjE0MjEwMTAwWjAzMTEwLwYDVQQD
EyhiNTdiZGNhNWY1N2U4NGNhYmQ5OTg0NzUwYzdhYWQ3ZDdlNGJmYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQKdAhIff3qyfwRNHwcs7wK0jPaO
FAXMIfB4PqJtzv6Pu6kGnE0xR16/KZQn8Ug+qyjU3N9VoKYC9tjRQD7lr3rDwpxu
aBMfaB22qbp1Au6bnEIJX4v4Xg3ebS5p1foPbPSSXOfUZi1uyUUH/THZrqb5F+Xl
4W863ibMGtaAEGCxZ+FTcSYUXMuMwQoSU5CBgUZTDfRYUqoHk47DvTHOMvKGGfA4
IB8AS8ZJ4BdjuKoTqHQJj/PKRghSDazVnNJCGzwvktud8yOlyhCcf4aAMqfJuYyH
uR1tOE9ICyQ8wz24cMoG8bKmHKnqOpYKMKD6tBP/KtTYJpiP7yAyVUTolQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLV73KX1foTKvZmEdQx6rX1+S/rHMB8GA1UdIwQY
MBaAFJGDFqtOoT67VFYMGmcELUfpZtgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMt
OWUzY2QwZDlkNzdhLzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMtOWUzY2QwZDlkNzdh
LzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxQCr/Lii
EtsMho+Ba1y0AZV8E1XNH2sXdweNWzpOXctgaffBx7Um8Z7HKQI6rMNQ5LYgIxPf
R0MSmd6zKlCi9FiWi4JZq6WraxpFKxRUBDNOZo32Mb+ctM3PRWs6KZ/Sx3ORCUQq
95tJfrlrhQn7Ag8R+0j5d45gIBv1QxfINmnGaZdNmMgJKsrCEc3HYI5VDDfNU3Nd
DGZaSWRweLeYpLBecbb8YafGx4/m7I/kNpDm0a/bWGOC4qb/jK2oz+xhi/WVKKW4
7yxNXsmhe9AKHo9dCzUkL7rZplFxKsW2v0c5xl+uDyuktfLhRVOT53/UQkUqCAGg
RgYSJ6PnJFgXDw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:54:10 2026 by rpki-client