Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File:                     klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier:          gnkJ4ypNN0SyLtA7kVtdrkI0PSIV/xPheZ3AQN7oVc0=
Subject key identifier:   A7:6C:C9:AB:BD:CA:5E:B5:FA:99:25:E5:3F:02:1C:C4:59:4A:72:B2
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer:       /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial:       019EC1EDC39E0E1946555DA0217C6DB2F475
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 17:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:45 +0000
Files and hashes:         1: 8JbX4W9CpZR4sp8oXbshsMu3qhg.roa (hash: hCHQyL16C72+1THFmVb/zaNecTBJgYxVKSF0WwCJuaU=)
                          2: AVx1s96DRHZcCwdlQg5COsBPl7g.asa (hash: wYwV0iDMhs5FKfv+LLpy2aNRbVxO/Y+rGm83NlQ+S24=)
                          3: BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa (hash: ube55hCllmSHhMFruM84ELj1ZKtITmMvONboq60emvo=)
                          4: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: qSO7JvgVx2G1Wyf9in/4Ic3IpP4xnVvhI2w3DbzO8xY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:c3:9e:0e:19:46:55:5d:a0:21:7c:6d:b2:f4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
        Validity
            Not Before: Jun 13 17:00:45 2026 GMT
            Not After : Jun 14 17:00:45 2026 GMT
        Subject: CN=a76cc9abbdca5eb5fa9925e53f021cc4594a72b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:5c:ea:cf:56:7f:a5:c5:bb:82:e7:60:9a:
                    54:04:6c:ff:15:92:5b:6f:ff:99:88:c7:66:4f:f7:
                    5f:bf:72:cc:5c:e9:5c:f2:4d:c4:22:a6:0a:25:bb:
                    a9:88:9e:05:63:7a:29:da:08:b7:91:15:9f:0f:8d:
                    33:b9:fb:84:a5:7e:4c:cc:0a:52:e8:ba:a8:45:1f:
                    8a:fc:af:58:59:12:55:b5:0e:eb:96:61:d2:ab:d6:
                    a7:92:ec:68:6a:dd:4e:06:88:c7:ec:25:8d:0d:48:
                    e9:58:b3:56:7a:23:2e:ff:dd:0a:1b:db:ee:90:48:
                    44:99:c1:c7:1e:3d:99:cf:d7:36:46:9f:57:cd:47:
                    9c:95:28:af:22:2a:a7:6c:21:fc:0d:34:22:b6:93:
                    17:00:80:0d:29:e8:25:9c:e8:55:d7:b7:6b:45:50:
                    84:35:24:5c:c1:0c:21:dd:bd:43:0d:94:66:be:d2:
                    e9:22:54:27:d2:14:72:4b:e9:16:fd:a6:37:bd:19:
                    6f:6c:54:c6:c0:0e:af:31:e1:b4:8a:4d:fd:75:d2:
                    4f:c8:8f:4e:db:f0:55:ea:eb:45:7c:f0:a0:7e:53:
                    3e:e3:fe:4e:f7:4d:09:1b:4d:34:bf:70:74:ab:27:
                    3d:fc:28:3b:c9:ac:68:6e:25:4c:62:bf:57:93:aa:
                    74:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6C:C9:AB:BD:CA:5E:B5:FA:99:25:E5:3F:02:1C:C4:59:4A:72:B2
            X509v3 Authority Key Identifier:
                keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:99:46:13:5f:d7:8c:6d:a9:11:69:f3:25:b6:6a:06:63:95:
         89:9c:23:0f:94:c8:78:cb:d4:56:26:ce:a3:8e:48:6a:a4:22:
         8e:d1:1b:84:cd:dc:51:0b:c3:3c:e0:e8:3c:ea:cc:2f:a9:39:
         55:1f:bf:ed:93:b4:6b:98:a5:28:2f:4f:8f:2d:92:1c:e2:20:
         fb:2f:6d:91:a5:cd:98:5a:31:be:e9:dd:36:00:ed:31:4d:e5:
         54:ad:ba:eb:93:3b:b4:6d:c2:97:de:42:c2:91:22:57:17:67:
         dc:14:7b:eb:a8:00:1b:67:e9:fd:a7:54:f1:2b:dd:a2:ec:92:
         7f:34:f4:b5:19:8b:4c:39:23:84:f3:66:19:ce:65:11:8f:e7:
         88:c4:42:e5:11:d1:c8:5c:bd:71:63:db:d1:14:44:26:39:31:
         d6:5b:12:a6:f1:ca:e8:86:90:a7:b7:e2:a6:8b:31:f8:e4:9a:
         f0:2f:9e:cb:28:f4:51:ad:89:b0:7d:fb:cf:0c:37:84:72:d9:
         50:6d:55:f1:a8:cf:81:25:4b:24:c1:da:c3:7b:e0:e4:b4:51:
         01:a2:b0:76:f2:9c:10:c8:cf:fc:a2:93:c9:eb:c5:90:bc:07:
         64:b0:71:c9:d7:17:ff:33:40:50:ca:91:b2:94:38:80:38:2a:
         ad:e8:88:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7B7cOeDhlGVV2gIXxtsvR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTEwYTY4NzFjMjliYzAyOTIwNjhhOWI3MmRjMzRmZjgx
YjRmYzcwHhcNMjYwNjEzMTcwMDQ1WhcNMjYwNjE0MTcwMDQ1WjAzMTEwLwYDVQQD
EyhhNzZjYzlhYmJkY2E1ZWI1ZmE5OTI1ZTUzZjAyMWNjNDU5NGE3MmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJVc6s9Wf6XFu4LnYJpUBGz/FZJb
b/+ZiMdmT/dfv3LMXOlc8k3EIqYKJbupiJ4FY3op2gi3kRWfD40zufuEpX5MzApS
6LqoRR+K/K9YWRJVtQ7rlmHSq9ankuxoat1OBojH7CWNDUjpWLNWeiMu/90KG9vu
kEhEmcHHHj2Zz9c2Rp9XzUeclSivIiqnbCH8DTQitpMXAIANKeglnOhV17drRVCE
NSRcwQwh3b1DDZRmvtLpIlQn0hRyS+kW/aY3vRlvbFTGwA6vMeG0ik39ddJPyI9O
2/BV6utFfPCgflM+4/5O900JG000v3B0qyc9/Cg7yaxobiVMYr9Xk6p0CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdsyau9yl61+pkl5T8CHMRZSnKyMB8GA1UdIwQY
MBaAFJJRCmhxwpvAKSBoqbctw0/4G0/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZGM3MDMtMTYzMS00MGY4LTkwYzUt
MThhMzBjMzAyOTBkLzEva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84ZGM3MDMtMTYzMS00MGY4LTkwYzUtMThhMzBjMzAyOTBk
LzEva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHplGE1/X
jG2pEWnzJbZqBmOViZwjD5TIeMvUVibOo45IaqQijtEbhM3cUQvDPODoPOrML6k5
VR+/7ZO0a5ilKC9Pjy2SHOIg+y9tkaXNmFoxvundNgDtMU3lVK2665M7tG3Cl95C
wpEiVxdn3BR766gAG2fp/adU8SvdouySfzT0tRmLTDkjhPNmGc5lEY/niMRC5RHR
yFy9cWPb0RREJjkx1lsSpvHK6IaQp7fiposx+OSa8C+eyyj0Ua2JsH37zww3hHLZ
UG1V8ajPgSVLJMHaw3vg5LRRAaKwdvKcEMjP/KKTyevFkLwHZLBxydcX/zNAUMqR
spQ4gDgqreiIdw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:48:10 2026 by rpki-client