Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File:                     KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier:          wBO9DbJgyVH1CdM3b3ZSt04g5vTO66b9H5IcWGnPD2o=
Subject key identifier:   AB:32:11:A8:F2:A0:71:8B:37:FD:85:82:65:AC:C3:8A:E7:56:0A:42
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer:       /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial:       019EC25C81CE74F1ADC00C361445F293B038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 19:01:42 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:42 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:42 +0000
Files and hashes:         1: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: wXFXKrQxMy4SE/eHGsFsKDTHqIThse/7KSU+o+Uupiw=)
                          2: PHk_vBlGAMsxS-MnrekIlyqTI-4.roa (hash: DfXZCDYGxK8xf8JFedzWYQFF9T3pi36VwRR9xAmGXEk=)
                          3: weNArfvB6aIBhliGWgRmku9NM4k.roa (hash: 5cqXzpfVcXD0jTHKSY2NMKnFRtchriM7ulhLtiSinGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:81:ce:74:f1:ad:c0:0c:36:14:45:f2:93:b0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
        Validity
            Not Before: Jun 13 19:01:42 2026 GMT
            Not After : Jun 14 19:01:42 2026 GMT
        Subject: CN=ab3211a8f2a0718b37fd858265acc38ae7560a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:73:2c:38:ce:e4:c9:86:98:9a:1b:04:12:ca:
                    ee:e5:67:11:6a:cb:35:a0:bc:28:07:c9:8c:73:d8:
                    87:81:48:99:28:a2:94:5e:57:8c:cd:b9:f4:a2:51:
                    18:76:62:58:a4:a0:fb:10:2c:26:3d:cd:f2:b4:8b:
                    0f:4a:be:39:2a:87:68:b1:19:b3:e5:92:ac:33:33:
                    c0:99:59:9e:c3:2c:24:f1:6f:a6:69:8c:28:96:d9:
                    9f:f2:34:6f:63:5d:09:55:ef:df:a0:d4:6c:7e:99:
                    8e:0f:dc:7f:80:17:52:b8:9a:1e:f0:6e:d3:25:ce:
                    fa:38:11:62:eb:7d:39:62:49:1f:f3:ed:69:e1:1e:
                    35:00:27:c8:e3:0f:45:d9:28:62:3f:02:a5:c6:97:
                    58:0c:69:90:a4:2c:f3:5c:a6:a8:ce:62:db:51:ff:
                    03:fb:fe:98:df:a2:46:9a:f6:8b:dd:6b:4a:eb:6a:
                    7d:56:94:9a:67:6f:27:fb:49:eb:77:9d:55:52:ce:
                    a4:65:19:55:4c:88:cd:32:24:e7:4d:72:73:83:d2:
                    0e:6f:ca:47:d8:78:a0:8b:3d:04:c4:c2:22:3e:6b:
                    d5:b3:39:e1:52:86:e9:eb:15:84:f1:2a:bc:30:29:
                    0d:f4:3d:ff:96:00:f8:b4:3a:d9:f0:77:1b:d4:0f:
                    0c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:32:11:A8:F2:A0:71:8B:37:FD:85:82:65:AC:C3:8A:E7:56:0A:42
            X509v3 Authority Key Identifier:
                keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ac:e0:6c:ef:6b:18:45:b4:69:2a:de:80:b0:ca:c8:63:0d:
         71:61:89:f0:f3:d9:ae:ff:2c:4e:08:8d:6a:39:9e:16:da:d0:
         c2:2a:08:f2:66:7c:1b:16:95:fb:5e:49:c9:32:4e:e3:d9:88:
         4e:91:c3:69:1a:7c:e5:40:40:42:6e:e1:48:07:61:10:36:f9:
         26:94:2c:b5:fc:f5:27:ab:3d:cf:35:70:c7:7f:22:cc:8d:8b:
         47:02:47:a0:4a:9a:91:a5:4a:c6:81:8b:be:8e:d3:90:bb:9d:
         60:79:6d:eb:50:2e:c1:43:6e:bb:8d:f8:bf:3f:44:dc:04:3d:
         87:f5:e7:15:2d:23:67:dc:28:20:c2:57:05:32:2c:38:f1:16:
         d5:f2:7f:b8:53:0d:14:c4:37:af:31:4e:fd:10:98:3e:0b:80:
         70:1f:72:47:f0:0b:0b:77:69:4f:34:b2:a7:01:7a:35:b8:6d:
         ff:32:de:3c:96:70:6f:16:67:21:66:99:fc:ae:75:3f:e8:5d:
         d5:06:50:56:f3:e6:e1:e1:77:02:ae:71:c6:71:86:83:73:2c:
         7a:27:fe:1f:bf:59:7c:d1:df:80:39:ee:cd:a1:58:75:3a:a3:
         1a:74:67:59:96:a4:73:78:e1:81:5c:e4:9f:f0:8c:ac:1f:74:
         38:d9:a1:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CXIHOdPGtwAw2FEXyk7A4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNDQ3MjMzNmM5ZDAyYTQ4OGNkZDc3NTM0ZDY1ZmIxNDY1
ZWMwOWEwHhcNMjYwNjEzMTkwMTQyWhcNMjYwNjE0MTkwMTQyWjAzMTEwLwYDVQQD
EyhhYjMyMTFhOGYyYTA3MThiMzdmZDg1ODI2NWFjYzM4YWU3NTYwYTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73MsOM7kyYaYmhsEEsru5WcRass1
oLwoB8mMc9iHgUiZKKKUXleMzbn0olEYdmJYpKD7ECwmPc3ytIsPSr45KodosRmz
5ZKsMzPAmVmewywk8W+maYwoltmf8jRvY10JVe/foNRsfpmOD9x/gBdSuJoe8G7T
Jc76OBFi6305Ykkf8+1p4R41ACfI4w9F2ShiPwKlxpdYDGmQpCzzXKaozmLbUf8D
+/6Y36JGmvaL3WtK62p9VpSaZ28n+0nrd51VUs6kZRlVTIjNMiTnTXJzg9IOb8pH
2Higiz0ExMIiPmvVsznhUobp6xWE8Sq8MCkN9D3/lgD4tDrZ8Hcb1A8MnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsyEajyoHGLN/2FgmWsw4rnVgpCMB8GA1UdIwQY
MBaAFCpEcjNsnQKkiM3XdTTWX7FGXsCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUt
MDA4NmQwMjM4NWQ2LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUtMDA4NmQwMjM4NWQ2
LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqzgbO9r
GEW0aSregLDKyGMNcWGJ8PPZrv8sTgiNajmeFtrQwioI8mZ8GxaV+15JyTJO49mI
TpHDaRp85UBAQm7hSAdhEDb5JpQstfz1J6s9zzVwx38izI2LRwJHoEqakaVKxoGL
vo7TkLudYHlt61AuwUNuu434vz9E3AQ9h/XnFS0jZ9woIMJXBTIsOPEW1fJ/uFMN
FMQ3rzFO/RCYPguAcB9yR/ALC3dpTzSypwF6Nbht/zLePJZwbxZnIWaZ/K51P+hd
1QZQVvPm4eF3Aq5xxnGGg3Mseif+H79ZfNHfgDnuzaFYdTqjGnRnWZakc3jhgVzk
n/CMrB90ONmhoQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:31:31 2026 by rpki-client