Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File:                     kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier:          sxfwJyN9PlaGJNZQuOGG4UR/zyH/SPnES22opkVAnVA=
Subject key identifier:   B1:14:69:88:B1:FC:28:BE:D5:D0:53:14:7A:48:B4:5E:76:E2:F8:A5
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer:       /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial:       019EC035D649C32E60BF45713717BCCF06D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number:          1984
Signing time:             Sat 13 Jun 2026 09:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:13 +0000
Files and hashes:         1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=)
                          2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=)
                          3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=)
                          4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=)
                          5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=)
                          6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=)
                          7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=)
                          8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: 8odsWZW4VaB6L/2k6MI9J1k2Pxpzvc15ghcRJqBzL5E=)
                          9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=)
                          10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:35:d6:49:c3:2e:60:bf:45:71:37:17:bc:cf:06:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
        Validity
            Not Before: Jun 13 09:00:13 2026 GMT
            Not After : Jun 14 09:00:13 2026 GMT
        Subject: CN=b1146988b1fc28bed5d053147a48b45e76e2f8a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:ce:d0:62:cd:0b:a9:e6:bf:0c:e9:5b:b0:
                    00:0e:ee:84:33:d8:81:a8:ed:7d:a9:33:ee:b3:8c:
                    43:96:63:ed:7e:af:c4:ff:96:51:04:55:86:40:ef:
                    be:62:a5:5d:f9:69:83:fc:7b:e5:41:cf:9c:d9:1b:
                    b8:c4:b3:a2:e4:10:6e:27:3e:92:b1:2d:6a:3d:bd:
                    15:78:46:70:de:54:db:1b:13:25:82:f4:5e:7f:a3:
                    74:e1:7e:81:ce:37:81:51:de:10:2b:09:e3:4f:33:
                    ab:14:28:e1:27:03:42:b7:49:c0:ef:38:48:d5:c7:
                    42:97:1c:d3:89:9f:47:ec:ab:20:fa:be:c7:8a:e1:
                    6d:0c:83:34:c8:51:31:ca:dd:bc:42:bf:c4:34:e5:
                    38:62:60:44:c8:20:a1:41:e4:c5:2d:cb:48:5d:01:
                    6f:63:0b:03:c6:38:34:38:56:0f:d3:47:7a:f3:c8:
                    15:45:b6:a3:68:6a:12:ed:3a:96:6f:b5:95:41:f5:
                    3e:2e:6d:95:0b:ae:ea:e6:67:71:85:e9:cb:46:a7:
                    66:b8:d7:50:ee:37:ce:6c:b6:21:22:ee:8f:77:a3:
                    7d:08:e7:24:1e:a4:c8:31:e4:e7:fd:66:17:45:13:
                    ce:ad:01:0c:2d:f9:08:84:77:e2:81:2e:09:35:73:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:14:69:88:B1:FC:28:BE:D5:D0:53:14:7A:48:B4:5E:76:E2:F8:A5
            X509v3 Authority Key Identifier:
                keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:2d:de:31:71:5a:e2:e6:ff:6f:92:fb:e3:dc:65:9c:53:7c:
         76:3f:d2:80:1c:fb:db:05:86:de:07:fc:5c:9e:74:0b:dd:b9:
         7b:22:69:17:a1:ec:d0:50:a0:43:29:94:fd:d9:41:ee:2c:4f:
         56:d2:8d:20:82:19:16:0e:0c:87:30:e2:fd:84:e0:da:d1:50:
         d0:0a:07:70:21:2c:da:58:de:03:1f:cf:38:18:21:b5:32:88:
         b3:45:0b:c9:b1:e4:03:2e:a4:19:9d:05:55:38:4e:79:61:b6:
         ce:24:fc:9c:b3:56:94:97:07:97:2c:75:cb:42:b7:ce:59:6f:
         b0:fa:63:1e:0c:b0:9f:80:c3:09:4b:3b:1e:3f:b6:68:50:dd:
         16:f1:2e:f7:b0:33:19:0d:5b:d3:03:bd:39:61:23:53:01:8e:
         78:8c:5d:46:13:d0:ca:00:21:05:0d:d7:be:c2:43:dd:1a:db:
         2a:36:0f:e9:a6:c3:b0:96:ef:38:1f:85:f7:ca:39:18:15:26:
         22:cd:b1:8c:db:b4:a3:b0:59:fb:f9:c0:5e:67:c4:20:dc:a4:
         f1:d6:8d:cc:94:73:9a:66:c2:15:07:a9:9a:0f:27:5b:7b:7a:
         f6:14:5a:f8:38:7a:c4:3d:c4:87:8b:db:6b:f4:1c:1c:74:c3:
         3e:31:99:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANdZJwy5gv0VxNxe8zwbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5
ZTUwNTUwHhcNMjYwNjEzMDkwMDEzWhcNMjYwNjE0MDkwMDEzWjAzMTEwLwYDVQQD
EyhiMTE0Njk4OGIxZmMyOGJlZDVkMDUzMTQ3YTQ4YjQ1ZTc2ZTJmOGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRLO0GLNC6nmvwzpW7AADu6EM9iB
qO19qTPus4xDlmPtfq/E/5ZRBFWGQO++YqVd+WmD/HvlQc+c2Ru4xLOi5BBuJz6S
sS1qPb0VeEZw3lTbGxMlgvRef6N04X6BzjeBUd4QKwnjTzOrFCjhJwNCt0nA7zhI
1cdClxzTiZ9H7Ksg+r7HiuFtDIM0yFExyt28Qr/ENOU4YmBEyCChQeTFLctIXQFv
YwsDxjg0OFYP00d688gVRbajaGoS7TqWb7WVQfU+Lm2VC67q5mdxhenLRqdmuNdQ
7jfObLYhIu6Pd6N9COckHqTIMeTn/WYXRRPOrQEMLfkIhHfigS4JNXNENwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEUaYix/Ci+1dBTFHpItF524vilMB8GA1UdIwQY
MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt
OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy
LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPi3eMXFa
4ub/b5L749xlnFN8dj/SgBz72wWG3gf8XJ50C925eyJpF6Hs0FCgQymU/dlB7ixP
VtKNIIIZFg4MhzDi/YTg2tFQ0AoHcCEs2ljeAx/POBghtTKIs0ULybHkAy6kGZ0F
VThOeWG2ziT8nLNWlJcHlyx1y0K3zllvsPpjHgywn4DDCUs7Hj+2aFDdFvEu97Az
GQ1b0wO9OWEjUwGOeIxdRhPQygAhBQ3XvsJD3RrbKjYP6abDsJbvOB+F98o5GBUm
Is2xjNu0o7BZ+/nAXmfEINyk8daNzJRzmmbCFQepmg8nW3t69hRa+Dh6xD3Eh4vb
a/QcHHTDPjGZKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:03:22 2026 by rpki-client