Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File:                     kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier:          Dj+8Du+GNwTGpPgQWJbY7bs18XKhHugqX9+XsWZhFhE=
Subject key identifier:   89:31:DC:C9:14:05:F3:CE:A5:21:A8:0C:5E:33:D1:DB:BE:35:26:3C
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer:       /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial:       019FA9AC1B0C3EBC13050676F357ED886454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number:          19F9
Signing time:             Tue 28 Jul 2026 17:00:56 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:56 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:56 +0000
Files and hashes:         1: Ey-dQQ-b6D2JxAtl1tAirq1PpoM.asa (hash: B5MNhEwcfTqjF8H4A+QQFdaliNoWUEp7gf/35pg9Rbk=)
                          2: TNljeYPXxYIj5lo4d5l5EQLTZdU.roa (hash: CfzLFBITnlNK1XZxNhkSFtNXwo43Z88uKiUP3w2UsN0=)
                          3: UxN_iPmj1i5VVwJh2wPj2iaUaVM.asa (hash: +kSZr95TCNO+Jxjrh8oERrLS0jlz5ECdtQ/K2vdi+cQ=)
                          4: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: vxKvAURSGITxQYrr8jeXYkFhbdlslhjVCFQvlsUibI8=)
                          5: pvrzZs8nm8ie9zDZhpBcHaIBCCY.asa (hash: iIYioZLzMA8MH9b2racO6xb3a/8R+kHNVUc/GDc8+W4=)
                          6: snlFadvdcM00ncJFWRG-pTa8eHA.roa (hash: 9LDuoi+waDnjJ5h6Bt5yAaxEDStiyfH1brajFG+wFiQ=)
                          7: ujd_58sugEeAoF5jMpUipoqtW4s.roa (hash: EUJlvM7IyZpw1wssBYGFhzm/HlXJCYuSLXzoCbLldiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:1b:0c:3e:bc:13:05:06:76:f3:57:ed:88:64:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
        Validity
            Not Before: Jul 28 17:00:56 2026 GMT
            Not After : Jul 29 17:00:56 2026 GMT
        Subject: CN=8931dcc91405f3cea521a80c5e33d1dbbe35263c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bb:81:94:a9:bb:3a:05:f4:b4:b7:95:73:f9:
                    31:97:19:07:4a:b8:7f:08:7d:92:7f:b6:68:f1:37:
                    f1:e1:5c:85:f2:4b:2d:dc:f4:07:ea:18:4a:b7:91:
                    9e:3a:a9:85:70:97:ef:db:c8:05:e2:71:8b:8f:07:
                    21:1d:4e:38:8d:06:26:77:1c:01:65:03:d0:8c:2c:
                    19:97:a2:7e:38:9c:51:0d:52:90:7b:c9:07:59:d8:
                    55:fa:c8:b6:92:d7:1e:2d:a3:a9:b9:34:cc:a3:91:
                    43:32:8f:20:b2:66:54:d7:2f:91:6f:4a:ed:4b:83:
                    e7:5b:1a:9c:ca:12:89:4a:50:11:ad:53:c9:97:f3:
                    c7:ad:c7:33:c3:6d:81:64:4b:ef:56:9f:53:81:5d:
                    c1:bd:90:7c:35:18:96:7b:3c:5e:01:ec:76:f0:ad:
                    70:45:fd:a6:6a:d5:af:b5:6f:02:3b:13:0d:3d:af:
                    6a:ba:6b:5b:d0:c0:72:f5:48:3a:f7:29:bb:55:b1:
                    6b:18:64:98:c2:58:50:12:7d:5f:97:65:1b:04:2b:
                    03:9e:96:f3:91:35:fe:78:1b:03:b4:8c:83:8f:77:
                    9e:94:62:b1:2f:93:ac:c0:94:62:b1:de:06:af:35:
                    05:bc:a1:92:20:59:cf:12:49:95:4f:a5:91:a6:53:
                    b5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:31:DC:C9:14:05:F3:CE:A5:21:A8:0C:5E:33:D1:DB:BE:35:26:3C
            X509v3 Authority Key Identifier:
                keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4c:99:2f:a7:24:57:79:d5:7a:a2:b0:9c:44:b2:74:b2:64:
         e5:ba:ba:12:12:94:f1:cb:98:9f:af:fc:1d:18:b3:1a:b2:f3:
         10:da:8c:14:cf:e9:67:7c:33:fa:0b:81:6e:76:ae:c0:b5:9d:
         1f:e1:d5:23:4a:da:57:68:07:03:6b:8a:f4:09:d7:e5:3e:00:
         b5:62:b5:7a:41:13:5e:95:dd:b6:2b:91:bd:76:7a:16:3c:e6:
         69:74:4b:40:78:bc:69:8e:15:d5:7c:7c:0b:49:33:34:72:79:
         9e:bb:9b:a7:2d:e7:17:52:b8:2f:80:a3:8f:11:1c:5c:cf:a9:
         62:a0:21:a9:80:ec:62:c0:99:74:05:14:32:e0:a3:bf:96:02:
         09:dc:48:a3:bf:cf:8b:47:06:37:03:c5:2d:9d:cf:e4:d4:2b:
         f7:48:ca:55:a5:ac:39:ae:31:b3:3c:13:36:69:12:a9:c9:00:
         66:98:0b:f0:5a:08:8c:c1:7a:8f:51:d4:a2:a1:ef:c0:b3:ae:
         d7:55:a8:ac:f3:e2:f3:6b:ad:15:62:c3:93:ee:81:5b:47:2d:
         72:76:e6:03:18:93:4d:db:05:30:fe:3d:21:a7:dc:c5:84:b0:
         b3:2e:07:26:88:40:d2:65:f4:7e:d8:8d:c9:8a:86:99:95:80:
         65:1b:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:11:26 2026 by rpki-client