Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File:                     kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier:          Mv933X524pdxtQklAlKlmJMlB1vLBS/cZt/q9v+9bu4=
Subject key identifier:   9D:0F:B8:5E:E1:D6:85:63:BD:62:70:27:2C:C2:FB:1A:50:AE:43:99
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer:       /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial:       01A0D502BDE9B5B8DA1457F0FE5B831FBB67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number:          1A94
Signing time:             Thu 24 Sep 2026 20:02:01 +0000
Manifest this update:     Thu 24 Sep 2026 20:02:01 +0000
Manifest next update:     Fri 25 Sep 2026 20:02:01 +0000
Files and hashes:         1: Ey-dQQ-b6D2JxAtl1tAirq1PpoM.asa (hash: B5MNhEwcfTqjF8H4A+QQFdaliNoWUEp7gf/35pg9Rbk=)
                          2: TNljeYPXxYIj5lo4d5l5EQLTZdU.roa (hash: CfzLFBITnlNK1XZxNhkSFtNXwo43Z88uKiUP3w2UsN0=)
                          3: UxN_iPmj1i5VVwJh2wPj2iaUaVM.asa (hash: +kSZr95TCNO+Jxjrh8oERrLS0jlz5ECdtQ/K2vdi+cQ=)
                          4: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: 8coAs/AqJdKatueoH7tHtCuvlHJSUm51DMOCrLLLaTo=)
                          5: pvrzZs8nm8ie9zDZhpBcHaIBCCY.asa (hash: iIYioZLzMA8MH9b2racO6xb3a/8R+kHNVUc/GDc8+W4=)
                          6: snlFadvdcM00ncJFWRG-pTa8eHA.roa (hash: 9LDuoi+waDnjJ5h6Bt5yAaxEDStiyfH1brajFG+wFiQ=)
                          7: ujd_58sugEeAoF5jMpUipoqtW4s.roa (hash: EUJlvM7IyZpw1wssBYGFhzm/HlXJCYuSLXzoCbLldiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:02:bd:e9:b5:b8:da:14:57:f0:fe:5b:83:1f:bb:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
        Validity
            Not Before: Sep 24 20:02:01 2026 GMT
            Not After : Sep 25 20:02:01 2026 GMT
        Subject: CN=9d0fb85ee1d68563bd6270272cc2fb1a50ae4399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:30:f3:8e:40:36:da:3d:e1:18:dc:f9:34:48:
                    47:23:4d:55:74:b0:0e:55:5b:b4:ef:99:ea:41:2d:
                    f4:c6:fd:6e:69:e7:51:ca:91:37:fe:5e:ec:8b:ed:
                    37:4d:2b:a5:d5:e9:2f:19:99:75:a5:50:a5:52:3a:
                    78:25:eb:6a:ab:aa:6f:c5:1d:8c:18:be:27:76:44:
                    5d:47:7f:8c:75:90:a9:34:96:36:40:5d:ba:17:82:
                    9d:fd:5a:63:27:bc:52:57:9b:53:39:28:c0:4c:92:
                    78:07:6a:8b:b8:41:b6:91:e5:7c:9f:23:89:f0:70:
                    60:91:f4:60:4d:34:9c:22:a2:ff:b5:ea:8b:68:20:
                    02:04:bc:be:cb:45:7e:69:66:82:e0:98:85:d7:a3:
                    1b:23:9b:a2:df:be:f1:d5:0c:49:cc:88:a1:8f:c4:
                    cd:b6:5f:d2:10:5d:b8:1f:b0:4a:10:84:ca:e0:23:
                    d6:f9:2e:f6:e0:7f:a2:50:e2:e8:9e:78:bb:b5:62:
                    b1:ea:88:43:14:ec:a7:d1:ed:08:f3:19:ea:f8:cc:
                    b2:a3:d6:a0:62:1f:c5:94:9f:3c:16:13:71:be:5b:
                    50:3b:41:eb:94:ab:28:a9:93:78:34:ec:d0:f2:78:
                    c8:e7:0e:ae:c7:4c:02:c2:95:07:e6:6a:2c:11:73:
                    91:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0F:B8:5E:E1:D6:85:63:BD:62:70:27:2C:C2:FB:1A:50:AE:43:99
            X509v3 Authority Key Identifier:
                keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:8f:24:b2:ac:56:7f:58:98:12:4b:73:14:8e:18:d9:6e:47:
         29:d9:62:8b:7e:94:e9:81:33:78:04:32:0e:30:96:10:19:e1:
         a7:d7:a6:f1:37:3f:81:33:f6:ab:dc:88:13:39:ea:de:d0:64:
         6b:cc:89:64:70:4e:1d:48:66:51:ad:de:54:fe:1d:7a:ce:57:
         7b:c7:87:02:72:e8:95:03:04:bf:51:9d:98:a5:21:53:c1:42:
         dc:d7:81:8e:fe:3e:a2:f4:b0:ec:50:38:31:f2:eb:ee:52:3d:
         62:6d:c7:1e:8e:30:c5:34:87:90:1b:4f:e4:40:eb:65:ed:ea:
         10:e1:81:fa:89:fc:e8:1b:09:72:8d:fe:91:37:cb:c5:68:20:
         c4:52:6b:34:0f:75:fe:e0:e0:57:bb:69:93:3c:57:2b:f3:f8:
         2c:ec:1b:d1:82:e0:dd:0f:d2:26:8e:ea:a2:8b:19:25:7b:bc:
         f7:5a:94:53:ef:b3:b1:1a:a6:03:80:82:f1:ba:fe:9e:a7:f2:
         0e:fe:3b:8c:65:41:42:22:d5:ff:93:68:b3:7a:d0:d5:2b:1b:
         46:cc:fe:47:d3:dd:2d:0d:ba:07:cc:cc:e8:41:00:95:e8:c3:
         6c:63:9c:85:05:65:d3:e6:25:17:1f:d3:34:5f:22:1a:41:4f:
         85:4f:84:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAr3ptbjaFFfw/luDH7tnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj
MmEwOTUwHhcNMjYwOTI0MjAwMjAxWhcNMjYwOTI1MjAwMjAxWjAzMTEwLwYDVQQD
Eyg5ZDBmYjg1ZWUxZDY4NTYzYmQ2MjcwMjcyY2MyZmIxYTUwYWU0Mzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljDzjkA22j3hGNz5NEhHI01VdLAO
VVu075nqQS30xv1uaedRypE3/l7si+03TSul1ekvGZl1pVClUjp4Jetqq6pvxR2M
GL4ndkRdR3+MdZCpNJY2QF26F4Kd/VpjJ7xSV5tTOSjATJJ4B2qLuEG2keV8nyOJ
8HBgkfRgTTScIqL/teqLaCACBLy+y0V+aWaC4JiF16MbI5ui377x1QxJzIihj8TN
tl/SEF24H7BKEITK4CPW+S724H+iUOLonni7tWKx6ohDFOyn0e0I8xnq+Myyo9ag
Yh/FlJ88FhNxvltQO0HrlKsoqZN4NOzQ8njI5w6ux0wCwpUH5mosEXORWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0PuF7h1oVjvWJwJyzC+xpQrkOZMB8GA1UdIwQY
MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct
MDRkNzRmMzY4Njk4LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4
LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiI8ksqxW
f1iYEktzFI4Y2W5HKdlii36U6YEzeAQyDjCWEBnhp9em8Tc/gTP2q9yIEznq3tBk
a8yJZHBOHUhmUa3eVP4des5Xe8eHAnLolQMEv1GdmKUhU8FC3NeBjv4+ovSw7FA4
MfLr7lI9Ym3HHo4wxTSHkBtP5EDrZe3qEOGB+on86BsJco3+kTfLxWggxFJrNA91
/uDgV7tpkzxXK/P4LOwb0YLg3Q/SJo7qoosZJXu891qUU++zsRqmA4CC8br+nqfy
Dv47jGVBQiLV/5Nos3rQ1SsbRsz+R9PdLQ26B8zM6EEAlejDbGOchQVl0+YlFx/T
NF8iGkFPhU+Epg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:39:57 2026 by rpki-client