Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
File:                     kkMni6ptm9TkNnEE4aCxhMufstw.mft (raw, json)
Hash identifier:          p1iS3TMIlHKN1RzfIsrD34Ja0+ecPmvAHu9w42RpQxw=
Subject key identifier:   1B:3D:6F:8F:51:17:A6:AA:82:24:23:99:A0:A8:01:AA:A5:F9:6A:43
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Certificate issuer:       /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial:       019D98F47CAE0A03C3A08283FF2C60C72505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
Manifest number:          15ED
Signing time:             Fri 17 Apr 2026 01:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:52 +0000
Files and hashes:         1: LM_fwTOY3bWKU86K5V8-3VaJ5xo.roa (hash: gJ+6292a/zmiB+7Lg48nmQHbNWGgX6ni2+hF6SfxqDs=)
                          2: kkMni6ptm9TkNnEE4aCxhMufstw.crl (hash: kPFcqkfowMyLVDYfKt3hMnFZ/bTBeKKAuDlMuL4LjjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:7c:ae:0a:03:c3:a0:82:83:ff:2c:60:c7:25:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
        Validity
            Not Before: Apr 17 01:00:52 2026 GMT
            Not After : Apr 18 01:00:52 2026 GMT
        Subject: CN=1b3d6f8f5117a6aa82242399a0a801aaa5f96a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cb:ce:60:03:82:5b:ae:e2:62:91:29:3b:13:
                    90:28:b1:b9:13:6c:85:40:e6:9b:54:40:ca:8c:9b:
                    d1:fc:22:02:81:de:44:e4:ef:e8:20:d1:c3:fe:54:
                    e8:02:25:fa:4a:49:19:5a:0a:f0:0f:b3:de:eb:1a:
                    f8:88:46:fb:e1:2b:dc:21:85:25:c5:9b:66:6a:50:
                    cb:25:34:8d:2f:47:67:db:38:19:04:26:2a:8f:a6:
                    ca:bc:a6:ef:15:e1:31:6b:02:14:b8:80:97:83:f4:
                    a6:fa:95:52:72:cc:20:05:75:2e:ba:3f:a9:9d:d2:
                    ad:df:9d:b8:70:ae:a5:45:a7:fe:b4:d8:ae:12:99:
                    d8:21:43:fb:60:6e:56:6c:62:c3:63:8f:16:7e:ab:
                    93:b3:86:30:52:52:68:11:12:e6:9b:36:4b:95:73:
                    3f:ef:04:a2:42:1b:89:ca:14:53:fa:bf:ed:cf:55:
                    e0:80:ea:78:06:66:d1:b6:31:03:91:3c:5f:b4:31:
                    0b:26:e4:25:47:89:57:28:1a:a8:de:b6:95:7c:6a:
                    41:55:34:46:e7:70:9d:d5:e3:4f:1d:60:40:ea:7f:
                    96:a2:06:b6:51:15:b9:71:01:07:f7:73:cf:e9:98:
                    b3:dd:f1:7d:c2:dd:a0:89:35:46:36:b3:c4:80:63:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3D:6F:8F:51:17:A6:AA:82:24:23:99:A0:A8:01:AA:A5:F9:6A:43
            X509v3 Authority Key Identifier:
                keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:9b:90:86:28:ab:75:3b:6e:c4:06:55:b1:33:4f:25:47:b2:
         43:b5:36:d8:f1:bb:eb:39:a5:be:b7:eb:77:40:e4:b8:cd:59:
         1b:5d:47:6e:04:89:1c:4a:90:bd:51:f3:32:14:0a:e3:51:dd:
         a0:99:1d:34:b5:d6:b4:43:54:15:ed:2b:c7:ae:36:64:da:ad:
         9d:6d:3c:2c:94:e0:39:7f:ad:12:0c:2d:58:a4:33:02:ae:d9:
         ec:73:1c:f8:df:7c:85:a7:ee:be:c8:b8:76:2f:56:61:fc:13:
         ee:fd:fc:d3:3a:18:57:d7:18:27:3e:c9:9e:2a:b4:df:3d:1f:
         64:04:5b:2a:b6:d0:2b:4b:d6:5a:9f:04:f8:5c:0f:f3:cc:14:
         28:f6:f4:9a:30:ac:a1:f1:d6:d0:8c:0b:44:de:d7:0e:46:6f:
         73:9c:18:58:3d:35:7b:59:15:d7:41:93:a7:ce:2a:6d:84:ef:
         97:26:c5:7d:0c:40:9f:98:81:76:9a:77:dc:6e:5a:6f:c5:2c:
         63:1d:5b:9e:92:53:c4:7c:3a:44:a6:ec:42:25:9d:8e:e8:16:
         03:ea:60:4d:82:4d:fa:4c:e1:7c:cc:60:32:55:d7:fb:cb:e2:
         0a:64:b9:61:ef:3a:07:35:0c:b1:20:3c:47:27:ac:e2:2f:14:
         40:c3:4c:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9HyuCgPDoIKD/yxgxyUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDMyNzhiYWE2ZDliZDRlNDM2NzEwNGUxYTBiMTg0Y2I5
ZmIyZGMwHhcNMjYwNDE3MDEwMDUyWhcNMjYwNDE4MDEwMDUyWjAzMTEwLwYDVQQD
EygxYjNkNmY4ZjUxMTdhNmFhODIyNDIzOTlhMGE4MDFhYWE1Zjk2YTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MvOYAOCW67iYpEpOxOQKLG5E2yF
QOabVEDKjJvR/CICgd5E5O/oINHD/lToAiX6SkkZWgrwD7Pe6xr4iEb74SvcIYUl
xZtmalDLJTSNL0dn2zgZBCYqj6bKvKbvFeExawIUuICXg/Sm+pVScswgBXUuuj+p
ndKt3524cK6lRaf+tNiuEpnYIUP7YG5WbGLDY48WfquTs4YwUlJoERLmmzZLlXM/
7wSiQhuJyhRT+r/tz1XggOp4BmbRtjEDkTxftDELJuQlR4lXKBqo3raVfGpBVTRG
53Cd1eNPHWBA6n+Woga2URW5cQEH93PP6Ziz3fF9wt2giTVGNrPEgGM4NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBs9b49RF6aqgiQjmaCoAaql+WpDMB8GA1UdIwQY
MBaAFJJDJ4uqbZvU5DZxBOGgsYTLn7LcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWIt
NGMyZmJkZDU2Mjc5LzEva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWItNGMyZmJkZDU2Mjc5
LzEva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxZuQhiir
dTtuxAZVsTNPJUeyQ7U22PG76zmlvrfrd0DkuM1ZG11HbgSJHEqQvVHzMhQK41Hd
oJkdNLXWtENUFe0rx642ZNqtnW08LJTgOX+tEgwtWKQzAq7Z7HMc+N98hafuvsi4
di9WYfwT7v380zoYV9cYJz7Jniq03z0fZARbKrbQK0vWWp8E+FwP88wUKPb0mjCs
ofHW0IwLRN7XDkZvc5wYWD01e1kV10GTp84qbYTvlybFfQxAn5iBdpp33G5ab8Us
Yx1bnpJTxHw6RKbsQiWdjugWA+pgTYJN+kzhfMxgMlXX+8viCmS5Ye86BzUMsSA8
Ryes4i8UQMNMKg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:11 2026 by rpki-client