Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File:                     klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier:          qpcgkFis9H8ffVUhcAk8PQ17jrxDdt9nNu6qxuGOVIQ=
Subject key identifier:   5D:0D:06:07:04:41:6A:BC:B1:99:48:81:0C:0A:27:2E:05:24:5D:3B
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer:       /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial:       019881675C365CEA88F4497903214C28446D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number:          161E
Signing time:             Wed 06 Aug 2025 22:01:31 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:31 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:31 +0000
Files and hashes:         1: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (hash: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=)
                          2: evv1AEwBABySsTk3nBF2LjzybHU.roa (hash: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=)
                          3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: 2yulfD+Iw14n9Ded5vCavjbTouYy6ECWFoRNIhMjMg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:5c:36:5c:ea:88:f4:49:79:03:21:4c:28:44:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
        Validity
            Not Before: Aug  6 22:01:31 2025 GMT
            Not After : Aug  7 22:01:31 2025 GMT
        Subject: CN=5d0d060704416abcb19948810c0a272e05245d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:01:f0:88:3e:bb:16:e0:9b:bb:ea:bc:d7:
                    fb:de:07:ca:c3:2e:63:a3:aa:9c:68:e9:10:23:41:
                    48:2c:69:e8:c7:93:ee:6d:cd:54:1c:d6:da:d2:76:
                    b9:64:e2:b0:70:e7:bd:e8:bf:7b:d5:2c:90:78:35:
                    13:ee:af:6f:d6:6d:4d:6b:bc:c6:d3:84:de:71:fd:
                    4f:db:72:ce:ba:93:68:b7:5e:10:32:c9:31:b5:b6:
                    74:92:5f:56:6b:d7:42:e9:ef:24:b8:6c:73:81:a0:
                    28:83:7a:37:07:95:f3:ba:1b:c5:6f:26:0a:b4:be:
                    7d:51:b2:19:38:83:17:c0:55:5b:49:ed:aa:30:7d:
                    c8:0b:a5:b2:9f:7d:a5:81:f6:9f:1c:fd:5a:d3:1f:
                    17:23:58:fd:f0:67:39:79:af:a8:db:31:f8:67:46:
                    f0:ca:3e:88:c4:fd:09:c3:9c:f7:8b:24:b7:1b:be:
                    a6:57:f5:bb:2b:43:c2:6c:ac:5e:39:c4:9a:75:a2:
                    88:a8:eb:a2:ce:18:4b:57:d8:53:28:2f:63:79:70:
                    d8:02:9e:c5:3a:94:11:65:7c:da:b2:d7:7a:db:d4:
                    da:4b:8c:bc:35:bf:60:11:b1:69:09:09:a7:3f:56:
                    b6:89:0f:be:d4:cc:17:eb:91:09:e6:24:d3:20:ee:
                    95:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0D:06:07:04:41:6A:BC:B1:99:48:81:0C:0A:27:2E:05:24:5D:3B
            X509v3 Authority Key Identifier:
                keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f0:82:bb:db:9c:2d:66:30:e7:9d:2e:25:57:66:de:53:e8:
         ad:31:a1:8a:7a:a5:03:2b:50:d3:41:30:6e:a6:e6:89:15:80:
         33:69:8e:93:f1:76:14:4f:a1:69:fc:80:ad:25:0a:c7:b1:f2:
         0b:8b:0f:e6:64:40:d9:9f:ea:ea:1a:bb:c2:20:97:b1:e9:e9:
         64:23:17:50:03:31:90:3c:e7:d2:06:35:ad:40:02:61:98:1a:
         68:8a:a9:72:95:c2:0c:21:dc:06:34:67:bb:86:bf:a1:f8:44:
         a2:3a:7c:1a:a3:e5:b1:5f:e1:7c:34:90:9c:46:f0:de:98:54:
         89:ef:5c:5a:4d:04:66:73:15:23:2c:48:ed:ab:bb:ad:97:3b:
         53:a7:75:80:79:bd:c6:da:e1:c2:17:48:81:a7:75:28:9b:e6:
         b6:58:96:58:b6:b0:c6:b7:ba:9c:c7:62:3a:78:e9:d7:de:32:
         f8:03:ed:ae:37:33:dc:2e:8d:c3:9d:a3:ba:57:4c:35:63:ba:
         74:f8:f8:49:ad:eb:50:29:87:21:b7:a6:66:30:53:92:64:97:
         b0:7e:8c:b0:d2:85:ca:33:4d:b5:46:43:a4:de:30:5a:ea:99:
         94:11:d8:5e:05:72:81:ec:cb:0f:79:7f:f7:8b:60:8e:6b:93:
         ab:18:0a:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZ1w2XOqI9El5AyFMKERtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTZkYjM0ODdiNGM1YmFjYjMwMDE3NzA1N2NmMzE3NGNm
Nzc0NzcwHhcNMjUwODA2MjIwMTMxWhcNMjUwODA3MjIwMTMxWjAzMTEwLwYDVQQD
Eyg1ZDBkMDYwNzA0NDE2YWJjYjE5OTQ4ODEwYzBhMjcyZTA1MjQ1ZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsegB8Ig+uxbgm7vqvNf73gfKwy5j
o6qcaOkQI0FILGnox5Pubc1UHNba0na5ZOKwcOe96L971SyQeDUT7q9v1m1Na7zG
04Tecf1P23LOupNot14QMskxtbZ0kl9Wa9dC6e8kuGxzgaAog3o3B5XzuhvFbyYK
tL59UbIZOIMXwFVbSe2qMH3IC6Wyn32lgfafHP1a0x8XI1j98Gc5ea+o2zH4Z0bw
yj6IxP0Jw5z3iyS3G76mV/W7K0PCbKxeOcSadaKIqOuizhhLV9hTKC9jeXDYAp7F
OpQRZXzastd629TaS4y8Nb9gEbFpCQmnP1a2iQ++1MwX65EJ5iTTIO6V0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0NBgcEQWq8sZlIgQwKJy4FJF07MB8GA1UdIwQY
MBaAFJJW2zSHtMW6yzABdwV88xdM93R3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUt
MGY1MmVhNTIyOWZjLzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUtMGY1MmVhNTIyOWZj
LzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/CCu9uc
LWYw550uJVdm3lPorTGhinqlAytQ00EwbqbmiRWAM2mOk/F2FE+hafyArSUKx7Hy
C4sP5mRA2Z/q6hq7wiCXsenpZCMXUAMxkDzn0gY1rUACYZgaaIqpcpXCDCHcBjRn
u4a/ofhEojp8GqPlsV/hfDSQnEbw3phUie9cWk0EZnMVIyxI7au7rZc7U6d1gHm9
xtrhwhdIgad1KJvmtliWWLawxre6nMdiOnjp194y+APtrjcz3C6Nw52juldMNWO6
dPj4Sa3rUCmHIbemZjBTkmSXsH6MsNKFyjNNtUZDpN4wWuqZlBHYXgVygezLD3l/
94tgjmuTqxgKHA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:30:11 2025 by rpki-client