Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File:                     klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier:          jxZvPqBOFS5fgcwYTObVaxNZuQHNlV/YkPiN4fq/q9o=
Subject key identifier:   39:A5:9D:BC:AE:74:8E:AA:CA:16:0E:56:B1:E0:1D:44:C5:A4:1F:DA
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer:       /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial:       019FA8D00A11D1FB157AEEAC225E6467896E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 13:00:34 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:34 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:34 +0000
Files and hashes:         1: 40z5BTIzE-Otta9d5IxXlYjWk7Y.roa (hash: /K+vL2kVy1Ot78ZCbPvu7R3pgRcpdRMgsyhuVzNibSE=)
                          2: FnnFa3pMmqf3MiWUuKMyoAVWg-s.roa (hash: 6fPOtoWUy4XsTgZEttrlKq8GChMydmNHVVGJEIcxPdY=)
                          3: J4mHGlSY7agF8AXFPW8l8IBLAAI.roa (hash: /s0Afv+pL0DwKivaJvq3/xoIpyRomxE5EF1DLE1ue6g=)
                          4: ePQMQe046NknExZADvr19blY0SA.roa (hash: wKoVniNasUoMb11Rk/qza9dNeWvntUlfFXzDDxceLEM=)
                          5: hcjtq7J7FKS0bIahe8TWZOilbrc.roa (hash: uOY6FMIgCoFqDzQfMMnNRctUj2RDP4gSOMAnS9KpjHI=)
                          6: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: lqHW6Z9mdworsQ1wilOFUqwUf/H7z8dHzt0sR4Wcitc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:0a:11:d1:fb:15:7a:ee:ac:22:5e:64:67:89:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
        Validity
            Not Before: Jul 28 13:00:34 2026 GMT
            Not After : Jul 29 13:00:34 2026 GMT
        Subject: CN=39a59dbcae748eaaca160e56b1e01d44c5a41fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:07:33:ba:ad:d7:2d:b1:25:f9:f0:b9:50:90:
                    72:fa:3b:23:f2:dc:34:7c:55:9f:e7:23:77:49:42:
                    f2:bd:12:c9:ed:ef:75:9a:59:96:78:91:b5:9e:90:
                    5b:30:90:a7:95:84:25:50:ad:95:fe:64:c2:17:c0:
                    25:2d:d2:2b:22:48:3a:6f:57:bc:f2:36:47:58:59:
                    f4:19:60:a5:aa:8b:46:34:a7:2c:de:9b:85:8c:49:
                    b9:f8:65:69:6c:7f:ae:c1:04:73:32:94:7d:04:e4:
                    bd:da:3a:dc:75:72:a9:ec:2a:4b:19:82:bc:91:fd:
                    68:b2:03:41:e0:32:ad:21:bb:47:55:c1:50:1c:c4:
                    28:87:99:1a:13:c5:75:ad:7d:21:45:29:5a:68:36:
                    c3:74:ed:f8:34:73:aa:54:09:b5:1b:64:bc:cd:89:
                    d9:c7:e8:3c:be:24:a7:d5:7d:a7:3e:4d:bb:80:8d:
                    e7:13:8a:69:ba:d8:08:2c:8c:47:89:06:93:e5:be:
                    41:01:c2:18:91:a2:60:4e:00:05:ff:e7:c8:1c:8d:
                    b1:ef:a9:43:d6:a9:6f:cc:b7:0d:7f:dd:c1:e1:6d:
                    74:e2:78:5c:eb:62:08:4f:ce:7f:d3:62:fb:2c:f5:
                    9b:99:35:6a:b7:20:5e:6c:d6:6d:98:ac:3e:58:ec:
                    6e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A5:9D:BC:AE:74:8E:AA:CA:16:0E:56:B1:E0:1D:44:C5:A4:1F:DA
            X509v3 Authority Key Identifier:
                keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:16:9d:07:cb:35:84:01:4c:9b:1d:2a:af:3d:d8:45:44:35:
         7e:99:56:26:12:c0:05:4a:b9:66:57:e4:5e:83:c5:76:6b:d4:
         70:67:8f:27:d5:5a:9f:e5:96:33:d1:5d:f6:67:31:46:33:a0:
         9b:95:98:0e:7f:08:1f:55:2a:44:40:ff:6e:ad:09:7f:e0:b5:
         fa:a7:7c:89:a4:10:28:07:0d:70:d0:01:36:1b:95:cd:47:1a:
         e9:c6:ba:a0:04:b5:c1:e4:36:3e:e4:fa:89:c0:31:73:e5:f3:
         27:13:81:b6:92:f2:e2:3e:05:bd:39:e3:55:28:a8:85:90:c3:
         28:46:88:93:4b:15:a8:e4:cc:a6:97:9c:eb:7c:2d:65:2f:48:
         bf:0a:85:fb:a6:42:8b:cf:ea:43:e6:d7:d6:98:09:da:01:29:
         59:4f:34:88:27:f9:3c:2b:ab:f5:8d:f7:de:12:de:a1:eb:6a:
         a4:01:0e:2f:10:d5:37:90:c4:03:ff:f7:32:ed:e3:30:3c:c5:
         f7:a5:4d:5c:84:69:e2:71:4f:36:e8:a5:26:66:2a:bb:9c:d4:
         f3:db:1f:6d:aa:2f:2c:ce:99:7a:a0:c7:4a:10:26:65:c3:a5:
         05:7f:ff:f7:6c:35:ae:ed:9f:f7:7f:2a:c2:c2:0f:63:54:21:
         38:7e:0f:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0AoR0fsVeu6sIl5kZ4luMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTZlYmY2NmI4MGYwODEzNTg1OGQxNDRjZWQ2Zjc4NTgz
NGY1ZjQwHhcNMjYwNzI4MTMwMDM0WhcNMjYwNzI5MTMwMDM0WjAzMTEwLwYDVQQD
EygzOWE1OWRiY2FlNzQ4ZWFhY2ExNjBlNTZiMWUwMWQ0NGM1YTQxZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gczuq3XLbEl+fC5UJBy+jsj8tw0
fFWf5yN3SULyvRLJ7e91mlmWeJG1npBbMJCnlYQlUK2V/mTCF8AlLdIrIkg6b1e8
8jZHWFn0GWClqotGNKcs3puFjEm5+GVpbH+uwQRzMpR9BOS92jrcdXKp7CpLGYK8
kf1osgNB4DKtIbtHVcFQHMQoh5kaE8V1rX0hRSlaaDbDdO34NHOqVAm1G2S8zYnZ
x+g8viSn1X2nPk27gI3nE4pputgILIxHiQaT5b5BAcIYkaJgTgAF/+fIHI2x76lD
1qlvzLcNf93B4W104nhc62IIT85/02L7LPWbmTVqtyBebNZtmKw+WOxunwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmlnbyudI6qyhYOVrHgHUTFpB/aMB8GA1UdIwQY
MBaAFJJW6/ZrgPCBNYWNFEztb3hYNPX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iNzE3YzUtYTY0Yi00NDc1LWJlM2Ut
NWRhOGQ2NzdkODQ3LzEva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iNzE3YzUtYTY0Yi00NDc1LWJlM2UtNWRhOGQ2NzdkODQ3
LzEva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxadB8s1
hAFMmx0qrz3YRUQ1fplWJhLABUq5ZlfkXoPFdmvUcGePJ9Van+WWM9Fd9mcxRjOg
m5WYDn8IH1UqRED/bq0Jf+C1+qd8iaQQKAcNcNABNhuVzUca6ca6oAS1weQ2PuT6
icAxc+XzJxOBtpLy4j4FvTnjVSiohZDDKEaIk0sVqOTMppec63wtZS9IvwqF+6ZC
i8/qQ+bX1pgJ2gEpWU80iCf5PCur9Y333hLeoetqpAEOLxDVN5DEA//3Mu3jMDzF
96VNXIRp4nFPNuilJmYqu5zU89sfbaovLM6ZeqDHShAmZcOlBX//92w1ru2f938q
wsIPY1QhOH4Pyw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:49 2026 by rpki-client