Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File:                     klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier:          mWJ0fvgNvd/HK4MKaKe6NBchh6a2V/VK/i5RZT7QLHw=
Subject key identifier:   19:9F:F5:67:16:B1:E1:57:A8:04:31:BE:10:68:0D:B5:1D:69:33:55
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer:       /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial:       0198819DB6794A0052BA6D1DA5DB6850F3A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number:          161E
Signing time:             Wed 06 Aug 2025 23:00:53 +0000
Manifest this update:     Wed 06 Aug 2025 23:00:53 +0000
Manifest next update:     Thu 07 Aug 2025 23:00:53 +0000
Files and hashes:         1: 0cwv1kps50n5fxH17jZ6DrIm1N0.roa (hash: undM2lyLTll3NMITFEXa/JcW5GP1KelrAOfh7Rau6zQ=)
                          2: DFcDai4MmMP-4I9ZmvHSmiuuiVo.roa (hash: P1EgClV7bkG9omjLGc5Uu3/ShqO9L3Dji7Yyz/EuHLk=)
                          3: V_xEHpefO5u5KSTu-XYSWan-kRo.roa (hash: jYILx7U+IDJR4gLw2si3w1xLilgSY3Xi257sg6Z15eA=)
                          4: Z26jB8MmkVPCobutKSYkZRRffSw.roa (hash: jtYR3qZJ5WEi/+pEZva2m9kUb9g5HMevovBDi8SuUfU=)
                          5: e1u7bA6PuDBeHm9U9nKjSLDhACw.roa (hash: DvBt+9eFN/dfM+tx+F5jn+yDWZNZsODtMhC5M+LFI08=)
                          6: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: PaIHaTC3ROPqO1CYSoIh2PCEctSE8CPPhA8dyxiwIMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:9d:b6:79:4a:00:52:ba:6d:1d:a5:db:68:50:f3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
        Validity
            Not Before: Aug  6 23:00:53 2025 GMT
            Not After : Aug  7 23:00:53 2025 GMT
        Subject: CN=199ff56716b1e157a80431be10680db51d693355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d2:39:8a:3a:be:9e:f8:f3:84:2a:c6:18:d1:
                    e8:61:55:e8:dc:12:25:d2:82:e4:94:51:5c:7a:f4:
                    53:6b:91:09:b8:d5:6b:b6:bb:4f:7f:bd:ed:37:39:
                    1f:7d:0f:67:86:15:ef:68:f9:b6:29:1d:9e:d7:fd:
                    17:94:32:f1:17:6a:66:81:aa:07:c9:2c:9f:74:35:
                    32:72:ef:5d:42:77:98:7b:9f:73:36:9c:ac:95:a6:
                    60:84:1c:44:1e:ea:d2:ef:92:ae:0f:a2:a6:dc:d2:
                    57:31:03:07:1c:b9:74:33:f3:8f:7e:89:bb:a6:7c:
                    e9:a7:de:72:02:67:73:b7:43:ba:fa:45:aa:72:9e:
                    fb:8f:5e:3d:ba:17:3c:c0:22:73:68:8b:78:78:f9:
                    4e:5a:d3:44:ad:35:30:65:7e:70:16:68:47:be:32:
                    2d:05:f2:e1:57:21:3a:a9:2f:af:22:a2:3e:77:3f:
                    20:70:13:09:7c:ce:80:9c:11:41:fb:08:bd:02:6b:
                    5f:d5:86:3f:c7:7b:d0:77:15:7f:cd:2d:0f:31:48:
                    92:1a:4d:11:12:11:ed:bf:8e:7d:4d:db:30:4b:48:
                    b7:21:58:bf:a0:f0:1e:8c:e1:3b:3a:ab:95:56:cf:
                    f3:45:08:2f:45:5c:f1:e0:43:06:b7:4d:de:60:7d:
                    49:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9F:F5:67:16:B1:E1:57:A8:04:31:BE:10:68:0D:B5:1D:69:33:55
            X509v3 Authority Key Identifier:
                keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e3:53:e0:c2:41:4b:79:8f:12:f6:70:79:1f:c9:80:39:cf:
         1f:0c:97:51:8b:e6:df:12:56:6a:0b:26:a7:ac:54:ed:b1:82:
         2c:7f:50:da:28:50:80:90:46:07:39:54:ba:73:48:ac:61:42:
         72:8f:ec:ce:f3:32:e6:c9:4b:fc:82:27:e7:28:6c:97:26:e6:
         7e:ae:d0:cb:ba:8c:26:09:2f:66:07:ba:26:61:b9:a1:f4:a8:
         36:19:f2:3e:92:ec:5b:06:88:09:03:c5:50:f8:8d:19:53:80:
         a5:9b:b2:a7:7a:36:7c:21:5f:17:a8:e1:f2:78:84:47:8c:f3:
         aa:87:3e:71:e0:8e:9b:d2:10:ba:ae:03:29:67:f5:e6:bd:e6:
         b2:31:b9:02:a9:6e:e1:0e:ca:6d:89:84:61:af:e7:f6:10:09:
         94:3e:f6:b0:6c:a8:ed:71:cd:be:37:e9:e0:db:2a:1c:81:81:
         54:30:9a:4d:04:6a:c7:cc:4a:49:b2:81:ae:4e:52:f2:99:4c:
         ae:7b:07:d9:16:f9:55:51:86:f3:05:fe:77:c2:11:d7:2f:3f:
         4b:50:6a:a2:1d:14:1c:10:13:18:78:dc:db:f5:ea:f8:3e:20:
         af:81:15:a8:bc:0d:29:fe:3c:6a:56:80:58:49:06:67:39:b8:
         6e:40:03:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:59:59 2025 by rpki-client