Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File:                     klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier:          VSlN99rX5bv+WaUrYlhNdCWXGvUX+tUC+3C2PTRmTSs=
Subject key identifier:   95:C9:CF:F3:4E:2F:E0:E4:8E:DF:03:4B:C5:9E:F7:90:DC:86:CB:20
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer:       /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial:       0197771C6EAA66A76C25345FE940DA189B6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number:          1594
Signing time:             Mon 16 Jun 2025 05:00:41 +0000
Manifest this update:     Mon 16 Jun 2025 05:00:41 +0000
Manifest next update:     Tue 17 Jun 2025 05:00:41 +0000
Files and hashes:         1: 0cwv1kps50n5fxH17jZ6DrIm1N0.roa (hash: undM2lyLTll3NMITFEXa/JcW5GP1KelrAOfh7Rau6zQ=)
                          2: DFcDai4MmMP-4I9ZmvHSmiuuiVo.roa (hash: P1EgClV7bkG9omjLGc5Uu3/ShqO9L3Dji7Yyz/EuHLk=)
                          3: V_xEHpefO5u5KSTu-XYSWan-kRo.roa (hash: jYILx7U+IDJR4gLw2si3w1xLilgSY3Xi257sg6Z15eA=)
                          4: Z26jB8MmkVPCobutKSYkZRRffSw.roa (hash: jtYR3qZJ5WEi/+pEZva2m9kUb9g5HMevovBDi8SuUfU=)
                          5: e1u7bA6PuDBeHm9U9nKjSLDhACw.roa (hash: DvBt+9eFN/dfM+tx+F5jn+yDWZNZsODtMhC5M+LFI08=)
                          6: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: 87hJ/sibTyHmaLk0VjJ4/KBDmZJN9GCUfUYBcRzU8Ng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:1c:6e:aa:66:a7:6c:25:34:5f:e9:40:da:18:9b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
        Validity
            Not Before: Jun 16 05:00:41 2025 GMT
            Not After : Jun 17 05:00:41 2025 GMT
        Subject: CN=95c9cff34e2fe0e48edf034bc59ef790dc86cb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:50:52:2d:6d:64:2b:e8:63:4f:dc:8e:38:6f:
                    1c:46:12:eb:10:cc:59:f8:7b:76:58:68:11:17:67:
                    a6:60:eb:08:cb:f0:6a:28:4f:f3:6c:f4:30:47:64:
                    bf:94:75:12:2a:c9:95:00:2c:3b:10:c7:fa:d2:19:
                    b0:36:3c:63:be:74:aa:f8:62:f0:81:c2:22:29:ae:
                    d8:e0:d8:10:67:c7:b2:af:45:bb:04:48:61:02:85:
                    4a:02:06:bc:10:eb:56:9d:8c:96:cf:2c:c6:39:ca:
                    a1:0d:55:46:bc:fe:79:81:af:e1:8d:88:db:c8:73:
                    40:6b:cc:5f:4c:92:a4:90:ae:b5:08:60:5f:c1:2e:
                    cc:e5:10:33:c2:1c:ee:d2:d6:13:e5:b6:fe:d6:83:
                    bd:8e:23:4f:1c:14:13:13:1d:c9:c0:a9:f0:7d:e3:
                    98:39:35:2b:d2:f1:91:7b:55:62:e8:a5:a8:59:6a:
                    d1:e1:18:0c:a6:5b:c1:0f:83:29:58:77:92:6a:6e:
                    26:ce:6b:df:a4:6f:71:7a:2a:d2:e2:19:69:1c:1f:
                    be:7b:8b:26:a1:9c:8b:21:97:42:99:fa:fa:e9:b2:
                    7d:08:9c:5c:aa:a3:c5:b3:ee:a5:56:c5:16:9b:53:
                    0e:59:78:12:b3:63:06:43:cf:d1:99:ee:fb:6d:f0:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C9:CF:F3:4E:2F:E0:E4:8E:DF:03:4B:C5:9E:F7:90:DC:86:CB:20
            X509v3 Authority Key Identifier:
                keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:13:14:9f:e0:df:30:13:54:41:58:1b:da:31:d9:82:3d:04:
         19:ef:ef:83:ab:c1:0b:af:c2:18:bd:6b:ee:e0:d1:7e:55:9e:
         40:58:6d:c3:04:30:64:45:ec:4d:47:07:b1:66:b6:96:e1:d0:
         d4:2d:79:d5:b8:66:20:67:ee:02:67:fc:a7:a4:16:c7:a4:4c:
         d4:c4:6e:a6:32:a6:5e:88:13:9c:9d:85:32:4f:0f:44:34:66:
         1c:ca:69:5a:ae:2b:a0:cd:7f:31:76:a8:69:f9:a4:5f:a5:db:
         cd:8e:8a:08:4e:ad:05:c1:b5:a7:34:fc:88:12:af:3a:33:8b:
         5b:41:65:d5:c0:c8:cd:0d:1c:ec:4d:62:ec:06:0e:a9:00:0b:
         a2:e4:b2:17:ca:cb:fb:1b:de:93:c4:df:f4:18:5c:7c:62:af:
         82:47:18:85:fb:61:57:63:b4:0d:9f:58:0f:8e:6d:97:0b:63:
         64:d2:a4:d7:52:b4:7d:89:da:e4:8b:e7:6b:9c:0c:eb:b1:9e:
         17:38:45:a9:6b:28:3a:28:c8:e2:88:94:ce:15:6f:94:86:b1:
         e9:37:07:e2:ce:e7:65:e9:3d:95:8b:52:a6:bc:c1:67:11:5c:
         27:c5:eb:cc:91:e0:52:20:6e:74:b2:c3:bf:48:13:ba:35:b1:
         4a:d0:0b:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3HG6qZqdsJTRf6UDaGJtrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTZlYmY2NmI4MGYwODEzNTg1OGQxNDRjZWQ2Zjc4NTgz
NGY1ZjQwHhcNMjUwNjE2MDUwMDQxWhcNMjUwNjE3MDUwMDQxWjAzMTEwLwYDVQQD
Eyg5NWM5Y2ZmMzRlMmZlMGU0OGVkZjAzNGJjNTllZjc5MGRjODZjYjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lBSLW1kK+hjT9yOOG8cRhLrEMxZ
+Ht2WGgRF2emYOsIy/BqKE/zbPQwR2S/lHUSKsmVACw7EMf60hmwNjxjvnSq+GLw
gcIiKa7Y4NgQZ8eyr0W7BEhhAoVKAga8EOtWnYyWzyzGOcqhDVVGvP55ga/hjYjb
yHNAa8xfTJKkkK61CGBfwS7M5RAzwhzu0tYT5bb+1oO9jiNPHBQTEx3JwKnwfeOY
OTUr0vGRe1Vi6KWoWWrR4RgMplvBD4MpWHeSam4mzmvfpG9xeirS4hlpHB++e4sm
oZyLIZdCmfr66bJ9CJxcqqPFs+6lVsUWm1MOWXgSs2MGQ8/Rme77bfDWpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXJz/NOL+Dkjt8DS8We95DchssgMB8GA1UdIwQY
MBaAFJJW6/ZrgPCBNYWNFEztb3hYNPX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iNzE3YzUtYTY0Yi00NDc1LWJlM2Ut
NWRhOGQ2NzdkODQ3LzEva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iNzE3YzUtYTY0Yi00NDc1LWJlM2UtNWRhOGQ2NzdkODQ3
LzEva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxMUn+Df
MBNUQVgb2jHZgj0EGe/vg6vBC6/CGL1r7uDRflWeQFhtwwQwZEXsTUcHsWa2luHQ
1C151bhmIGfuAmf8p6QWx6RM1MRupjKmXogTnJ2FMk8PRDRmHMppWq4roM1/MXao
afmkX6XbzY6KCE6tBcG1pzT8iBKvOjOLW0Fl1cDIzQ0c7E1i7AYOqQALouSyF8rL
+xvek8Tf9BhcfGKvgkcYhfthV2O0DZ9YD45tlwtjZNKk11K0fYna5Ivna5wM67Ge
FzhFqWsoOijI4oiUzhVvlIax6TcH4s7nZek9lYtSprzBZxFcJ8XrzJHgUiBudLLD
v0gTujWxStALrw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:29:12 2025 by rpki-client