Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
File:                     klzs7-UigXQF0m_JK7UQSskM_cU.mft (raw, json)
Hash identifier:          ReplrQN2sj3OxePEcPd1RvFW02xufFrLTsIgNRv2zTQ=
Subject key identifier:   CB:9F:86:82:70:20:17:10:49:DA:55:E1:62:FA:8B:A8:DA:64:65:96
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Certificate issuer:       /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial:       019EB7D8011DBF84CD01B3588CF9A52F17E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
Manifest number:          18F9
Signing time:             Thu 11 Jun 2026 18:00:46 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:46 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:46 +0000
Files and hashes:         1: 0GCsGSEu6DSdqgQKkWIJMKqEzcA.asa (hash: 6gVpx5jmmmCx0ej4LCILiXSE1CBS1qBw2+guqoZYU2M=)
                          2: 6ivdGkU4JpcdJeEUFclfUNispsA.roa (hash: pfbQDLdc9UvvbTXv81c/HKOtEm0dsqUfCqMUxvYHjrw=)
                          3: HWe81iVnCrvWZ5i70lYuwQBI6vo.asa (hash: O8hn1wn8hJYxcK/0FDMVDJ2dqEBCiZuaFkqQn8V67K4=)
                          4: KW_8cQbCRZrMxXEyWhTa1RCtzvY.roa (hash: lmD03CJD5jyT9rgsLt03/38cv3snb1tZTQ3m9TewTSk=)
                          5: klzs7-UigXQF0m_JK7UQSskM_cU.crl (hash: tldfn0Px5x06ZuFPdBt+fj/DZAosCv0Pw+oxdTemuss=)
                          6: vIN44HyEP5wnRYxa1TMQU9fUKVk.roa (hash: UPxjEVREQVIYJdYxcduu/9fmVIgZHpDXz79ozRrZ6Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d8:01:1d:bf:84:cd:01:b3:58:8c:f9:a5:2f:17:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
        Validity
            Not Before: Jun 11 18:00:46 2026 GMT
            Not After : Jun 12 18:00:46 2026 GMT
        Subject: CN=cb9f86827020171049da55e162fa8ba8da646596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:3c:fd:8d:17:85:95:55:63:4e:51:fc:a9:
                    e2:2c:b4:4b:ad:bd:ca:17:7c:5b:58:78:cc:31:cf:
                    12:84:4e:38:b3:c1:ed:bb:28:88:c7:94:a9:5c:66:
                    73:bd:18:f1:bb:07:ff:c2:08:13:9d:3f:f0:5b:ca:
                    d4:74:9a:53:2a:2f:9c:be:00:10:23:66:2d:4d:29:
                    57:ec:96:80:65:38:90:8d:5f:74:0f:cf:55:8a:32:
                    c1:cb:6a:e1:9e:c6:9b:7c:13:86:61:a0:a6:1b:0a:
                    61:eb:f2:a2:69:06:ee:45:fa:3d:ec:43:58:cd:15:
                    b1:93:47:06:36:bb:75:7a:c3:6b:04:fb:71:a2:ae:
                    7a:35:b1:4f:90:19:a8:3c:33:5a:88:58:a3:11:2a:
                    60:96:91:01:18:fb:ac:0d:dd:7b:7c:2d:5d:bd:0e:
                    14:d8:e2:6f:65:24:1e:38:60:2b:39:3b:05:96:24:
                    93:60:ff:91:b1:a0:46:8a:fe:d5:c1:db:ad:98:ef:
                    39:51:ad:6d:ce:2b:5c:bf:45:1a:a9:c7:ee:d0:cf:
                    e5:bd:53:15:df:db:47:b2:a4:fe:b8:3b:17:20:d6:
                    fd:df:90:fa:93:bc:56:18:12:6a:5b:39:3e:ee:c4:
                    c8:62:a9:13:79:e7:13:58:d5:19:7d:e4:0d:6e:ba:
                    17:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9F:86:82:70:20:17:10:49:DA:55:E1:62:FA:8B:A8:DA:64:65:96
            X509v3 Authority Key Identifier:
                keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e4:f2:63:f0:91:24:01:9a:57:68:5b:f7:61:41:d0:50:e1:
         04:8d:92:db:6f:db:25:57:ca:9f:30:0a:19:d7:76:1f:9b:76:
         87:22:27:a9:05:b9:ab:30:50:7b:84:d5:e5:8a:c2:85:8b:5a:
         c7:a6:b0:5c:71:6d:70:27:b6:09:79:c7:14:17:17:94:97:a0:
         c2:59:07:c6:53:fa:2c:22:bd:17:1d:3d:66:14:6c:ac:b6:78:
         97:d4:10:2d:2c:33:d7:01:cf:33:7e:68:b4:63:66:14:14:3e:
         22:92:4c:e1:91:f5:ab:95:60:5c:42:23:2a:5d:7b:4f:8c:b5:
         dc:1c:3f:e6:26:22:2e:eb:90:49:40:02:21:02:6a:70:bd:b1:
         20:e8:34:d3:86:d7:f9:f1:76:6f:3d:af:03:0b:05:55:e3:88:
         ff:8a:22:89:7d:89:19:af:13:57:40:c8:b9:ca:60:54:9a:35:
         5f:95:6c:dc:1d:ce:d1:0a:15:10:83:17:ab:fa:22:dd:9a:ea:
         46:ec:32:85:e6:68:74:87:51:d5:8a:88:cd:df:73:e8:32:0e:
         8f:4d:1c:0f:20:3a:11:df:25:f5:ec:ef:ba:bb:e8:ac:4c:e8:
         d3:6d:11:ed:3d:c3:31:ce:e7:a8:c3:f5:60:98:0f:92:9a:b3:
         ce:4d:d8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:14:17 2026 by rpki-client