Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
File:                     klzs7-UigXQF0m_JK7UQSskM_cU.mft (raw, json)
Hash identifier:          Pz393KIuOO5QZCIxA+nVewzajXbE3k4mONb35jmDqQ0=
Subject key identifier:   51:01:20:46:89:0F:06:AC:06:0E:46:D9:96:F8:8C:56:5F:FF:48:3E
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Certificate issuer:       /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial:       019D37899450087031FFFB00815CD1352D4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
Manifest number:          1832
Signing time:             Sun 29 Mar 2026 03:00:56 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:56 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:56 +0000
Files and hashes:         1: 0GCsGSEu6DSdqgQKkWIJMKqEzcA.asa (hash: 6gVpx5jmmmCx0ej4LCILiXSE1CBS1qBw2+guqoZYU2M=)
                          2: 6ivdGkU4JpcdJeEUFclfUNispsA.roa (hash: pfbQDLdc9UvvbTXv81c/HKOtEm0dsqUfCqMUxvYHjrw=)
                          3: HWe81iVnCrvWZ5i70lYuwQBI6vo.asa (hash: O8hn1wn8hJYxcK/0FDMVDJ2dqEBCiZuaFkqQn8V67K4=)
                          4: KW_8cQbCRZrMxXEyWhTa1RCtzvY.roa (hash: lmD03CJD5jyT9rgsLt03/38cv3snb1tZTQ3m9TewTSk=)
                          5: klzs7-UigXQF0m_JK7UQSskM_cU.crl (hash: vnzS68OYKsmjY0BaMngsu+lUMzxycnWqROfSsBZ++dQ=)
                          6: vIN44HyEP5wnRYxa1TMQU9fUKVk.roa (hash: UPxjEVREQVIYJdYxcduu/9fmVIgZHpDXz79ozRrZ6Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:94:50:08:70:31:ff:fb:00:81:5c:d1:35:2d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
        Validity
            Not Before: Mar 29 03:00:56 2026 GMT
            Not After : Mar 30 03:00:56 2026 GMT
        Subject: CN=51012046890f06ac060e46d996f88c565fff483e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:d5:12:ea:7e:70:f5:7d:78:60:2e:6a:cd:
                    e3:e6:38:39:3c:c2:43:8c:85:aa:16:76:2c:9e:24:
                    3f:ea:e8:6a:6b:9a:e0:82:1e:b8:f1:c3:24:c3:0d:
                    f4:90:dc:b3:45:66:2c:6e:3b:a1:17:68:76:da:32:
                    1e:19:eb:b2:ac:12:81:5a:02:65:ba:19:9c:44:f1:
                    15:bf:d9:6f:7b:6e:fd:9b:d9:c6:4e:c6:2f:17:cb:
                    e5:50:9f:d7:3d:51:13:50:b5:f8:fb:e5:9e:49:c8:
                    88:d0:61:57:e8:02:cc:3e:17:6c:0b:b0:68:27:9c:
                    c1:82:ae:39:7c:88:6c:d9:81:ef:a9:c2:dd:35:a5:
                    5e:08:d7:4e:26:9a:f3:f5:2a:fe:0c:7a:3c:76:db:
                    96:a0:0e:84:11:ff:01:18:a6:20:7d:47:ec:3d:dc:
                    1a:58:7d:8a:5e:ea:01:0d:17:32:25:2c:e6:19:b1:
                    e8:40:0a:40:73:a4:9d:e7:11:66:3b:e7:70:88:68:
                    a9:15:1e:10:c5:62:ec:ea:eb:cf:38:49:5f:c4:59:
                    54:c3:4f:26:42:02:4e:6e:df:c3:4e:4a:26:8b:af:
                    15:2a:52:32:9d:f8:fe:4c:aa:f1:ff:d2:ec:5a:07:
                    6a:6b:b4:b9:93:d2:54:53:e0:4c:3a:af:ca:00:4b:
                    96:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:01:20:46:89:0F:06:AC:06:0E:46:D9:96:F8:8C:56:5F:FF:48:3E
            X509v3 Authority Key Identifier:
                keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:15:90:cc:13:79:cc:c3:db:16:9a:d9:77:2e:0d:10:e3:1b:
         1b:fc:d5:ab:0c:85:eb:af:c3:af:f3:23:89:8b:4a:74:cf:1c:
         04:a1:c6:51:25:ac:31:7e:fb:88:21:f2:b3:0e:b1:b2:9e:77:
         61:d6:cc:fd:07:a4:96:12:29:0a:c1:79:5a:c6:16:a8:78:55:
         83:41:da:91:21:ed:b0:97:0b:07:2f:e1:de:3d:e7:b0:e3:c6:
         11:aa:cf:14:a1:e6:73:54:2f:7e:d8:8c:df:0f:76:90:25:bb:
         35:3a:75:05:bf:e5:97:62:c2:51:a0:bb:1d:df:9d:e8:3e:18:
         8e:97:8c:98:ed:30:fb:f8:97:40:02:00:f6:3f:8f:af:40:fc:
         9f:d0:92:2f:7a:db:dd:b4:cd:07:9f:ec:63:6f:0c:8c:8b:04:
         05:a0:63:7b:1e:93:91:1b:13:a1:bd:73:e2:7a:5b:79:e3:cd:
         37:88:0f:d9:6f:ba:e6:b7:49:f6:54:70:89:d2:83:b4:fc:8e:
         65:fa:45:ad:0f:aa:b3:dd:5a:66:86:f8:89:e0:8b:78:03:7c:
         0d:cc:c5:f3:44:4a:e2:93:64:de:2e:d4:c4:69:85:e7:60:02:
         52:a9:74:19:85:93:6e:17:ba:8e:4a:03:0b:bb:0f:3e:6e:ed:
         dd:31:59:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iZRQCHAx//sAgVzRNS1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNWNlY2VmZTUyMjgxNzQwNWQyNmZjOTJiYjUxMDRhYzkw
Y2ZkYzUwHhcNMjYwMzI5MDMwMDU2WhcNMjYwMzMwMDMwMDU2WjAzMTEwLwYDVQQD
Eyg1MTAxMjA0Njg5MGYwNmFjMDYwZTQ2ZDk5NmY4OGM1NjVmZmY0ODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukrVEup+cPV9eGAuas3j5jg5PMJD
jIWqFnYsniQ/6uhqa5rggh648cMkww30kNyzRWYsbjuhF2h22jIeGeuyrBKBWgJl
uhmcRPEVv9lve279m9nGTsYvF8vlUJ/XPVETULX4++WeSciI0GFX6ALMPhdsC7Bo
J5zBgq45fIhs2YHvqcLdNaVeCNdOJprz9Sr+DHo8dtuWoA6EEf8BGKYgfUfsPdwa
WH2KXuoBDRcyJSzmGbHoQApAc6Sd5xFmO+dwiGipFR4QxWLs6uvPOElfxFlUw08m
QgJObt/DTkomi68VKlIynfj+TKrx/9LsWgdqa7S5k9JUU+BMOq/KAEuWTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEBIEaJDwasBg5G2Zb4jFZf/0g+MB8GA1UdIwQY
MBaAFJJc7O/lIoF0BdJvySu1EErJDP3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEt
OGQ0YmZkMGFhY2U4LzEva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEtOGQ0YmZkMGFhY2U4
LzEva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchWQzBN5
zMPbFprZdy4NEOMbG/zVqwyF66/Dr/MjiYtKdM8cBKHGUSWsMX77iCHysw6xsp53
YdbM/QeklhIpCsF5WsYWqHhVg0HakSHtsJcLBy/h3j3nsOPGEarPFKHmc1QvftiM
3w92kCW7NTp1Bb/ll2LCUaC7Hd+d6D4YjpeMmO0w+/iXQAIA9j+Pr0D8n9CSL3rb
3bTNB5/sY28MjIsEBaBjex6TkRsTob1z4npbeePNN4gP2W+65rdJ9lRwidKDtPyO
ZfpFrQ+qs91aZob4ieCLeAN8DczF80RK4pNk3i7UxGmF52ACUql0GYWTbhe6jkoD
C7sPPm7t3TFZpw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:32 2026 by rpki-client