Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File:                     klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier:          8HgRvg0XVf4+O9PIoxEVqPiQ2MwqGpcex/Ebq58haZA=
Subject key identifier:   26:4F:4F:48:CA:3E:AB:BB:EB:3D:62:CD:D0:FE:79:6B:C4:D9:C6:C9
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer:       /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial:       01A08CB1905879EC87708040AE7825BAAF57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number:          1A49
Signing time:             Thu 10 Sep 2026 19:00:42 +0000
Manifest this update:     Thu 10 Sep 2026 19:00:42 +0000
Manifest next update:     Fri 11 Sep 2026 19:00:42 +0000
Files and hashes:         1: 40z5BTIzE-Otta9d5IxXlYjWk7Y.roa (hash: /K+vL2kVy1Ot78ZCbPvu7R3pgRcpdRMgsyhuVzNibSE=)
                          2: FnnFa3pMmqf3MiWUuKMyoAVWg-s.roa (hash: 6fPOtoWUy4XsTgZEttrlKq8GChMydmNHVVGJEIcxPdY=)
                          3: J4mHGlSY7agF8AXFPW8l8IBLAAI.roa (hash: /s0Afv+pL0DwKivaJvq3/xoIpyRomxE5EF1DLE1ue6g=)
                          4: ePQMQe046NknExZADvr19blY0SA.roa (hash: wKoVniNasUoMb11Rk/qza9dNeWvntUlfFXzDDxceLEM=)
                          5: hcjtq7J7FKS0bIahe8TWZOilbrc.roa (hash: uOY6FMIgCoFqDzQfMMnNRctUj2RDP4gSOMAnS9KpjHI=)
                          6: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: HIMGKfTCsW1RRaHYFMdFmMVGTt1YaVqPPOoz6F4Bu5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:b1:90:58:79:ec:87:70:80:40:ae:78:25:ba:af:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
        Validity
            Not Before: Sep 10 19:00:42 2026 GMT
            Not After : Sep 11 19:00:42 2026 GMT
        Subject: CN=264f4f48ca3eabbbeb3d62cdd0fe796bc4d9c6c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:84:8d:b2:15:fc:f5:9d:ea:47:db:5e:68:
                    e9:66:98:37:c8:d5:4e:8c:d5:5b:05:0f:05:77:1b:
                    78:60:63:7d:e0:a3:b0:f7:08:a5:22:5e:8e:59:49:
                    8d:13:6c:61:eb:0a:fd:0a:4a:d7:34:32:b1:ab:93:
                    3d:b9:9b:4a:68:ec:2c:49:05:fb:90:97:ea:07:37:
                    32:45:77:3d:4e:2a:04:bd:01:94:09:05:39:66:4b:
                    f1:a2:e0:f2:10:ed:18:4e:29:63:25:cc:3e:db:f1:
                    cf:81:9f:c8:40:75:58:84:38:a5:0b:dd:72:6b:64:
                    98:6e:da:d6:c0:0c:a7:fb:46:67:8b:22:71:64:41:
                    f8:2f:43:8c:bb:35:7a:9f:f3:4e:9a:6d:e5:9e:b6:
                    60:ed:d4:3a:30:14:8a:d2:5e:0c:60:0c:f1:c1:10:
                    e3:aa:9c:90:6a:1b:81:e8:14:cb:42:eb:08:db:c9:
                    63:52:2c:c3:86:b3:4f:a7:d1:46:ad:2a:80:1b:19:
                    e2:d1:2a:98:37:a2:3f:9c:c5:23:5e:af:1b:71:d1:
                    c9:38:97:a4:35:9f:58:2f:0a:d9:f1:92:27:e5:f4:
                    e8:21:27:c8:3c:08:49:0e:35:6a:94:7d:d1:7f:84:
                    9a:13:b6:ba:0b:75:e6:40:ed:69:3c:65:97:05:3f:
                    03:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4F:4F:48:CA:3E:AB:BB:EB:3D:62:CD:D0:FE:79:6B:C4:D9:C6:C9
            X509v3 Authority Key Identifier:
                keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c5:6b:df:c6:f9:b7:63:9a:00:c1:9d:d7:fe:39:e3:bb:ae:
         a5:98:c2:d2:84:be:3b:e7:e2:b3:c2:1d:75:6d:7f:ad:69:13:
         d4:57:ce:cc:dd:7d:ba:01:58:d9:7a:aa:17:39:16:1e:6a:2d:
         60:02:fe:a0:62:2d:28:13:3a:00:0c:e0:55:40:6d:55:67:10:
         b1:87:89:34:32:90:cd:29:61:61:c3:69:a6:bc:ac:84:ff:1f:
         76:06:a4:7e:69:68:42:ea:6c:26:e2:22:d5:57:0d:ed:f0:2b:
         73:1e:87:ec:96:3c:71:41:c3:f9:bb:b1:75:57:2e:9e:e5:b6:
         51:1b:8a:b3:b5:12:90:36:b7:52:83:1c:0c:50:d9:33:ee:ef:
         f2:6a:98:75:39:21:2d:a7:a8:47:34:29:38:5f:9f:f6:6e:7c:
         27:3d:c8:43:4a:37:f6:de:6b:c3:a7:23:40:05:14:4e:91:7f:
         79:4d:fa:84:a1:e0:94:90:84:78:ea:8c:69:e7:9d:6e:a6:3f:
         e0:36:10:0e:81:b4:46:57:82:96:0f:c7:87:4a:08:8b:ed:7c:
         d8:33:7f:03:02:a6:0e:c6:cb:6a:60:b3:b7:ae:e0:2c:82:43:
         0c:0b:58:e8:2d:c7:4c:88:47:55:13:da:88:a7:c8:1c:7d:55:
         59:dc:d0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:41:18 2026 by rpki-client