Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File:                     KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier:          Of4uWrQcCG6U4OV6zCwWmuJ4eaFncQ14ZFg1C9uslVU=
Subject key identifier:   BC:95:11:43:7E:2C:D3:78:D6:01:58:B1:36:4C:1A:AD:71:F0:F0:0B
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer:       /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial:       01A06E712B8BEE22B4241230B9D7C9782A4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number:          0E23
Signing time:             Fri 04 Sep 2026 22:01:45 +0000
Manifest this update:     Fri 04 Sep 2026 22:01:45 +0000
Manifest next update:     Sat 05 Sep 2026 22:01:45 +0000
Files and hashes:         1: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: Ej7rhnJs1QUGeYMg6BzDk5XWJB7x2caoN56KZyqRvvs=)
                          2: SaYypv9VAJ84xKAeNkRLodoblMc.roa (hash: GtKZWyv3+glT6p+I3huIJVfHLB6xoMQ/NbzSHVIURY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:71:2b:8b:ee:22:b4:24:12:30:b9:d7:c9:78:2a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
        Validity
            Not Before: Sep  4 22:01:45 2026 GMT
            Not After : Sep  5 22:01:45 2026 GMT
        Subject: CN=bc9511437e2cd378d60158b1364c1aad71f0f00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:30:32:d5:25:a6:98:9b:f0:0d:74:b5:42:
                    ca:bd:90:46:f5:ff:47:95:0b:80:d6:f0:5b:3d:a6:
                    c3:28:d5:55:cb:fc:63:28:bb:b3:48:61:1d:d0:7b:
                    44:c4:e6:de:7f:46:6f:03:15:ce:37:6a:41:a9:8d:
                    e4:84:ce:03:26:82:20:57:11:99:23:c9:df:f4:06:
                    d5:67:1e:ca:ac:25:67:51:f8:2f:9c:24:87:e6:db:
                    cb:be:4d:27:5f:f4:ca:c1:c1:97:bc:f7:01:66:60:
                    3b:1c:2e:3d:b4:fa:25:52:ea:5d:95:54:35:1c:7e:
                    94:5e:9b:02:d2:f6:b8:1a:0e:1b:d5:83:e8:4d:74:
                    f0:17:f4:5a:57:ec:9d:f0:3b:a4:c2:10:2a:ca:ff:
                    f7:b1:ad:f8:47:e8:56:28:6b:6a:59:27:85:ce:79:
                    ba:8d:cc:05:7c:4c:85:10:4b:e2:42:00:87:ab:a6:
                    2c:1a:db:c7:89:d7:67:02:c0:92:c9:23:9e:63:e1:
                    58:5e:be:fd:d0:5b:32:11:67:f6:b6:f4:f0:a8:78:
                    f2:61:fe:3c:b5:c4:c4:f2:f9:44:9b:30:c7:a9:d4:
                    c5:ab:d6:4e:50:9a:20:79:dd:8c:86:5e:96:58:bb:
                    ef:f8:d4:bb:3d:56:ea:0a:9a:b4:bb:44:08:4d:1b:
                    17:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:95:11:43:7E:2C:D3:78:D6:01:58:B1:36:4C:1A:AD:71:F0:F0:0B
            X509v3 Authority Key Identifier:
                keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:13:4c:c9:f7:27:a2:db:df:d3:a2:4f:23:1f:b7:96:c8:1e:
         ea:62:e2:b9:79:95:da:73:e1:67:34:ed:d7:af:b9:12:45:d2:
         24:a5:0e:b2:ed:89:3f:09:14:8d:a8:a8:7e:18:ae:f2:0a:fe:
         dd:9e:3c:67:a3:c9:eb:a2:09:12:78:b7:8b:08:f9:c8:1c:c7:
         96:b7:f2:98:3c:3a:cb:2d:79:c6:86:7c:68:d4:04:56:86:ef:
         da:fa:21:90:77:f6:38:1e:3a:bb:a8:24:21:65:c9:8d:e1:c8:
         fa:a7:a2:a4:c3:99:1e:4b:0d:65:df:8b:f7:61:3a:ca:e0:9a:
         72:46:27:03:69:5c:41:c3:4b:90:9f:ab:05:6a:82:96:35:00:
         85:0b:b3:3c:78:6c:ba:f8:26:09:8c:0f:65:0d:dc:de:bc:16:
         df:74:78:fc:b6:aa:f0:b7:85:a4:ae:5e:6b:f0:32:d7:68:fe:
         14:4b:e5:71:7b:ba:87:7a:1d:18:62:cf:b1:a4:74:99:9b:71:
         d4:e9:58:d6:8b:d7:d4:64:f3:70:7d:e9:2f:8a:82:1c:8c:b1:
         f2:be:00:c7:4a:74:86:9f:3c:8e:61:70:1d:0f:b2:f4:f5:62:
         5b:d2:14:67:0e:b1:58:2b:e6:f1:ea:ee:fe:ff:86:52:a9:e4:
         4b:a7:50:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:17:37 2026 by rpki-client