Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File:                     KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier:          4YKYaazCC03KYlHDZl4YBDhJaJIo9BMuIa1gXK20fU0=
Subject key identifier:   F2:3E:59:37:A8:31:29:24:4D:3C:90:7F:9A:12:6B:81:D6:5A:80:3A
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer:       /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial:       0198469B440DD94F7E67EEB5273447AE2C53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number:          09E9
Signing time:             Sat 26 Jul 2025 12:00:37 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:37 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:37 +0000
Files and hashes:         1: B-4mThf4e-80zWpEOjTSvUoatyg.roa (hash: iLGZvkSCMs5F+PZw6Uabdz+fABoTG9YghxbSRDf22wI=)
                          2: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: zeM4Y2PaMlu0Q4Da9LPDV1gdO6iP4ChrUpLWgzXXo1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:44:0d:d9:4f:7e:67:ee:b5:27:34:47:ae:2c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
        Validity
            Not Before: Jul 26 12:00:37 2025 GMT
            Not After : Jul 27 12:00:37 2025 GMT
        Subject: CN=f23e5937a83129244d3c907f9a126b81d65a803a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0e:16:26:6e:ff:96:d7:98:b0:5c:82:cf:2e:
                    83:9d:60:b8:02:75:df:0e:31:25:d6:10:c4:01:60:
                    3c:04:72:14:bc:97:42:61:70:7a:01:37:88:33:09:
                    ac:98:04:0b:8d:55:8b:5d:3f:fe:49:d2:58:2b:e1:
                    b9:dd:27:90:74:ac:39:cb:43:e7:9d:c0:85:18:06:
                    7e:76:7b:f4:91:6a:38:45:f0:83:3c:4a:b3:92:30:
                    e9:90:4a:2e:2a:cc:2d:f7:27:aa:3e:26:a1:73:ba:
                    81:cb:89:48:d4:cc:73:fc:50:c5:b2:d3:58:bd:04:
                    99:a8:9f:28:98:ac:64:5f:6c:11:a0:a9:61:3e:84:
                    b6:a4:99:92:73:d1:ce:99:b5:ca:75:61:92:02:8f:
                    55:a2:e1:60:4e:e7:f2:68:e8:2b:29:9f:09:ef:2b:
                    f5:d4:bf:a0:5a:cd:5d:d2:50:07:0f:99:14:54:53:
                    b7:33:c5:3e:9a:82:80:09:bb:5d:70:45:68:16:ea:
                    90:f0:de:53:dc:26:2f:2f:a5:33:74:cf:3a:2b:6a:
                    34:83:81:b3:ac:ad:4e:ca:54:c6:34:4a:b1:e3:ce:
                    19:fe:0e:92:9e:ac:94:18:96:32:3e:85:fd:35:cb:
                    7c:2b:d2:42:07:e6:be:56:b8:23:94:77:36:84:07:
                    7a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3E:59:37:A8:31:29:24:4D:3C:90:7F:9A:12:6B:81:D6:5A:80:3A
            X509v3 Authority Key Identifier:
                keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:15:65:1e:b0:50:5d:3f:c2:7e:22:9f:1b:03:f1:5f:2b:f5:
         15:c3:f3:34:14:b9:e6:bc:17:89:be:53:e6:a0:48:63:2d:1e:
         a0:9e:87:a0:16:d1:3d:9c:8c:97:07:31:66:7d:8c:ed:ea:f6:
         b5:df:f3:01:78:31:78:59:5f:ba:39:61:6e:ac:b1:2a:79:a2:
         20:57:5b:15:20:65:97:04:06:c5:fb:2c:e9:88:e8:22:42:41:
         3f:e4:3e:41:19:e8:49:05:ed:e2:b0:b6:6f:fe:fe:72:bd:4e:
         c5:b0:d6:c8:8a:76:30:28:b2:9e:0f:e9:d3:c3:39:0d:ac:49:
         11:fc:99:72:00:8e:6a:f6:79:8f:79:ca:9e:81:a9:a4:5a:4f:
         02:27:b1:1a:0f:ff:44:8d:b1:63:8e:40:a8:9a:f1:2d:17:57:
         b4:bf:dd:f2:1e:8e:9d:cc:9d:fd:68:38:30:3a:a7:71:8b:88:
         6f:28:d7:52:52:f0:0c:38:13:3f:f8:87:b6:59:45:9d:d6:36:
         f8:3b:83:a8:b2:8c:bb:81:fc:5a:83:b5:42:a4:1b:ec:84:af:
         14:c2:6b:ed:10:2b:52:4f:3b:7e:a1:08:18:b6:b6:c8:11:73:
         55:28:3c:58:2e:70:6a:85:32:8f:18:b6:ac:71:df:16:a3:a7:
         7d:9e:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:44:35 2025 by rpki-client