Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File:                     Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier:          hdrrJAvvhoz/oFO5qNMj8k3Y6bob/oVeaTTq9rZNJuw=
Subject key identifier:   E6:CF:2F:29:47:5B:F9:50:A7:90:61:77:5A:CD:68:E6:0A:57:76:50
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer:       /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial:       01A04506987B353CF5B0EB37AE7E37EBE5CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number:          1872
Signing time:             Thu 27 Aug 2026 21:00:55 +0000
Manifest this update:     Thu 27 Aug 2026 21:00:55 +0000
Manifest next update:     Fri 28 Aug 2026 21:00:55 +0000
Files and hashes:         1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: /YMcORJYb84nzXSCtpeRoi1TIas+K3ThYNMtnushop4=)
                          2: eqD1-410xbl18T07yvCtbxsa1Ms.roa (hash: IGD8JZ6WIWOq2cxiQwhCeO2QQ+pd/nJb7mzndaBQXkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Aug 2026 14:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:45:06:98:7b:35:3c:f5:b0:eb:37:ae:7e:37:eb:e5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
        Validity
            Not Before: Aug 27 21:00:55 2026 GMT
            Not After : Aug 28 21:00:55 2026 GMT
        Subject: CN=e6cf2f29475bf950a79061775acd68e60a577650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:be:df:a1:10:97:25:3e:73:e5:b5:48:c7:
                    b6:b0:ae:25:c7:af:2d:ca:67:2f:43:bd:48:05:67:
                    c8:04:c6:6d:2f:cb:2f:20:05:46:1e:aa:c9:ca:a1:
                    a2:c1:e3:1f:03:e6:32:d1:6d:f9:a3:05:5d:e5:f0:
                    c0:4c:da:25:53:16:c8:66:39:90:33:ee:95:6a:bb:
                    89:24:87:19:69:0d:45:85:9a:3f:f1:d7:d2:85:68:
                    6e:7a:c6:d6:11:0e:0c:54:f7:7c:ba:58:44:18:fc:
                    98:29:88:2a:69:29:96:88:2f:a5:b8:65:8b:5b:1e:
                    77:08:b9:7c:eb:5b:2d:f1:d5:df:95:16:96:f5:fd:
                    d0:09:9f:cf:e4:e4:e5:a6:e5:63:2d:ce:34:68:a1:
                    5b:97:c9:31:cc:b6:76:fc:a9:fe:72:8a:7b:90:fb:
                    6e:8c:8d:80:03:09:99:66:0f:9e:20:1e:64:16:bd:
                    94:e7:05:9b:3a:04:5a:06:3c:76:43:e6:d6:73:07:
                    79:78:fa:7c:c7:a6:8d:da:61:05:79:21:fd:ab:52:
                    c4:23:6b:fb:d0:e0:35:29:82:b4:33:7b:20:7a:be:
                    1f:51:c5:0d:36:90:ef:1a:e8:4c:1a:06:4c:aa:74:
                    f9:54:be:a0:95:55:9a:cb:87:55:50:84:76:64:be:
                    72:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CF:2F:29:47:5B:F9:50:A7:90:61:77:5A:CD:68:E6:0A:57:76:50
            X509v3 Authority Key Identifier:
                keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:f8:0e:de:a5:55:41:99:d4:f1:b3:b4:ce:89:1b:ba:e6:e1:
         3b:3a:30:56:e1:cd:fb:90:bc:58:80:b0:c4:0a:f0:98:14:2a:
         5c:37:21:fc:4e:8a:4e:c2:a2:d6:6d:78:94:1a:84:ab:f6:9e:
         a1:21:a2:5c:4f:1f:f0:d2:84:0b:5c:14:8b:a9:a3:df:65:1c:
         9e:ab:8c:6a:6b:09:8d:83:5a:d8:15:53:6d:87:21:09:c6:52:
         e1:8c:18:35:4c:ac:11:bc:cd:f2:78:5a:36:1a:01:e6:a1:ea:
         df:6d:18:09:21:5e:2e:e7:ca:4d:06:b0:84:5c:d3:67:ae:b3:
         a2:2d:9e:a2:8d:fc:40:91:0f:06:a5:54:d3:52:56:58:76:7a:
         4d:93:22:8b:95:14:82:ed:d0:2b:91:2e:d2:c8:29:65:8f:24:
         66:55:c0:9d:13:05:e3:79:71:21:a5:9d:66:27:7d:97:77:bc:
         0b:5b:eb:4e:9d:e6:30:2a:1c:0e:cc:be:5c:2a:44:38:82:19:
         3d:24:0b:c8:c9:dd:8f:5c:3c:3e:77:5a:2f:14:34:7b:77:d5:
         03:2b:1b:6b:ae:8c:8d:76:a1:5b:bf:aa:88:9e:7f:31:d2:9c:
         a2:0a:03:27:19:85:a4:bc:ac:4b:4c:6d:53:ca:03:43:bf:93:
         0a:fe:2e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:47:32 2026 by rpki-client