Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File:                     KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier:          Gv0OMfBx3URx1bgx/Q9617ZQGghx2Znv8gjez83hhsE=
Subject key identifier:   F4:5E:D1:47:49:8E:0E:69:4E:25:FB:5E:02:FA:3B:9C:DD:0D:52:00
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer:       /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial:       01A180AB28D67786C7031723037653EB8200
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number:          103A
Signing time:             Wed 28 Oct 2026 04:01:02 +0000
Manifest this update:     Wed 28 Oct 2026 04:01:02 +0000
Manifest next update:     Thu 29 Oct 2026 04:01:02 +0000
Files and hashes:         1: 6JMQmYaXJRiml5BYtsy3jnW-erA.roa (hash: kbV9Lg8RcdOaIR/u2kpU49sw8x1vZ57CjX7SJnkdSvg=)
                          2: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: 0u6ktVFZ5sKmFVuNp6W09ycY4Sq0XbqE1SFcGrObAZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:ab:28:d6:77:86:c7:03:17:23:03:76:53:eb:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
        Validity
            Not Before: Oct 28 04:01:02 2026 GMT
            Not After : Oct 29 04:01:02 2026 GMT
        Subject: CN=f45ed147498e0e694e25fb5e02fa3b9cdd0d5200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:54:b3:6f:51:44:e4:1e:cd:94:26:14:82:
                    47:92:19:89:ec:e1:b8:50:85:00:27:d3:a5:89:97:
                    a1:05:31:dc:57:62:98:39:96:a3:69:00:d8:04:2f:
                    ba:57:17:e7:fa:94:71:3d:75:f9:22:50:a1:bd:20:
                    e3:3f:58:a4:39:06:db:12:18:b6:f2:26:b1:70:c0:
                    8b:4b:9a:95:0f:af:cf:ce:b4:69:b2:da:5f:ac:8f:
                    20:42:88:44:35:8c:b5:82:b3:d0:ee:db:65:30:bd:
                    71:76:13:d8:60:9a:6a:13:b3:a3:82:ba:e0:00:56:
                    47:cc:0c:76:47:3e:43:d9:bb:0e:5a:26:94:b2:84:
                    24:ac:b6:6a:01:35:b3:f7:b1:92:ec:8e:ea:5b:fc:
                    c7:1d:90:93:61:95:6d:41:d9:b1:c1:8f:65:b0:5e:
                    51:43:c1:7c:cc:e0:d6:7b:cf:1b:8e:db:7b:6e:b1:
                    e0:4c:45:e6:3b:d8:8b:bb:4a:61:f9:37:10:1a:55:
                    e9:11:db:f2:13:a1:1c:86:9b:80:23:91:f3:71:d0:
                    0f:b1:c8:7b:50:08:54:aa:74:49:58:c1:19:c3:fd:
                    18:ea:48:8d:03:26:2d:54:b9:83:6e:d3:a5:5d:36:
                    52:88:a1:61:bf:d6:9a:93:91:c3:0a:8b:0e:1d:f2:
                    76:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5E:D1:47:49:8E:0E:69:4E:25:FB:5E:02:FA:3B:9C:DD:0D:52:00
            X509v3 Authority Key Identifier:
                keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:02:f4:a6:0b:cf:72:42:d0:0d:e2:84:22:f5:d0:b2:26:cd:
         bc:a1:1b:07:e8:69:de:e3:58:20:f7:aa:c6:a0:d5:5b:a6:ab:
         12:27:b8:33:d9:b0:95:37:41:1c:b6:fe:ab:3a:9e:ff:49:79:
         e1:8f:fa:18:88:b1:a9:fa:f9:7b:78:2b:ca:87:72:a0:22:fc:
         16:db:84:2a:84:9f:4e:44:21:5c:bd:b0:09:dc:6b:01:31:8c:
         7a:d6:9b:84:fb:13:78:75:26:e0:b4:7a:ba:51:f3:66:80:f0:
         50:50:da:d4:5c:4e:00:7b:1b:e4:91:2c:79:7f:5c:32:ea:21:
         6d:c0:a6:8d:bf:b2:ba:48:22:9a:3b:87:a4:b3:c0:dd:e8:dd:
         64:ab:61:3c:e0:37:91:19:d6:4e:e8:e1:7a:db:e8:b1:a3:77:
         d0:95:f4:d8:78:90:5f:ea:a0:84:f8:c5:5c:ef:de:44:15:93:
         e3:50:6d:38:00:24:ad:62:9c:2c:4b:08:d0:ea:c2:01:2b:f2:
         f6:ab:ff:c7:b5:dc:b4:37:10:db:3f:57:f0:0c:42:12:98:14:
         9f:a7:5b:58:0d:d5:56:bd:4b:95:20:66:ab:00:7b:5d:d8:69:
         3c:a3:c2:a8:4b:ad:93:25:06:e8:7d:d0:41:c2:2d:f1:a2:a8:
         33:4f:c1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:36:08 2026 by rpki-client