Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File:                     KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier:          KYd1YvxMHqXOU+lG0cZaJ7RhHoUYyCJahxWk9/gWRko=
Subject key identifier:   DA:49:62:02:FA:DC:E9:B9:34:F7:A4:AB:7E:12:DC:0A:11:7C:25:63
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer:       /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial:       019F65DDE3EF57AD38660E23F1B41BF027F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number:          0F23
Signing time:             Wed 15 Jul 2026 13:01:08 +0000
Manifest this update:     Wed 15 Jul 2026 13:01:08 +0000
Manifest next update:     Thu 16 Jul 2026 13:01:08 +0000
Files and hashes:         1: 6JMQmYaXJRiml5BYtsy3jnW-erA.roa (hash: kbV9Lg8RcdOaIR/u2kpU49sw8x1vZ57CjX7SJnkdSvg=)
                          2: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: bdI9US1sRstsEQ4YRz0vDeZ2gnZf2bdQ0tpMVbDWTaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Jul 2026 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:65:dd:e3:ef:57:ad:38:66:0e:23:f1:b4:1b:f0:27:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
        Validity
            Not Before: Jul 15 13:01:08 2026 GMT
            Not After : Jul 16 13:01:08 2026 GMT
        Subject: CN=da496202fadce9b934f7a4ab7e12dc0a117c2563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:07:eb:d1:8c:82:75:68:54:b3:54:ca:58:34:
                    2d:e7:df:e6:a7:05:9b:c4:2e:b1:33:bd:d7:2a:41:
                    ba:af:be:25:08:f2:ae:ee:cc:27:80:d7:89:87:1e:
                    cc:0b:b6:f9:36:7d:15:28:82:7f:2d:12:52:6a:61:
                    dd:4b:2b:e4:02:89:b6:b0:4d:f7:41:89:68:b0:17:
                    e6:15:5e:0f:c1:28:d3:43:50:2e:e8:a1:b8:ff:b5:
                    dd:eb:0c:2b:53:41:01:a4:06:21:97:c3:01:cb:74:
                    c4:d8:76:df:fd:a8:1a:f2:57:60:b7:96:72:2f:2e:
                    bc:51:65:72:33:f1:50:53:03:a6:28:ab:d2:c7:8c:
                    3a:29:1c:ca:94:ea:19:76:46:f2:27:07:8c:02:d5:
                    d8:b9:3a:c5:4b:f8:d8:ab:9b:f5:c8:97:bb:99:8e:
                    22:64:0b:b6:e3:03:df:55:87:7a:ad:e3:e8:87:bf:
                    74:c3:b9:38:96:60:22:fe:41:da:b9:f8:a6:cb:94:
                    58:8f:da:07:db:fd:10:5f:fd:d6:2a:d8:75:fe:65:
                    fe:82:91:25:3d:95:29:19:18:4c:e0:e7:82:40:9f:
                    3d:37:78:64:ce:5d:74:3b:d7:bc:d3:5d:83:20:7e:
                    b4:0a:d8:7a:0e:f7:18:8b:ea:20:d2:d5:f2:3b:be:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:49:62:02:FA:DC:E9:B9:34:F7:A4:AB:7E:12:DC:0A:11:7C:25:63
            X509v3 Authority Key Identifier:
                keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:49:25:d2:68:a6:33:49:78:3b:25:e3:64:14:c4:ac:78:43:
         4d:7c:d6:78:4a:1e:85:0f:8a:bb:b9:6b:e2:08:46:eb:6f:fe:
         cc:b2:16:1e:f7:a0:6e:d2:a8:04:27:ff:65:b1:6e:99:26:32:
         f0:85:54:bf:3d:88:fc:8a:be:7e:d4:bd:3d:7c:ca:bf:7d:c4:
         0f:36:2d:c8:e2:43:d1:f0:fc:3a:5c:0d:92:17:6c:3d:f7:e4:
         61:90:97:3d:7a:c7:69:90:25:99:b6:b2:c7:4a:82:3e:c1:b6:
         66:f1:d0:b1:ea:e7:83:f8:79:25:2b:56:5b:f3:4f:a5:e9:69:
         45:37:dc:fc:7c:87:a9:54:15:0b:94:18:9a:13:ce:5c:3e:04:
         ed:df:c1:8a:83:8e:17:d2:b7:93:f6:f4:0d:64:03:11:18:6d:
         6a:e0:3c:05:4e:89:37:50:53:fd:2d:1e:36:60:e8:ee:b1:8a:
         43:63:0d:fe:dd:e4:4f:3a:ab:41:65:1a:4c:72:f5:fb:fa:d3:
         1b:42:70:91:85:89:32:36:c3:87:62:2c:be:37:23:82:77:d5:
         84:cf:64:f8:41:f6:d1:c6:17:d5:31:e4:6b:e6:ce:3b:ff:65:
         2f:05:37:20:61:d7:08:66:e9:47:63:3a:88:05:b8:7d:f7:4d:
         f7:25:38:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 22:33:27 2026 by rpki-client