Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File:                     KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier:          OrQ2IAIpreRX58q8P0JSdXFnx8BI8ka2BFmKKjYYEk0=
Subject key identifier:   46:43:AD:F5:9C:38:83:29:E4:44:92:9A:5E:02:67:8A:FE:6D:BF:EB
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer:       /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial:       01A0039461F347C80004557759136480A58C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number:          136E
Signing time:             Sat 15 Aug 2026 04:00:50 +0000
Manifest this update:     Sat 15 Aug 2026 04:00:50 +0000
Manifest next update:     Sun 16 Aug 2026 04:00:50 +0000
Files and hashes:         1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: X/MAc6BHT3t+nSrBdx9TeK6ITsmyw66skxAzaD/4oFI=)
                          2: KT302nZV2Y2p4WDMTwVmIhKydvc.roa (hash: RA/+n+j+c+JYu9hIIUbQQ1FyM1sNRqfioO7K+YA4lYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:61:f3:47:c8:00:04:55:77:59:13:64:80:a5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
        Validity
            Not Before: Aug 15 04:00:50 2026 GMT
            Not After : Aug 16 04:00:50 2026 GMT
        Subject: CN=4643adf59c388329e444929a5e02678afe6dbfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:c3:e5:4e:5c:71:93:ac:c9:6e:f1:ea:ab:
                    78:5d:e5:e5:96:e7:91:33:60:b2:4d:97:66:65:39:
                    10:a7:16:a5:d5:f4:23:fa:a3:6e:2e:4e:a6:46:da:
                    45:1e:16:e2:f7:6b:83:ff:b7:31:33:21:b7:1f:57:
                    52:7c:f1:4f:dd:4e:f2:da:ec:30:fb:90:45:c2:74:
                    6d:41:66:90:31:17:db:ed:7d:34:bf:29:1a:58:45:
                    b7:77:0e:56:38:0e:be:4b:6b:56:bb:33:28:df:2d:
                    25:54:5c:23:53:81:5a:89:a9:3b:7f:05:1e:c4:be:
                    98:10:87:39:01:6b:91:43:9b:2a:8c:74:7b:b3:a9:
                    f7:31:92:11:db:bf:68:3f:d1:13:53:bf:2b:3d:d8:
                    58:f4:fe:8a:a7:0f:f0:4f:1e:33:67:34:74:25:0e:
                    4c:bc:1f:3f:27:d8:6d:61:21:ee:26:7e:ef:82:f9:
                    51:8f:8b:13:61:1a:57:b6:24:b3:1d:58:e9:9d:ac:
                    c1:15:ac:4e:bb:92:40:ce:d6:32:51:b1:3e:c8:d5:
                    95:7c:a7:a2:4d:48:2e:ad:63:b8:28:c3:a6:32:08:
                    55:b3:f1:45:d2:6d:7e:12:af:8f:27:bf:e1:16:85:
                    b7:24:e5:d7:49:fc:d3:98:7a:7a:6b:7a:4d:ff:4d:
                    d0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:43:AD:F5:9C:38:83:29:E4:44:92:9A:5E:02:67:8A:FE:6D:BF:EB
            X509v3 Authority Key Identifier:
                keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:24:a9:4f:46:ce:ec:4e:45:5e:16:b5:b6:02:99:a3:d7:b8:
         f8:24:ff:d9:8f:62:11:08:56:63:e6:22:ee:12:22:45:d3:d2:
         1e:af:8c:a6:ef:d2:08:5f:ac:4b:c7:3c:76:10:67:20:bb:7c:
         3a:33:7e:63:dd:c3:a1:2e:1e:40:e6:45:4e:cd:f6:18:8e:0d:
         18:7c:af:f7:b4:2e:2b:36:77:8b:4d:4d:ac:89:26:7c:6e:9a:
         ae:05:7a:f0:70:6f:69:cf:2a:14:a0:da:b4:03:86:f4:7c:67:
         c5:b8:c5:cb:71:d8:49:28:a8:2e:9a:64:69:e4:7b:6b:bf:21:
         28:46:f9:6a:73:52:01:45:be:52:f4:58:93:f9:aa:eb:de:bd:
         a1:6d:4a:c1:f6:8d:88:9a:7e:53:af:5a:76:b1:87:2a:f7:bc:
         dd:e9:64:65:25:f3:9e:a0:3c:8c:2f:80:5b:d5:a2:a7:44:32:
         ee:28:77:de:de:22:e8:8b:64:02:b9:ca:93:42:3c:73:cf:60:
         34:c6:b6:6c:c6:e9:c2:ab:ef:56:c6:fc:a0:3b:b0:8a:d7:0d:
         9b:cc:c1:e7:db:e9:bb:fe:47:35:a7:15:31:99:a3:bb:54:9a:
         17:6c:6b:e4:b8:d7:aa:89:52:5d:50:e0:30:cc:73:1a:c5:f4:
         be:65:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:41:24 2026 by rpki-client