Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File:                     KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier:          aXVj+YUla3YRcOFeOi7McHS3gXeN9VoSeomGOxWDvfM=
Subject key identifier:   18:DE:09:F5:73:BE:C4:F1:B1:25:A1:2A:BD:76:01:4A:6A:BA:26:92
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer:       /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial:       019F9436C1D4A84673EFE69CABC30E964AD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number:          0DB2
Signing time:             Fri 24 Jul 2026 13:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:44 +0000
Files and hashes:         1: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: bis60T4Wf2v+yzomqQLrgXBpFE7E0WQGFSnfhhJWf3o=)
                          2: SaYypv9VAJ84xKAeNkRLodoblMc.roa (hash: GtKZWyv3+glT6p+I3huIJVfHLB6xoMQ/NbzSHVIURY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:c1:d4:a8:46:73:ef:e6:9c:ab:c3:0e:96:4a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
        Validity
            Not Before: Jul 24 13:00:44 2026 GMT
            Not After : Jul 25 13:00:44 2026 GMT
        Subject: CN=18de09f573bec4f1b125a12abd76014a6aba2692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:9a:ca:3a:4d:50:ff:5e:94:b8:70:2d:28:cf:
                    81:bc:90:03:5e:ff:99:ba:46:b9:9c:ac:a6:19:6f:
                    5b:a9:80:12:9f:47:21:45:36:16:74:35:11:37:24:
                    a7:89:a3:9e:2b:f9:c7:44:bf:9d:65:1d:2e:05:27:
                    55:25:76:48:0c:78:3e:51:08:6f:0f:49:48:bf:14:
                    5c:43:70:aa:83:6a:f0:8f:ae:ee:08:a9:72:33:6f:
                    a3:a6:39:70:e0:6e:27:e5:88:d3:4e:1a:0b:e4:1c:
                    02:58:56:bf:20:49:a1:0c:87:1e:73:e9:1a:b4:a5:
                    97:04:bd:e7:60:45:9d:4f:ad:c3:30:e0:04:72:23:
                    e6:82:f8:29:83:7c:1a:bb:83:40:c4:7b:69:26:58:
                    fd:4d:7f:2d:56:30:d5:46:ae:04:57:0b:0d:80:2a:
                    bd:88:9e:a8:6a:d0:73:10:87:97:30:55:b7:c9:9f:
                    96:3d:56:69:00:6a:79:ca:a3:fb:3c:8f:ba:ed:9d:
                    18:2e:63:50:06:c8:92:9d:38:84:d2:f0:97:d2:93:
                    14:c3:99:8c:48:c2:d1:4d:f6:9f:b7:89:bf:d2:56:
                    76:7d:7f:86:2d:3b:0e:06:00:88:83:db:7e:74:0a:
                    af:fa:b1:7a:56:15:dc:bc:cd:e4:a6:3b:55:63:6f:
                    d8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DE:09:F5:73:BE:C4:F1:B1:25:A1:2A:BD:76:01:4A:6A:BA:26:92
            X509v3 Authority Key Identifier:
                keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8c:83:3b:fe:28:44:ef:e5:31:8b:26:e4:6f:f7:b1:a5:c2:
         03:c7:99:59:48:2b:58:a3:d4:c7:42:c1:e6:78:ac:68:b0:35:
         48:95:fe:c8:7d:ea:a3:f0:34:ad:ef:a4:a0:a3:f8:aa:f1:e4:
         a5:70:60:9e:7a:af:7e:95:da:e7:e7:51:e8:cb:85:d9:00:c5:
         7b:32:cb:d6:a9:aa:af:9b:6b:83:69:32:d8:34:75:d9:1b:a3:
         a2:4b:9c:98:8e:91:88:83:27:de:bf:6d:24:08:15:c8:60:31:
         4f:63:dd:8f:cd:21:48:49:44:ca:a8:21:f6:45:d5:aa:83:49:
         ed:38:69:5a:aa:cd:f5:39:85:d9:30:05:f7:2b:2b:85:e4:d4:
         cd:6e:20:1a:78:f7:6f:92:b1:24:84:f2:32:0c:cf:fd:27:b9:
         91:32:0e:18:a1:61:0d:52:0b:44:58:79:31:e6:e3:57:5d:2d:
         68:bd:45:0f:25:f8:ee:e0:b2:0a:84:b7:81:71:ad:3c:98:75:
         55:82:04:5c:6c:41:4c:16:11:5c:a7:04:dc:dc:8a:3e:aa:8d:
         55:88:ae:26:69:e4:41:37:30:9d:f1:97:2d:1c:59:90:00:2a:
         5f:09:cb:00:49:82:cb:71:7a:e1:ed:68:51:60:0e:44:dc:25:
         35:1b:6b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:03:14 2026 by rpki-client