Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File:                     KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier:          mEo23hM5X1SOaJzz8GF2izcAuN6uf6INHGQgxvf52+A=
Subject key identifier:   FE:03:7C:D3:8E:BC:FF:9D:BE:F5:97:04:4B:75:D3:98:40:BF:7C:FA
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer:       /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial:       019D265F1EDBB95800DCC1C8EC66216C548C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number:          0C70
Signing time:             Wed 25 Mar 2026 19:01:01 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:01 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:01 +0000
Files and hashes:         1: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: ZKFcJR1vIRd4160+XYSIT5yiG4x7VWnQ3eiOTzi2Llc=)
                          2: SaYypv9VAJ84xKAeNkRLodoblMc.roa (hash: GtKZWyv3+glT6p+I3huIJVfHLB6xoMQ/NbzSHVIURY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:1e:db:b9:58:00:dc:c1:c8:ec:66:21:6c:54:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
        Validity
            Not Before: Mar 25 19:01:01 2026 GMT
            Not After : Mar 26 19:01:01 2026 GMT
        Subject: CN=fe037cd38ebcff9dbef597044b75d39840bf7cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:3f:82:c5:35:64:36:f6:1e:26:24:ff:b3:
                    cc:95:41:96:9b:1c:e1:53:fe:ec:f0:a7:ed:e2:10:
                    7b:7c:e3:a3:a7:4c:e4:ab:3d:1a:df:45:88:f8:c6:
                    0a:44:17:5f:e1:c6:a2:02:44:7d:de:14:b6:50:11:
                    f8:27:4b:7c:3c:e0:b1:eb:e0:ef:1e:87:60:27:98:
                    6b:bc:5a:1c:a2:00:0a:7a:27:b9:c5:a8:1e:c2:c4:
                    1d:d1:42:e7:a5:20:10:ba:3b:cf:46:34:73:1d:c9:
                    f1:a9:7c:4e:04:fd:7e:0b:d4:c1:f5:40:f6:17:b9:
                    f6:54:11:07:f5:89:55:aa:32:4c:12:47:13:2f:79:
                    4f:da:97:4f:72:9d:66:05:46:74:25:57:55:e7:7f:
                    e8:85:a2:81:03:d2:00:80:9f:04:f1:2a:7c:72:84:
                    eb:9f:2e:1a:f9:c1:c6:80:df:c8:16:3b:07:4d:64:
                    1c:d8:69:bb:2f:a7:94:8f:73:87:34:51:db:33:0c:
                    16:29:00:a7:e6:86:55:e1:7a:0d:e3:f5:27:5d:eb:
                    9b:b8:52:a7:ac:2c:38:86:13:04:1a:ca:1d:44:da:
                    bd:41:86:cd:4a:b7:70:cd:ca:9d:50:cf:7c:ae:20:
                    34:b1:af:3d:55:f4:10:29:f9:ad:41:34:ca:e4:e7:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:03:7C:D3:8E:BC:FF:9D:BE:F5:97:04:4B:75:D3:98:40:BF:7C:FA
            X509v3 Authority Key Identifier:
                keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:be:5c:7f:5b:9e:1e:37:3a:ed:5e:06:5a:bd:d0:8d:e5:04:
         78:f5:53:c1:0c:e7:73:aa:f5:0e:1d:25:d2:79:fd:fc:8d:53:
         ec:63:88:5b:37:00:c9:23:33:22:a4:7c:4d:7e:56:5a:a5:17:
         3d:fd:ea:9c:2a:5c:3f:37:b3:fe:2c:be:73:96:43:a6:af:c5:
         e2:5f:57:55:54:12:e0:94:89:4b:d4:a1:ce:1c:13:dc:66:10:
         f0:a3:1f:7d:8b:a7:6b:d5:24:0c:a2:6d:9e:29:24:0a:dd:d0:
         3c:66:61:8c:4c:9b:87:0a:ba:8d:12:30:81:e1:22:7d:66:88:
         6d:a6:06:3a:55:b3:f0:61:7b:5c:6a:4d:52:c8:64:e1:fb:9d:
         a0:51:a0:8e:a3:f4:9a:d6:aa:ed:18:04:07:b9:14:87:37:c4:
         ac:28:63:a7:99:d3:97:81:ab:37:a2:9e:44:ea:63:d0:53:37:
         a2:14:3a:7e:9e:0e:7a:9a:3a:48:85:ab:4b:aa:3f:7b:47:f5:
         cf:59:49:9a:c1:f1:42:63:97:24:f5:45:5e:ea:ed:af:db:5a:
         ac:79:9a:17:e4:3c:a2:37:1b:54:b2:52:fd:50:cc:44:a7:87:
         59:73:cb:c7:07:e5:12:07:44:01:1d:9d:37:d7:e5:a0:1c:07:
         70:ba:b6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:05 2026 by rpki-client