Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File:                     KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier:          p4EowDrrctNf5J5AJi/TeOtcyAJnTEfS0TvL338pSWg=
Subject key identifier:   6A:BC:D0:10:AA:F3:2A:07:25:99:91:3B:AB:F2:9A:58:B0:9C:4E:CC
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer:       /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial:       019F96252B46FBFE36172B054FD5AD0F0B8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number:          0DB3
Signing time:             Fri 24 Jul 2026 22:00:46 +0000
Manifest this update:     Fri 24 Jul 2026 22:00:46 +0000
Manifest next update:     Sat 25 Jul 2026 22:00:46 +0000
Files and hashes:         1: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: EzypoGuroz8DTyNsN1hqIeOmrLCgGRGnDdao5Kl2b3s=)
                          2: SaYypv9VAJ84xKAeNkRLodoblMc.roa (hash: GtKZWyv3+glT6p+I3huIJVfHLB6xoMQ/NbzSHVIURY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:25:2b:46:fb:fe:36:17:2b:05:4f:d5:ad:0f:0b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
        Validity
            Not Before: Jul 24 22:00:46 2026 GMT
            Not After : Jul 25 22:00:46 2026 GMT
        Subject: CN=6abcd010aaf32a072599913babf29a58b09c4ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4c:b8:40:c6:20:59:7a:4b:60:a3:6c:e8:59:
                    65:36:eb:22:ab:a4:2f:78:32:a0:7a:18:8b:7b:71:
                    46:50:33:24:f6:93:c7:cb:de:fe:16:1c:fc:cd:9b:
                    35:8a:12:d2:63:56:eb:bf:6c:dc:18:e6:bd:09:16:
                    b6:7f:db:d7:36:bc:0b:2b:dc:c2:42:d8:db:97:e8:
                    cb:81:fd:75:8c:c9:32:be:a9:f6:0a:9e:04:69:d9:
                    d4:d9:75:da:19:cd:03:b6:1b:ef:db:51:d6:13:55:
                    0f:5c:18:1a:16:fb:0c:b8:5e:80:0c:fa:3e:96:f0:
                    f4:f4:4d:ab:6a:f1:18:e9:27:be:4a:6d:0f:ec:d8:
                    e7:dc:7a:18:f5:26:c4:55:f5:b7:5a:50:c5:9b:0a:
                    0f:f6:3d:f2:a9:87:fa:d2:bf:4c:86:5e:b8:8d:49:
                    f5:c3:e3:7e:d7:f7:f2:ee:3a:f4:0a:4a:9a:d9:6d:
                    32:34:d2:0f:49:fd:d3:8f:d9:0a:b1:e0:41:5e:64:
                    d2:43:c9:8b:4a:dd:97:95:7e:60:35:b9:3a:1f:23:
                    6a:8d:9a:70:f3:4e:ef:90:27:79:1e:98:87:c0:4e:
                    1b:c8:eb:4a:1e:ae:df:ba:59:03:fb:03:a8:c3:4b:
                    48:97:e4:81:31:ba:d0:c8:17:74:15:cc:e9:bb:2a:
                    37:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BC:D0:10:AA:F3:2A:07:25:99:91:3B:AB:F2:9A:58:B0:9C:4E:CC
            X509v3 Authority Key Identifier:
                keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d5:8e:35:58:97:50:14:9c:b7:a3:3d:86:8f:41:b8:7f:36:
         48:75:39:27:d5:22:71:ea:dd:57:0a:1a:67:1f:f5:82:80:94:
         45:1f:e5:6f:25:04:54:48:5b:28:b6:9a:d2:fc:20:38:bd:5e:
         76:13:f9:0d:10:3f:89:8f:67:55:f9:e1:0e:1b:a6:08:a7:ed:
         e9:27:ac:7a:e9:f6:e7:a2:45:54:22:b3:b4:11:35:e6:94:5c:
         ec:a0:08:07:76:1e:61:ff:3c:b1:31:49:94:e3:4c:ef:5b:b6:
         ed:54:01:f1:54:8a:b7:32:61:d0:38:c5:a7:29:4f:b8:59:72:
         5e:35:27:7c:66:c5:66:34:b9:25:bb:7a:01:18:70:61:f1:a5:
         5f:b5:2b:55:90:76:af:66:75:d5:5b:c0:cb:d5:70:8b:3d:69:
         97:c6:d2:37:1b:27:34:08:b8:91:38:38:50:af:c2:dd:62:b4:
         92:d1:6d:fc:e2:21:c6:93:64:f5:91:b0:6d:1f:e0:1f:83:1a:
         61:e8:09:41:fb:26:4d:2f:56:b5:c1:c3:6d:1b:4d:1b:fe:71:
         68:7a:ac:6c:d3:18:6d:55:9b:1c:98:4a:e2:15:b4:bc:b9:03:
         97:1a:a7:db:66:49:3d:76:d1:38:15:ac:16:53:e9:b5:32:27:
         82:56:75:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WJStG+/42FysFT9WtDwuOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTE3ZWQ0MDc0MzJjNDE4YjFjOWVhZjYxZmQxY2ExY2Jm
ZjZhNzQwHhcNMjYwNzI0MjIwMDQ2WhcNMjYwNzI1MjIwMDQ2WjAzMTEwLwYDVQQD
Eyg2YWJjZDAxMGFhZjMyYTA3MjU5OTkxM2JhYmYyOWE1OGIwOWM0ZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ey4QMYgWXpLYKNs6FllNusiq6Qv
eDKgehiLe3FGUDMk9pPHy97+Fhz8zZs1ihLSY1brv2zcGOa9CRa2f9vXNrwLK9zC
Qtjbl+jLgf11jMkyvqn2Cp4EadnU2XXaGc0Dthvv21HWE1UPXBgaFvsMuF6ADPo+
lvD09E2ravEY6Se+Sm0P7Njn3HoY9SbEVfW3WlDFmwoP9j3yqYf60r9Mhl64jUn1
w+N+1/fy7jr0Ckqa2W0yNNIPSf3Tj9kKseBBXmTSQ8mLSt2XlX5gNbk6HyNqjZpw
807vkCd5HpiHwE4byOtKHq7fulkD+wOow0tIl+SBMbrQyBd0Fczpuyo3DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGq80BCq8yoHJZmRO6vymliwnE7MMB8GA1UdIwQY
MBaAFCqhftQHQyxBixyer2H9HKHL/2p0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYt
OTUwZjBhMDEwMWE5LzEvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYtOTUwZjBhMDEwMWE5
LzEvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedWONViX
UBSct6M9ho9BuH82SHU5J9UicerdVwoaZx/1goCURR/lbyUEVEhbKLaa0vwgOL1e
dhP5DRA/iY9nVfnhDhumCKft6Seseun256JFVCKztBE15pRc7KAIB3YeYf88sTFJ
lONM71u27VQB8VSKtzJh0DjFpylPuFlyXjUnfGbFZjS5Jbt6ARhwYfGlX7UrVZB2
r2Z11VvAy9Vwiz1pl8bSNxsnNAi4kTg4UK/C3WK0ktFt/OIhxpNk9ZGwbR/gH4Ma
YegJQfsmTS9WtcHDbRtNG/5xaHqsbNMYbVWbHJhK4hW0vLkDlxqn22ZJPXbROBWs
FlPptTInglZ1lg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:29 2026 by rpki-client