Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File:                     KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier:          bBEX89BTJKMdliYwip015b96Z1fhKIOc0cxVCB82aWE=
Subject key identifier:   E4:4F:92:97:60:0D:95:F1:CA:FE:D2:09:42:82:F4:F6:B9:D1:E6:0E
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer:       /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial:       01A0D6BA0670F22E44AA6EF5B837B7D3ED02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number:          0E59
Signing time:             Fri 25 Sep 2026 04:01:50 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:50 +0000
Manifest next update:     Sat 26 Sep 2026 04:01:50 +0000
Files and hashes:         1: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: cXL8hggf9mOUGqjSwGbps9QNQ5NrsUrWv3P32WKYwVU=)
                          2: SaYypv9VAJ84xKAeNkRLodoblMc.roa (hash: GtKZWyv3+glT6p+I3huIJVfHLB6xoMQ/NbzSHVIURY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:ba:06:70:f2:2e:44:aa:6e:f5:b8:37:b7:d3:ed:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
        Validity
            Not Before: Sep 25 04:01:50 2026 GMT
            Not After : Sep 26 04:01:50 2026 GMT
        Subject: CN=e44f9297600d95f1cafed2094282f4f6b9d1e60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d9:8e:db:5f:6b:4e:26:d4:8b:16:44:27:99:
                    20:f1:96:2d:75:f6:fe:4a:83:a8:2b:d3:17:35:a6:
                    df:12:bd:f4:21:aa:2d:e1:09:19:91:ba:8a:99:28:
                    cf:84:3b:3b:60:29:d5:b0:90:11:5a:1a:21:5d:c8:
                    a7:00:f9:e8:e5:c1:37:90:58:90:1f:4a:b9:01:90:
                    d3:53:6c:c9:76:d4:70:59:44:af:01:38:dc:38:ec:
                    60:23:8c:ab:8e:d9:f3:3d:92:82:c9:7e:6b:7a:41:
                    c7:7a:6c:8a:9e:51:05:ca:75:4f:76:6a:20:6b:71:
                    52:be:7e:5d:66:71:be:c6:20:e7:06:77:79:6d:ec:
                    6b:b1:01:4e:cb:1c:cc:e3:03:ad:2a:40:37:a2:24:
                    39:f0:fa:b2:d9:bf:d1:05:7a:e5:8f:dc:5a:b7:b9:
                    d9:00:91:e9:e2:1d:36:d0:61:40:40:03:50:0d:4a:
                    0f:53:ad:7a:7d:91:1d:d5:3d:1f:45:ea:97:f7:fc:
                    fb:cd:9b:83:b8:2a:89:b5:2d:2f:c1:40:f6:6b:e3:
                    62:83:0a:14:38:ae:93:40:48:20:b9:28:d2:41:6a:
                    39:da:86:c3:51:e8:30:49:45:bd:93:58:81:52:6d:
                    62:45:67:cd:3e:ab:d2:9a:bc:20:8b:e3:28:1c:90:
                    78:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4F:92:97:60:0D:95:F1:CA:FE:D2:09:42:82:F4:F6:B9:D1:E6:0E
            X509v3 Authority Key Identifier:
                keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8f:61:cb:db:55:49:c1:31:59:76:cf:52:7f:9e:37:23:a3:
         0b:46:38:ed:14:35:15:36:1d:68:8e:52:2d:a5:8d:e4:ec:dd:
         8d:40:40:37:6e:c2:b9:1c:20:91:1d:9c:f7:fa:2e:fc:46:44:
         06:b2:e0:03:53:8f:de:e5:c7:52:44:35:5f:fd:77:a4:76:08:
         c1:95:af:ff:87:b8:f4:a8:a0:6a:7d:f8:0f:2c:e4:95:4f:1d:
         fd:f6:e7:06:10:ae:5a:72:b0:b1:60:20:fe:aa:55:69:fb:9a:
         cb:0f:1d:ca:a0:bb:97:d7:05:09:8f:ee:74:31:c4:2a:b8:ac:
         f6:4a:98:67:cc:b5:23:f3:3e:d3:59:31:4f:e1:b3:70:c8:eb:
         9d:22:e8:be:81:7e:4d:ff:b5:e8:d9:91:18:4b:5f:70:b4:d7:
         1e:b4:7a:a3:fa:fa:58:e2:50:a5:16:ff:fa:ce:fa:b5:2c:1f:
         cd:d7:0e:47:8d:71:75:94:1f:6e:ef:8b:51:1e:a9:78:74:f0:
         86:65:12:76:ae:99:52:3a:d6:9a:a8:90:07:1a:55:ac:91:7d:
         cc:3f:cf:81:2d:39:8f:62:90:05:80:00:3a:9d:84:a2:da:6c:
         4c:ff:a0:9e:c9:3e:40:d6:5d:57:05:cb:83:9e:18:f0:37:3a:
         b7:93:2d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:54:43 2026 by rpki-client