Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File:                     KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier:          AOHLuuvpklHYOjbKuLw8k2/Z2mMaPLB4nhIqoqQrMms=
Subject key identifier:   BC:34:9D:2E:F6:74:D6:48:43:2B:74:AF:B5:A9:D5:FE:E0:D5:DE:D3
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer:       /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial:       019F962584EE4ADB38353A296A093695E363
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number:          0F3C
Signing time:             Fri 24 Jul 2026 22:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 22:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 22:01:08 +0000
Files and hashes:         1: 6JMQmYaXJRiml5BYtsy3jnW-erA.roa (hash: kbV9Lg8RcdOaIR/u2kpU49sw8x1vZ57CjX7SJnkdSvg=)
                          2: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: KnaeZ34gTtp08Am3snQKLehdkLCoyhR6BpZP+0m8gtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:25:84:ee:4a:db:38:35:3a:29:6a:09:36:95:e3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
        Validity
            Not Before: Jul 24 22:01:08 2026 GMT
            Not After : Jul 25 22:01:08 2026 GMT
        Subject: CN=bc349d2ef674d648432b74afb5a9d5fee0d5ded3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:09:28:7c:1b:f6:52:d0:be:2e:19:d3:91:1a:
                    a5:bd:9e:b2:04:b5:84:07:8b:f0:0a:5e:5c:31:52:
                    0b:fc:41:e2:86:dd:e8:82:a3:5c:a4:2c:8d:93:8e:
                    0e:18:8e:67:4f:13:d6:c0:ee:66:b5:6c:27:cd:82:
                    cd:28:14:b6:c2:6a:d2:2a:8d:bf:e1:6e:35:1e:35:
                    f8:79:d2:58:fa:98:24:ab:0d:6e:09:af:78:57:1e:
                    c4:12:f5:e2:b5:dd:4f:d6:59:5a:0e:66:dc:2d:21:
                    32:12:41:30:79:de:db:8c:8e:86:5e:d2:75:25:c4:
                    dd:65:0b:d2:46:79:df:fe:98:fd:1d:e1:f6:5a:40:
                    a3:a3:b2:79:78:10:96:ec:ab:70:db:a3:be:95:e5:
                    96:ff:97:76:02:93:32:fb:11:7d:b1:3b:14:3f:d3:
                    f7:07:4a:c8:f7:04:42:31:42:f0:34:b5:9d:f3:5d:
                    30:33:ff:01:7b:bd:74:fa:57:96:fa:3c:9f:96:c8:
                    fe:26:c9:2b:74:26:0f:bf:57:d4:c8:f8:dc:1b:3a:
                    44:9b:cc:ef:90:4c:5a:7c:8c:6d:8b:e2:25:4e:be:
                    de:63:3a:85:2f:91:5a:80:57:76:22:67:fc:b4:a6:
                    77:72:c6:d4:13:da:20:59:df:5a:74:59:40:da:71:
                    69:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:34:9D:2E:F6:74:D6:48:43:2B:74:AF:B5:A9:D5:FE:E0:D5:DE:D3
            X509v3 Authority Key Identifier:
                keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ab:b0:c0:37:24:c4:0b:e2:60:38:7a:f9:81:0e:c2:19:f5:
         59:72:8c:35:2e:50:bd:44:e6:55:56:4e:1b:2a:e6:68:d1:bf:
         22:0f:a4:c9:f8:98:51:ad:8a:e0:05:73:94:5e:8b:10:e4:b9:
         03:47:8d:82:98:d0:c5:11:19:e9:e7:52:69:3e:bb:15:a7:81:
         ea:24:d3:ad:a1:da:d6:6a:e1:ea:57:09:97:ef:37:7a:77:aa:
         eb:70:f7:b6:4a:16:a5:91:55:f0:a6:fe:98:09:41:87:2b:87:
         5c:6b:c9:95:73:a4:5e:36:fd:9f:8f:1e:9c:b7:e5:95:72:31:
         de:55:f6:19:6c:7c:88:e1:1f:ef:c2:e2:80:cb:68:5b:d4:ab:
         34:01:9a:76:b3:3d:6a:d1:6b:4c:a3:b2:19:73:7c:62:80:c2:
         8e:8b:16:62:4e:ee:a0:cf:15:a8:64:68:7d:17:80:27:24:f1:
         69:83:81:c7:ea:6b:f0:41:01:55:c2:f7:91:da:f0:1b:ab:2a:
         68:cc:92:f0:24:e5:01:f4:26:32:e5:30:61:66:59:77:98:25:
         a4:41:57:03:16:3e:6d:80:26:34:f9:aa:e5:a4:84:b9:0b:e1:
         62:5a:7a:f7:d0:83:10:93:1f:28:cc:34:97:0b:97:0a:d7:b8:
         3d:60:0d:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WJYTuSts4NTopagk2leNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTE4MWY4YjBhYzkxM2RkYzM3N2UxOWQ1NjY0YjExYjE5
NzUzNzMwHhcNMjYwNzI0MjIwMTA4WhcNMjYwNzI1MjIwMTA4WjAzMTEwLwYDVQQD
EyhiYzM0OWQyZWY2NzRkNjQ4NDMyYjc0YWZiNWE5ZDVmZWUwZDVkZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wkofBv2UtC+LhnTkRqlvZ6yBLWE
B4vwCl5cMVIL/EHiht3ogqNcpCyNk44OGI5nTxPWwO5mtWwnzYLNKBS2wmrSKo2/
4W41HjX4edJY+pgkqw1uCa94Vx7EEvXitd1P1llaDmbcLSEyEkEwed7bjI6GXtJ1
JcTdZQvSRnnf/pj9HeH2WkCjo7J5eBCW7Ktw26O+leWW/5d2ApMy+xF9sTsUP9P3
B0rI9wRCMULwNLWd810wM/8Be710+leW+jyflsj+JskrdCYPv1fUyPjcGzpEm8zv
kExafIxti+IlTr7eYzqFL5FagFd2Imf8tKZ3csbUE9ogWd9adFlA2nFp7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLw0nS72dNZIQyt0r7Wp1f7g1d7TMB8GA1UdIwQY
MBaAFCqhgfiwrJE93Dd+GdVmSxGxl1NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjkt
YTFhNTVlOGJlZTNmLzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjktYTFhNTVlOGJlZTNm
LzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWauwwDck
xAviYDh6+YEOwhn1WXKMNS5QvUTmVVZOGyrmaNG/Ig+kyfiYUa2K4AVzlF6LEOS5
A0eNgpjQxREZ6edSaT67FaeB6iTTraHa1mrh6lcJl+83eneq63D3tkoWpZFV8Kb+
mAlBhyuHXGvJlXOkXjb9n48enLfllXIx3lX2GWx8iOEf78LigMtoW9SrNAGadrM9
atFrTKOyGXN8YoDCjosWYk7uoM8VqGRofReAJyTxaYOBx+pr8EEBVcL3kdrwG6sq
aMyS8CTlAfQmMuUwYWZZd5glpEFXAxY+bYAmNPmq5aSEuQvhYlp699CDEJMfKMw0
lwuXCte4PWANwg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 01:40:31 2026 by rpki-client