Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File:                     KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier:          Fdw+Hm+9naE9VBexme2kB64HdSRBxw/cTycb9ljSYWg=
Subject key identifier:   A9:D1:19:E2:08:5A:C9:73:FB:BF:10:8D:8D:ED:A0:90:EB:59:31:E8
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer:       /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial:       01A13748CBD42EB7067C3374B297D19EE642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number:          1014
Signing time:             Tue 13 Oct 2026 22:01:19 +0000
Manifest this update:     Tue 13 Oct 2026 22:01:19 +0000
Manifest next update:     Wed 14 Oct 2026 22:01:19 +0000
Files and hashes:         1: 6JMQmYaXJRiml5BYtsy3jnW-erA.roa (hash: kbV9Lg8RcdOaIR/u2kpU49sw8x1vZ57CjX7SJnkdSvg=)
                          2: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: GQV2G5iVugENDU0wvMPVG7PaYy+l0Rq7Gs5D845ahLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 20:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:37:48:cb:d4:2e:b7:06:7c:33:74:b2:97:d1:9e:e6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
        Validity
            Not Before: Oct 13 22:01:19 2026 GMT
            Not After : Oct 14 22:01:19 2026 GMT
        Subject: CN=a9d119e2085ac973fbbf108d8deda090eb5931e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ee:0c:c5:cf:85:9e:d5:8f:11:ec:88:66:59:
                    a7:8f:aa:69:da:7b:10:80:72:08:1f:58:6b:16:28:
                    b2:1a:d9:51:00:a2:52:7f:16:3b:9e:a4:de:a2:6b:
                    83:95:11:bc:53:ee:9e:d2:0d:00:5e:06:2a:f8:ab:
                    8a:69:3f:28:cb:6e:60:1e:bc:f1:a5:fc:21:63:56:
                    e6:6e:51:f5:49:d9:95:13:96:3e:3e:62:18:8b:97:
                    82:81:e2:f9:b0:44:5e:5a:95:53:08:39:06:31:39:
                    9f:b7:4f:25:4d:c3:45:4d:92:61:35:37:3d:7e:51:
                    23:52:a5:69:84:e9:ad:86:3d:dc:95:50:d3:50:ae:
                    c8:44:09:c4:1b:f9:1f:7e:46:9a:61:f8:dc:8e:c0:
                    7c:f7:40:e5:26:d6:b1:a6:ab:be:59:e8:7c:5f:34:
                    83:32:59:82:9e:e4:02:21:27:60:75:70:0f:b5:51:
                    55:bc:4b:db:b7:08:dc:8d:e2:36:bb:ac:7f:64:3f:
                    a7:35:e3:40:cc:ad:52:7a:2b:f5:ba:ab:93:9a:58:
                    b5:7a:f2:33:41:7f:5e:cd:82:c6:64:d7:b4:0c:f1:
                    41:d4:23:f9:08:eb:1b:f2:24:ea:86:79:24:fe:e8:
                    ff:84:a0:c5:a3:df:e7:5e:9c:b5:09:88:7b:04:fd:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D1:19:E2:08:5A:C9:73:FB:BF:10:8D:8D:ED:A0:90:EB:59:31:E8
            X509v3 Authority Key Identifier:
                keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0c:d1:91:82:96:78:be:eb:bd:31:b9:77:c2:77:c7:6c:6a:
         a9:d2:90:2d:78:50:6f:aa:3b:1b:44:f7:c8:e7:93:b2:0a:7e:
         94:16:55:3a:74:f1:ef:1d:ed:28:66:d2:a7:b9:f9:3a:2d:2d:
         32:e0:5d:d6:22:13:2e:3f:06:fe:5e:60:74:9e:fa:67:f2:87:
         f9:53:db:9b:b5:3d:fc:7a:b4:5f:4a:90:ef:45:3e:59:85:dd:
         00:3f:9f:b1:db:26:ce:8b:6b:6b:43:99:ab:6b:4b:20:1a:ec:
         f7:e3:39:51:90:97:46:9a:56:90:f0:0b:37:9a:04:63:fd:a6:
         12:ed:0d:d5:a0:29:91:ad:05:ab:4e:6a:6a:67:6e:5f:dd:f9:
         99:4d:ca:d3:65:75:7b:2a:ca:71:67:06:d5:24:ca:56:b4:ff:
         ee:2a:c3:db:64:59:77:78:cc:99:f2:44:af:0e:40:3d:2f:02:
         4f:b1:60:a6:5d:74:d8:b6:14:ec:ac:00:31:30:bf:87:c9:87:
         68:28:76:8b:ad:06:f3:45:58:63:fb:0e:6b:88:6b:64:9b:b6:
         e3:bc:5b:92:92:6b:35:56:1c:40:cc:1e:0f:af:98:8b:ce:8e:
         8a:5b:79:85:ec:81:37:37:ec:b3:4d:a9:7e:3d:3d:03:61:bc:
         c6:15:8c:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE3SMvULrcGfDN0spfRnuZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTE4MWY4YjBhYzkxM2RkYzM3N2UxOWQ1NjY0YjExYjE5
NzUzNzMwHhcNMjYxMDEzMjIwMTE5WhcNMjYxMDE0MjIwMTE5WjAzMTEwLwYDVQQD
EyhhOWQxMTllMjA4NWFjOTczZmJiZjEwOGQ4ZGVkYTA5MGViNTkzMWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7u4Mxc+FntWPEeyIZlmnj6pp2nsQ
gHIIH1hrFiiyGtlRAKJSfxY7nqTeomuDlRG8U+6e0g0AXgYq+KuKaT8oy25gHrzx
pfwhY1bmblH1SdmVE5Y+PmIYi5eCgeL5sEReWpVTCDkGMTmft08lTcNFTZJhNTc9
flEjUqVphOmthj3clVDTUK7IRAnEG/kffkaaYfjcjsB890DlJtaxpqu+Weh8XzSD
MlmCnuQCISdgdXAPtVFVvEvbtwjcjeI2u6x/ZD+nNeNAzK1Seiv1uquTmli1evIz
QX9ezYLGZNe0DPFB1CP5COsb8iTqhnkk/uj/hKDFo9/nXpy1CYh7BP1RVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnRGeIIWslz+78QjY3toJDrWTHoMB8GA1UdIwQY
MBaAFCqhgfiwrJE93Dd+GdVmSxGxl1NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjkt
YTFhNTVlOGJlZTNmLzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjktYTFhNTVlOGJlZTNm
LzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQzRkYKW
eL7rvTG5d8J3x2xqqdKQLXhQb6o7G0T3yOeTsgp+lBZVOnTx7x3tKGbSp7n5Oi0t
MuBd1iITLj8G/l5gdJ76Z/KH+VPbm7U9/Hq0X0qQ70U+WYXdAD+fsdsmzotra0OZ
q2tLIBrs9+M5UZCXRppWkPALN5oEY/2mEu0N1aApka0Fq05qamduX935mU3K02V1
eyrKcWcG1STKVrT/7irD22RZd3jMmfJErw5APS8CT7Fgpl102LYU7KwAMTC/h8mH
aCh2i60G80VYY/sOa4hrZJu247xbkpJrNVYcQMweD6+Yi86Oilt5heyBNzfss02p
fj09A2G8xhWMRw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 06:08:31 2026 by rpki-client