Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
File:                     SKGBKVSA9hv1hC13EvSV7CSacs8.mft (raw, json)
Hash identifier:          EQXo8lQtUt4Oy02IRYdjkkyVVgq4C93T17uNfgaCHvE=
Subject key identifier:   BE:36:A6:D3:07:70:2B:1F:30:C2:B1:7B:C6:98:8D:7E:58:B2:82:FB
Authority key identifier: 48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF
Certificate issuer:       /CN=48a181295480f61bf5842d7712f495ec249a72cf
Certificate serial:       0199172CC9D3B57E09E5CCF24C01035FF1D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
Manifest number:          01FF
Signing time:             Fri 05 Sep 2025 00:00:35 +0000
Manifest this update:     Fri 05 Sep 2025 00:00:35 +0000
Manifest next update:     Sat 06 Sep 2025 00:00:35 +0000
Files and hashes:         1: SKGBKVSA9hv1hC13EvSV7CSacs8.crl (hash: aIH7ztflNqqNRl/Zn/QiDPIP7sjeXYUS4G2wbL3uAws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:2c:c9:d3:b5:7e:09:e5:cc:f2:4c:01:03:5f:f1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a181295480f61bf5842d7712f495ec249a72cf
        Validity
            Not Before: Sep  5 00:00:35 2025 GMT
            Not After : Sep  6 00:00:35 2025 GMT
        Subject: CN=be36a6d307702b1f30c2b17bc6988d7e58b282fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:17:18:fa:43:1d:75:f7:37:97:81:1d:24:
                    88:45:f0:fe:bf:11:50:dc:1b:c8:8f:93:79:30:87:
                    9b:06:26:05:bb:20:ba:e9:c4:31:72:14:cf:19:29:
                    11:8c:ec:0b:73:fb:05:61:f3:19:c0:95:96:32:7a:
                    60:dd:f0:f6:19:26:cf:c2:5a:5a:cb:49:3e:7d:b4:
                    cc:a6:61:36:eb:f0:7f:2c:b6:26:da:28:17:8f:4e:
                    ef:a5:9c:2b:34:1f:8a:e7:b2:58:7c:fb:ee:e4:05:
                    f6:c3:2e:8e:aa:44:9b:0e:e7:15:ca:fa:2c:8d:d6:
                    12:5c:41:80:6f:1f:4a:d3:e9:4d:f5:a3:79:68:88:
                    fe:a5:ec:42:c3:a9:59:e3:69:2c:46:c0:58:94:06:
                    99:9d:06:2e:78:5c:4e:be:2c:9c:a9:67:99:1a:76:
                    94:66:19:3b:14:86:cc:e7:9e:03:95:e4:6f:7e:47:
                    d7:ba:00:5f:57:92:21:01:f6:6b:bc:e3:52:cf:31:
                    e9:d3:4e:ee:98:9f:34:10:41:ee:71:97:00:50:f1:
                    29:f4:38:23:c3:60:3b:9d:b4:6e:05:c1:7c:11:68:
                    c9:4d:48:60:c9:75:71:d0:1e:b0:49:b5:90:9e:bd:
                    ce:0a:e9:3d:8a:f7:7e:ed:19:7a:95:d0:8e:ac:1a:
                    84:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:36:A6:D3:07:70:2B:1F:30:C2:B1:7B:C6:98:8D:7E:58:B2:82:FB
            X509v3 Authority Key Identifier:
                keyid:48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:1e:38:17:4d:da:8a:f4:27:44:8a:45:84:60:49:04:b5:70:
         f7:81:a1:2c:5b:ad:cf:d6:86:e6:88:07:7e:aa:8a:36:64:c6:
         7c:9a:ec:22:36:1c:1b:df:2e:81:bd:5d:0f:ff:cd:99:38:42:
         b0:63:ec:3c:e6:4f:9e:1a:3c:08:ee:a6:b0:00:52:63:4b:9a:
         7d:32:5c:4f:90:71:fb:70:4e:75:b9:73:7a:49:cd:19:ad:e4:
         66:cf:ad:76:1f:4c:2f:1a:1d:f3:9b:ae:73:29:81:f7:06:47:
         80:c5:5f:90:bd:a6:b7:a3:dd:58:09:d2:36:64:3b:31:1b:a7:
         cd:70:3f:2e:1f:5c:12:28:31:7e:8a:eb:dd:47:4e:3d:87:91:
         f6:3b:66:dd:47:00:9c:16:38:11:8a:6c:b1:12:99:c8:72:34:
         00:1e:56:0f:58:8b:be:44:ac:c1:16:63:13:95:db:65:1e:a4:
         9b:51:84:49:da:7e:e4:ac:59:3a:73:38:a4:6c:cd:71:65:62:
         a6:56:d5:e5:60:41:ce:0d:3c:49:b5:68:d4:6b:d3:fd:65:a5:
         73:2e:f8:f3:f4:70:db:44:71:3b:1f:63:d3:95:10:c3:02:6e:
         65:6a:ed:d7:ec:e1:67:bd:be:9f:bb:63:e8:ba:ef:a4:c4:e8:
         09:be:60:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXLMnTtX4J5czyTAEDX/HTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YTE4MTI5NTQ4MGY2MWJmNTg0MmQ3NzEyZjQ5NWVjMjQ5
YTcyY2YwHhcNMjUwOTA1MDAwMDM1WhcNMjUwOTA2MDAwMDM1WjAzMTEwLwYDVQQD
EyhiZTM2YTZkMzA3NzAyYjFmMzBjMmIxN2JjNjk4OGQ3ZTU4YjI4MmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4kXGPpDHXX3N5eBHSSIRfD+vxFQ
3BvIj5N5MIebBiYFuyC66cQxchTPGSkRjOwLc/sFYfMZwJWWMnpg3fD2GSbPwlpa
y0k+fbTMpmE26/B/LLYm2igXj07vpZwrNB+K57JYfPvu5AX2wy6OqkSbDucVyvos
jdYSXEGAbx9K0+lN9aN5aIj+pexCw6lZ42ksRsBYlAaZnQYueFxOviycqWeZGnaU
Zhk7FIbM554DleRvfkfXugBfV5IhAfZrvONSzzHp007umJ80EEHucZcAUPEp9Dgj
w2A7nbRuBcF8EWjJTUhgyXVx0B6wSbWQnr3OCuk9ivd+7Rl6ldCOrBqEHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL42ptMHcCsfMMKxe8aYjX5YsoL7MB8GA1UdIwQY
MBaAFEihgSlUgPYb9YQtdxL0lewkmnLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0tHQktWU0E5aHYxaEMxM0V2U1Y3Q1NhY3M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jOWMxODEtMzU4Mi00ZjJkLTk2OGEt
OTQxZDJmMWYyZDE2LzEvU0tHQktWU0E5aHYxaEMxM0V2U1Y3Q1NhY3M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jOWMxODEtMzU4Mi00ZjJkLTk2OGEtOTQxZDJmMWYyZDE2
LzEvU0tHQktWU0E5aHYxaEMxM0V2U1Y3Q1NhY3M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPB44F03a
ivQnRIpFhGBJBLVw94GhLFutz9aG5ogHfqqKNmTGfJrsIjYcG98ugb1dD//NmThC
sGPsPOZPnho8CO6msABSY0uafTJcT5Bx+3BOdblzeknNGa3kZs+tdh9MLxod85uu
cymB9wZHgMVfkL2mt6PdWAnSNmQ7MRunzXA/Lh9cEigxforr3UdOPYeR9jtm3UcA
nBY4EYpssRKZyHI0AB5WD1iLvkSswRZjE5XbZR6km1GESdp+5KxZOnM4pGzNcWVi
plbV5WBBzg08SbVo1GvT/WWlcy748/Rw20RxOx9j05UQwwJuZWrt1+zhZ72+n7tj
6LrvpMToCb5g0g==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:22 2025 by rpki-client