Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          wDqYpSQKUNmCsBU2jHuZZUPROWqhuYTP3WKgULc0sRA=
Subject key identifier:   75:52:7E:DB:C1:15:32:A7:0C:2B:07:4F:C0:8D:29:27:F4:9A:C9:BB
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       01A166471853D163D6BAD43F08EA74AE275F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          1138
Signing time:             Fri 23 Oct 2026 01:01:37 +0000
Manifest this update:     Fri 23 Oct 2026 01:01:37 +0000
Manifest next update:     Sat 24 Oct 2026 01:01:37 +0000
Files and hashes:         1: 0zsz-mz3QUq_RZV4eHpIMCvlE2Q.roa (hash: zsKWU4kWBcHffnCldd/6EPM4YqHbeKQgB7/qG1/ysUw=)
                          2: 1-5fTi6s1Kplp75lWlcBDMf3u4o.roa (hash: tkr93CENCQMU8I4CRf7NT1nfm7qY9AruXpGRBogFjDc=)
                          3: 2exHTG_aSt5CNo1rRMuerRwv_74.roa (hash: LuGUCyvu2+O9sllmPapMGeR+ZZztVyQW5v2eV1Q6t+U=)
                          4: 4NdCq8obZr436D2aMDPBKInOKng.roa (hash: nCVG/YTz/OgaKxKZF5iZyXglkJRNwFm23KPtP5MS7yg=)
                          5: HvPJromQatJpK21zTf_zEWzRrcs.roa (hash: MlXOal2TwzQ7NF4YnJ7EYZ0o/+GTjGWME37sNwfO/wU=)
                          6: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: kMuImYWXYu/bM7TCz4O2yfk0Sgyupf4GQmoIr8cDr4U=)
                          7: T_xDi95HD1nteKJli0cMn3EBkj8.roa (hash: Xq8IzBwDCYJWesEBpVmQoKkNHCu712jGtRR1YJUwPvE=)
                          8: XYmpeIJH65YjUC567k5-bXCwOIk.roa (hash: TGzLmdVFRaaxUmp41ZkLMQjAlcJfk2nKegIqrkGQ02I=)
                          9: Xa3aUsiQYVlNZ5VcrIIK_jAKctk.roa (hash: kmDj33CZwukfWzcqZSB35AY27WE1Fo7eUVsk7tTOXog=)
                          10: Z3qTKJ7CIGasieELz7lpIp2Yh6k.roa (hash: 7cCBpyUsGDrcq8EeS5YX2uI808hKjfebRICORugyh0E=)
                          11: bpmPpns8NXqXhoBeSXEyl9tD3Wc.roa (hash: Za08sUixpYHrDqtvn/E13lJZMTvN30Z+CFyeTnEQbSw=)
                          12: bsvN2b5UZsB0fGW7kiw7OedgIDE.roa (hash: YACRChowg54sllVK3l+6K9IbWrwbmt0gZsObr1HWNsI=)
                          13: f4zwtL9yDlyUnjdAJ1R4k7af1kw.roa (hash: wP+Vy/THsBjGNZ87voV+yAh7tZJziVysnjOpiYLM/Nk=)
                          14: fNAR_JPkkC491YU-kT_ByTYIEm4.roa (hash: sYR/Ti3r2dDvrcuUCgrf8MhHNZLnx4vKqJjpp3V/CwA=)
                          15: kvNYuyJjxpLiL78r_HWCaKIVSeM.roa (hash: an7+no5fubSIGYKy4WMOxhF8ErceM1kP8W7CMY2bk44=)
                          16: n-n0F8-smlKDKWswC1m2gxnHDDY.roa (hash: q6YsSdX5hsZsNG4NcA8tNzI34ml2KRfXVRRHtJp3KRQ=)
                          17: u6D6IhT01RFHYtXcDxjfNMZBM8M.roa (hash: m6UqHoD9Mb+jAm+l2P3nH+xVGpm69d2EaiSe7G0I0NQ=)
                          18: uK6_ifWLoIZv8VuYRndlwMy_4bU.roa (hash: bzZHRyxvv4u3wzZyj+e9ebfI0EsjjmajKyBNoIA9GYk=)
                          19: zbB9bOrDvpQhz8rM2SWmNLWPUT0.roa (hash: rpkVJVzw/qdvIkZyInRx6Bx7b3NqiJEAzZ8FKUQsPfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 01:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:66:47:18:53:d1:63:d6:ba:d4:3f:08:ea:74:ae:27:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Oct 23 01:01:37 2026 GMT
            Not After : Oct 24 01:01:37 2026 GMT
        Subject: CN=75527edbc11532a70c2b074fc08d2927f49ac9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:0e:46:f4:a3:ad:4a:02:eb:52:a9:c2:5e:
                    ba:0b:0f:8d:a8:f6:28:1b:28:23:bf:39:95:fc:0c:
                    a6:ce:33:cf:52:f5:6c:8f:f0:1e:ae:5f:02:ab:81:
                    d6:4f:36:28:7f:03:96:92:b7:74:b3:53:1e:e9:ec:
                    e4:d3:9b:42:0e:3a:a3:e4:4e:46:ed:cf:ba:f2:39:
                    bb:de:6f:a3:e1:61:44:6f:a4:d9:db:cc:43:51:c0:
                    3d:ea:6c:60:7c:a3:ee:23:82:a8:39:fc:bc:5e:df:
                    4a:e8:a6:5a:88:09:57:3c:76:7b:be:f0:80:66:6e:
                    d8:f2:5b:fe:1c:b7:16:d6:24:96:b0:aa:86:43:0d:
                    47:7d:69:81:23:fc:77:a2:7b:fd:e0:98:42:f5:a4:
                    2a:e2:79:1f:ec:91:45:00:56:14:a3:ab:4c:d3:9b:
                    15:e0:9b:1e:bf:18:59:89:2f:6a:11:c3:d2:1d:16:
                    8b:c8:23:aa:f8:c0:f2:7e:83:17:b1:66:06:22:8d:
                    5b:5e:b0:ba:55:bb:90:d4:5b:67:68:9d:b3:5c:1d:
                    cd:86:b5:49:71:74:25:7a:ee:46:e5:c9:4c:e5:36:
                    48:75:84:96:9e:db:75:d4:49:a7:1f:62:eb:ab:9c:
                    26:36:65:0f:45:08:8a:13:b0:3a:8c:fd:c0:b5:c9:
                    80:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:52:7E:DB:C1:15:32:A7:0C:2B:07:4F:C0:8D:29:27:F4:9A:C9:BB
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c0:51:cb:f1:a1:0a:fb:b5:4d:ab:c5:43:23:56:4e:e4:69:
         e0:77:61:28:44:1a:87:c7:b4:65:da:05:e3:7a:be:83:09:0a:
         34:79:d5:0e:f7:89:5b:23:48:5d:60:ac:43:28:b6:34:67:02:
         49:0d:2c:f5:e0:01:c3:98:cf:1c:3a:0e:0f:5c:a2:73:48:45:
         21:da:5c:79:47:cf:09:af:40:81:5a:a3:58:f9:2d:f5:f8:aa:
         a3:3d:f4:d4:59:1a:41:9e:35:7c:91:dc:74:15:96:5d:94:47:
         a7:66:a1:73:53:4c:fa:d5:09:da:27:57:b3:1f:8a:88:75:9b:
         78:df:8d:69:e2:2a:7b:db:56:19:d7:8f:e2:52:71:bb:3c:de:
         db:23:9b:7d:43:d2:db:26:96:7b:32:22:6b:d5:d7:33:2b:07:
         fa:0f:96:d5:b7:aa:20:29:18:1c:58:78:e0:b1:be:b6:c0:0b:
         0b:e0:bf:85:26:d8:da:48:07:f3:e8:a1:b0:37:91:81:52:9d:
         d5:92:6b:de:4c:bc:35:40:12:77:42:3f:d1:f3:21:66:d2:c1:
         d5:ab:df:8f:c9:71:82:f3:33:db:3c:7e:c7:a9:71:45:3e:08:
         5f:e4:2d:77:aa:2f:e8:4a:20:10:b0:e2:6a:bd:24:7b:dc:b9:
         82:b6:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:28:15 2026 by rpki-client