Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          Zi/hI3CdallYa2ZsMYxBJF8iu+fARfTsLPoBec29MNQ=
Subject key identifier:   ED:39:F8:B6:00:03:72:7C:25:98:BB:EA:37:37:8B:2E:3E:C0:2B:8A
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019F81FA3538C6DB9D2E4B82B5A42F4B7345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          1034
Signing time:             Tue 21 Jul 2026 00:01:26 +0000
Manifest this update:     Tue 21 Jul 2026 00:01:26 +0000
Manifest next update:     Wed 22 Jul 2026 00:01:26 +0000
Files and hashes:         1: 0zsz-mz3QUq_RZV4eHpIMCvlE2Q.roa (hash: zsKWU4kWBcHffnCldd/6EPM4YqHbeKQgB7/qG1/ysUw=)
                          2: 1-5fTi6s1Kplp75lWlcBDMf3u4o.roa (hash: tkr93CENCQMU8I4CRf7NT1nfm7qY9AruXpGRBogFjDc=)
                          3: 4NdCq8obZr436D2aMDPBKInOKng.roa (hash: nCVG/YTz/OgaKxKZF5iZyXglkJRNwFm23KPtP5MS7yg=)
                          4: Fow_DRD0J9Sk-bBDpqDfNKsW1qg.roa (hash: OKmdm7ysJvOteC9H/zvOdemCTeoLV8EABr4yQLYsMuA=)
                          5: HvPJromQatJpK21zTf_zEWzRrcs.roa (hash: MlXOal2TwzQ7NF4YnJ7EYZ0o/+GTjGWME37sNwfO/wU=)
                          6: IbohXdTLOI5jMkwRsX5bUmXSpAc.roa (hash: UBaFG47zbBGMBn4xKaby4a1MFrL+PkMMbb8aT7/JD8s=)
                          7: Nn0JzGgy_u6vjsYI0Crz56q0DkY.roa (hash: RxEsMznFmzmlGwJT1srwSiUrG5r0NzfeEQAmBuii6aA=)
                          8: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: uKd/bUY45Voyb8sdWA0Cbzf2QY/kT/h/fqdpuY0gEeo=)
                          9: Xa3aUsiQYVlNZ5VcrIIK_jAKctk.roa (hash: kmDj33CZwukfWzcqZSB35AY27WE1Fo7eUVsk7tTOXog=)
                          10: Z3qTKJ7CIGasieELz7lpIp2Yh6k.roa (hash: 7cCBpyUsGDrcq8EeS5YX2uI808hKjfebRICORugyh0E=)
                          11: bsvN2b5UZsB0fGW7kiw7OedgIDE.roa (hash: YACRChowg54sllVK3l+6K9IbWrwbmt0gZsObr1HWNsI=)
                          12: fNAR_JPkkC491YU-kT_ByTYIEm4.roa (hash: sYR/Ti3r2dDvrcuUCgrf8MhHNZLnx4vKqJjpp3V/CwA=)
                          13: j-uU8XQlwViTYTY7MMI9THoHjU8.roa (hash: jVFaUQIB9Y2fTUDqumECkc/IKMgCwoMMHfvoWihijHQ=)
                          14: kvNYuyJjxpLiL78r_HWCaKIVSeM.roa (hash: an7+no5fubSIGYKy4WMOxhF8ErceM1kP8W7CMY2bk44=)
                          15: n-n0F8-smlKDKWswC1m2gxnHDDY.roa (hash: q6YsSdX5hsZsNG4NcA8tNzI34ml2KRfXVRRHtJp3KRQ=)
                          16: u6D6IhT01RFHYtXcDxjfNMZBM8M.roa (hash: m6UqHoD9Mb+jAm+l2P3nH+xVGpm69d2EaiSe7G0I0NQ=)
                          17: uK6_ifWLoIZv8VuYRndlwMy_4bU.roa (hash: bzZHRyxvv4u3wzZyj+e9ebfI0EsjjmajKyBNoIA9GYk=)
                          18: vtDS3h0cv8sKwu60fmQfZvHkuHI.roa (hash: 1jLMCQj/DnUGyTFUb2JE9h+GQ/o44K4S5NUsN/49N6o=)
                          19: xiMy2SPaH8lHFI3-H2U9JOLwGwg.roa (hash: JOE5tXZ69kYpokkhO+4/eAyh65at7yTIXXS2i46knHo=)
                          20: zbB9bOrDvpQhz8rM2SWmNLWPUT0.roa (hash: rpkVJVzw/qdvIkZyInRx6Bx7b3NqiJEAzZ8FKUQsPfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 00:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:81:fa:35:38:c6:db:9d:2e:4b:82:b5:a4:2f:4b:73:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Jul 21 00:01:26 2026 GMT
            Not After : Jul 22 00:01:26 2026 GMT
        Subject: CN=ed39f8b60003727c2598bbea37378b2e3ec02b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:f8:d9:70:bb:f3:b7:18:c0:77:7a:bb:ec:
                    ea:df:3e:7a:1a:68:5f:eb:c5:a3:b2:96:19:69:d3:
                    1b:6e:19:ce:9d:d8:b8:21:65:5e:cf:cc:eb:b9:6a:
                    0d:9a:2f:08:8e:19:4c:67:c4:7e:b3:d6:7e:cc:25:
                    40:6e:51:89:29:db:41:02:bc:83:41:0b:25:54:ab:
                    cb:6b:60:e7:27:bf:ea:fc:85:5e:a6:f1:60:44:d8:
                    eb:94:9a:52:37:22:5a:f7:88:4a:b4:8e:ba:76:74:
                    67:54:fb:fa:4a:e8:9f:80:54:8e:30:ed:ac:ef:d3:
                    14:da:b4:11:46:39:02:b4:72:82:58:0a:5f:e9:b9:
                    da:20:66:4f:4f:48:25:16:c8:fd:dc:a3:ba:bd:d1:
                    09:3b:2d:5c:89:26:2f:f2:b8:40:7c:fc:da:8d:12:
                    00:0a:58:1a:d8:d0:d6:ed:fb:cf:8f:39:a7:09:e8:
                    44:bc:4f:73:9f:e8:0e:a6:e8:56:a9:ec:a6:41:d7:
                    23:bd:fe:70:8b:79:77:a9:28:d3:55:e1:da:12:dd:
                    c1:9e:f6:25:d3:85:fb:87:b3:8e:8e:7f:89:64:a2:
                    38:e2:4d:bf:9b:36:6c:9e:db:d8:5f:a1:83:ef:13:
                    b8:dc:e7:22:15:03:70:e6:99:f5:21:c7:e7:3f:4e:
                    2e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:39:F8:B6:00:03:72:7C:25:98:BB:EA:37:37:8B:2E:3E:C0:2B:8A
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cc:39:c2:91:de:1c:b6:e4:4a:20:1f:16:5f:4d:f5:5c:00:
         bf:5c:2f:9b:ce:4b:2f:38:d7:c3:63:e0:be:03:db:c0:df:a1:
         6d:90:4d:0f:bf:15:a9:2a:03:c0:72:89:0a:a9:3b:ee:d1:67:
         ff:12:68:77:d3:54:29:8d:83:99:25:4d:5a:3d:01:b7:e0:83:
         8d:d2:cf:4f:08:0a:bd:73:45:c3:9c:38:28:d9:de:43:0e:45:
         4b:31:52:9f:28:8b:0f:63:f0:96:5c:dc:a0:a7:3d:c8:9d:02:
         44:e8:bc:cf:3e:bb:39:f7:54:a9:c4:5a:06:5b:51:84:f1:a7:
         ca:3e:01:c3:8e:b4:a7:18:66:5c:47:ef:80:28:19:50:f6:b3:
         fc:44:18:4a:7e:ef:87:85:ff:a3:2e:60:e0:cc:48:de:72:e7:
         20:43:c1:ec:12:41:31:6f:fd:3b:94:93:16:f5:91:37:72:08:
         ed:f2:f7:d6:90:c0:a2:4a:e3:a5:1a:b0:f3:ad:e3:29:f3:70:
         75:83:d2:3b:2f:2c:c9:e4:81:19:4a:f3:68:d5:e9:11:be:87:
         e4:e3:d1:2a:e1:8b:4f:03:42:5b:97:2e:1a:60:88:08:1f:e1:
         9f:26:ea:f2:75:0b:97:03:90:89:88:4c:2e:ad:11:76:17:f9:
         4d:8d:28:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:59:00 2026 by rpki-client