Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.mft
File:                     SkoOHJOfCurGcQfqB_2uUWvb9wU.mft (raw, json)
Hash identifier:          /jfiv5yJMEEIAZs90oh4/XFo+AX37/TyafPFfv2S7eU=
Subject key identifier:   B2:AD:F1:96:D3:FE:82:53:A2:BC:8F:C7:45:C1:B3:98:79:01:FD:4F
Authority key identifier: 4A:4A:0E:1C:93:9F:0A:EA:C6:71:07:EA:07:FD:AE:51:6B:DB:F7:05
Certificate issuer:       /CN=4a4a0e1c939f0aeac67107ea07fdae516bdbf705
Certificate serial:       01A10F960203EA577A2019FEC3D2BB654945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkoOHJOfCurGcQfqB_2uUWvb9wU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.mft
Manifest number:          0104
Signing time:             Tue 06 Oct 2026 05:00:51 +0000
Manifest this update:     Tue 06 Oct 2026 05:00:51 +0000
Manifest next update:     Wed 07 Oct 2026 05:00:51 +0000
Files and hashes:         1: SkoOHJOfCurGcQfqB_2uUWvb9wU.crl (hash: 2KJUyw5T9VmDWNUjbSXJt0sNozls7e8WEtq6pwqkrEg=)
                          2: abPQvZftn6KJAeQY-dEytO7cxZY.roa (hash: R8vNG4brLgkvsyByQsU/FMzt+IrfXl75oZ8JXs9klhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkoOHJOfCurGcQfqB_2uUWvb9wU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:96:02:03:ea:57:7a:20:19:fe:c3:d2:bb:65:49:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4a0e1c939f0aeac67107ea07fdae516bdbf705
        Validity
            Not Before: Oct  6 05:00:51 2026 GMT
            Not After : Oct  7 05:00:51 2026 GMT
        Subject: CN=b2adf196d3fe8253a2bc8fc745c1b3987901fd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c1:9f:21:ca:cd:7d:ed:73:13:d0:66:e3:54:
                    db:f9:6f:68:13:b5:ca:31:f8:f8:a5:27:4e:1b:c0:
                    77:d5:d7:45:67:66:a2:57:d2:ce:01:b6:12:a2:ba:
                    95:84:ba:e8:98:3d:84:52:35:ff:f4:ca:2d:5c:07:
                    69:d3:ed:fa:ed:35:80:b5:31:51:65:c8:b6:ce:4f:
                    ab:4e:d9:33:50:db:52:08:70:ec:da:66:48:b0:e4:
                    d2:f9:5b:72:bf:7c:89:23:b0:75:25:59:ac:1b:2b:
                    db:cf:99:0b:83:1c:af:a6:74:6c:00:a5:fb:74:c7:
                    39:0b:5a:e7:87:e4:5b:ef:97:e1:03:7c:cc:73:cd:
                    e0:89:8d:8c:fe:61:01:e1:b6:48:95:44:8a:3c:9c:
                    30:ed:fb:30:8e:0f:21:b9:09:c3:7e:a3:6a:42:38:
                    c4:4b:ce:76:1b:1a:50:d3:db:8a:6a:54:1b:3a:76:
                    90:74:5a:5f:cd:e5:e7:cd:4d:73:ae:40:0a:a7:7c:
                    c1:45:64:1a:37:b9:87:27:3d:c9:32:34:00:25:10:
                    3d:b3:42:ea:a4:b3:83:19:e7:60:c5:16:6f:5e:51:
                    c0:ff:ec:35:80:51:ff:8f:fc:72:5a:78:19:22:86:
                    e7:6e:6f:f8:5f:40:46:ca:c0:66:e0:56:a0:54:24:
                    f3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AD:F1:96:D3:FE:82:53:A2:BC:8F:C7:45:C1:B3:98:79:01:FD:4F
            X509v3 Authority Key Identifier:
                keyid:4A:4A:0E:1C:93:9F:0A:EA:C6:71:07:EA:07:FD:AE:51:6B:DB:F7:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkoOHJOfCurGcQfqB_2uUWvb9wU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:a7:15:15:17:a1:3c:07:2a:60:bb:b5:7e:52:30:1f:1c:50:
         f8:6c:da:c1:30:fb:72:d3:e2:95:a0:11:62:c5:d1:02:39:0f:
         ba:04:b6:90:ee:db:4c:b0:ad:ef:e1:2b:57:9b:c0:a5:12:19:
         e7:2b:6d:bc:07:2a:41:87:0c:c3:00:ca:e3:f6:e5:32:13:08:
         d7:6a:08:00:84:9e:b4:64:90:94:4f:b2:4a:85:9b:76:d8:8a:
         33:c7:32:6c:97:47:e9:7e:cf:f1:3f:ee:7a:5f:f3:ae:8c:47:
         6a:49:4e:90:49:2f:5b:d5:c3:d4:97:7e:6e:4e:d7:40:a6:6a:
         87:7a:86:9c:c2:a3:4b:12:a0:3b:71:d8:31:f0:d6:2f:d0:93:
         9a:45:52:92:dd:71:26:51:f3:83:0d:2c:a5:f1:53:3b:78:ae:
         d3:3e:60:3c:90:e2:6e:47:1f:42:03:16:fa:b1:e5:f4:cd:17:
         c5:45:ff:59:ed:4d:32:91:e6:27:20:8f:21:3b:e0:76:0c:f2:
         64:44:57:3b:83:76:59:d7:04:7b:f3:c4:17:25:02:95:34:b2:
         72:6a:e9:51:09:dd:14:fc:77:4f:42:1f:12:bd:bc:2f:77:b8:
         48:59:51:46:83:dd:3a:bb:4d:61:45:96:99:68:79:41:36:1a:
         3b:4c:47:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:42:36 2026 by rpki-client