Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
File:                     B__SkDh900rAeQxrnX7pn-23gUk.mft (raw, json)
Hash identifier:          8AxBjIrhYbUQdKYVjn10dVwl5M81SnTyliQPwl2oEpw=
Subject key identifier:   8E:99:31:F3:80:07:0A:D7:FF:F0:67:C1:60:87:DC:3B:4F:C8:9C:99
Authority key identifier: 07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
Certificate issuer:       /CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Certificate serial:       01A13C6E9721FA987F69D40504F280860FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
Manifest number:          08FF
Signing time:             Wed 14 Oct 2026 22:00:42 +0000
Manifest this update:     Wed 14 Oct 2026 22:00:42 +0000
Manifest next update:     Thu 15 Oct 2026 22:00:42 +0000
Files and hashes:         1: B__SkDh900rAeQxrnX7pn-23gUk.crl (hash: OO2fBh02HKF/ROtBcSjmiNp4mDGsCuVd8zv27rkvN2c=)
                          2: JMYckd3O4R94e0dIWCU9TcMBOwk.roa (hash: G3W5Mbj1PNpJeFm+I/0G1qoXk7VmJE2xhaUZNZtpyQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:6e:97:21:fa:98:7f:69:d4:05:04:f2:80:86:0f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
        Validity
            Not Before: Oct 14 22:00:42 2026 GMT
            Not After : Oct 15 22:00:42 2026 GMT
        Subject: CN=8e9931f380070ad7fff067c16087dc3b4fc89c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ba:9d:84:92:16:c6:47:21:3e:83:3c:17:0d:
                    0e:7d:80:70:77:a4:7a:85:0a:c5:f5:23:8c:64:7a:
                    41:8a:5a:82:4a:6f:be:0f:1b:bf:b2:12:d8:57:af:
                    cb:e3:99:af:e1:cb:a9:70:13:98:0d:d7:02:60:7a:
                    9e:11:49:01:50:cd:6a:ed:c6:6a:0c:dd:a4:d7:78:
                    f9:12:49:b8:65:ea:d4:e0:a8:ef:61:90:4f:93:d5:
                    0a:50:5c:c9:3f:93:e5:df:34:b6:f5:5f:25:d5:d6:
                    e1:cf:fd:34:bf:0b:03:ed:0d:69:35:f3:ed:5a:5b:
                    fb:75:7e:59:bf:0f:bd:d0:80:c6:af:88:3b:17:1f:
                    65:bd:58:3e:46:c6:4b:73:50:04:3d:71:a8:cf:68:
                    ce:7a:c1:88:fb:9a:6a:fc:47:43:1f:a2:b9:da:65:
                    5e:fa:49:26:46:cc:f4:c7:af:34:62:71:98:a3:9d:
                    51:32:95:27:06:9e:27:4b:6b:4a:9f:5e:99:64:5a:
                    44:98:df:84:1e:bb:83:5c:23:69:c5:cb:e3:d7:a0:
                    56:6e:65:0a:a7:59:9e:da:dc:ee:93:55:09:fa:1f:
                    05:6f:d9:02:05:62:b6:5f:7d:09:97:f5:ca:c4:15:
                    c9:b5:81:30:ae:f5:5b:a9:ca:8c:13:02:c2:46:f3:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:99:31:F3:80:07:0A:D7:FF:F0:67:C1:60:87:DC:3B:4F:C8:9C:99
            X509v3 Authority Key Identifier:
                keyid:07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:3c:d3:9d:a1:af:02:65:96:67:c0:37:02:ee:92:3b:a5:93:
         83:a0:28:18:5d:cf:d3:40:78:4f:df:d8:e0:0f:64:82:69:e1:
         80:55:b7:52:b8:3b:1e:57:91:e2:18:1d:a0:78:9f:ec:72:b2:
         39:1f:47:e0:46:99:58:5d:d9:b0:78:cd:1f:be:c6:be:71:32:
         41:ac:62:83:49:ae:c3:72:65:75:85:80:41:56:d3:f3:be:4d:
         74:ea:e4:87:e6:4d:76:4d:51:2e:09:39:63:c4:01:e2:a0:1d:
         78:af:db:4d:64:2e:ce:f6:7e:8e:7c:56:a5:14:b0:12:3d:06:
         97:20:bc:75:06:27:b1:6e:58:0e:99:ff:40:34:65:00:59:46:
         a8:26:9c:16:e0:09:d0:74:a1:39:fc:12:55:6a:ab:42:d1:2d:
         cc:5d:07:2a:42:f6:f1:c9:b6:c3:4e:c8:66:68:11:24:a5:31:
         3f:d9:96:ac:84:aa:1e:58:ff:0d:4a:89:5f:8b:ab:8d:b4:59:
         46:2e:a2:51:8d:09:87:f3:a6:f7:9f:39:89:ba:99:bd:ae:cc:
         08:91:a8:db:70:fe:ed:a9:cd:2d:0c:a0:8d:af:6d:7e:4a:8a:
         77:ea:40:51:9a:fd:b9:74:21:e4:32:b8:99:c8:d8:bf:47:8d:
         46:39:db:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8bpch+ph/adQFBPKAhg/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZmZkMjkwMzg3ZGQzNGFjMDc5MGM2YjlkN2VlOTlmZWRi
NzgxNDkwHhcNMjYxMDE0MjIwMDQyWhcNMjYxMDE1MjIwMDQyWjAzMTEwLwYDVQQD
Eyg4ZTk5MzFmMzgwMDcwYWQ3ZmZmMDY3YzE2MDg3ZGMzYjRmYzg5Yzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrqdhJIWxkchPoM8Fw0OfYBwd6R6
hQrF9SOMZHpBilqCSm++Dxu/shLYV6/L45mv4cupcBOYDdcCYHqeEUkBUM1q7cZq
DN2k13j5Ekm4ZerU4KjvYZBPk9UKUFzJP5Pl3zS29V8l1dbhz/00vwsD7Q1pNfPt
Wlv7dX5Zvw+90IDGr4g7Fx9lvVg+RsZLc1AEPXGoz2jOesGI+5pq/EdDH6K52mVe
+kkmRsz0x680YnGYo51RMpUnBp4nS2tKn16ZZFpEmN+EHruDXCNpxcvj16BWbmUK
p1me2tzuk1UJ+h8Fb9kCBWK2X30Jl/XKxBXJtYEwrvVbqcqMEwLCRvNnEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6ZMfOABwrX//BnwWCH3DtPyJyZMB8GA1UdIwQY
MBaAFAf/0pA4fdNKwHkMa51+6Z/tt4FJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9fU2tEaDkwMHJBZVF4cm5YN3BuLTIzZ1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81ODUzOGEtMjRlYi00ZjlkLTk4MTEt
NTI1OTU5ZTZlZTIyLzEvQl9fU2tEaDkwMHJBZVF4cm5YN3BuLTIzZ1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81ODUzOGEtMjRlYi00ZjlkLTk4MTEtNTI1OTU5ZTZlZTIy
LzEvQl9fU2tEaDkwMHJBZVF4cm5YN3BuLTIzZ1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTzTnaGv
AmWWZ8A3Au6SO6WTg6AoGF3P00B4T9/Y4A9kgmnhgFW3Urg7HleR4hgdoHif7HKy
OR9H4EaZWF3ZsHjNH77GvnEyQaxig0muw3JldYWAQVbT875NdOrkh+ZNdk1RLgk5
Y8QB4qAdeK/bTWQuzvZ+jnxWpRSwEj0GlyC8dQYnsW5YDpn/QDRlAFlGqCacFuAJ
0HShOfwSVWqrQtEtzF0HKkL28cm2w07IZmgRJKUxP9mWrISqHlj/DUqJX4urjbRZ
Ri6iUY0Jh/Om9585ibqZva7MCJGo23D+7anNLQygja9tfkqKd+pAUZr9uXQh5DK4
mcjYv0eNRjnbnQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:21 2026 by rpki-client