Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File:                     SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier:          54MEWacAJ2l+7QHq3QGoXM8fbf9t+IAw+to6iy88ujw=
Subject key identifier:   84:E7:E8:CC:AC:BE:9F:61:03:03:8B:B1:9A:79:AC:19:3F:CF:81:7A
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer:       /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial:       01A176CBE2BFDC41DFC4406689940AB34B6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number:          13BF
Signing time:             Mon 26 Oct 2026 06:00:35 +0000
Manifest this update:     Mon 26 Oct 2026 06:00:35 +0000
Manifest next update:     Tue 27 Oct 2026 06:00:35 +0000
Files and hashes:         1: 3EeJh95vWlbqkBMJsY8WJvQJZSQ.roa (hash: HKt/H+HcjtF1ud6gYULu77Dwf2Spakt+G/k1RzaE2tU=)
                          2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: 9iLEG/x9CFGhWg/3aaYr+3mcFFAa8OXIm2tU5PgftW4=)
                          3: wvUTboW8ZBUP6kKOMK2PMJNwHKA.roa (hash: qmo6aS/eJTUU20epsF5LshfZ02w0I+n/dRPdKj8OTLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:cb:e2:bf:dc:41:df:c4:40:66:89:94:0a:b3:4b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
        Validity
            Not Before: Oct 26 06:00:35 2026 GMT
            Not After : Oct 27 06:00:35 2026 GMT
        Subject: CN=84e7e8ccacbe9f6103038bb19a79ac193fcf817a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:d3:de:84:d4:8d:07:bd:01:f3:73:b0:97:
                    cd:89:3e:11:cb:8a:4b:41:07:1b:28:02:dc:2a:ab:
                    75:17:02:9b:4c:ea:25:44:17:6c:bc:0a:79:a1:59:
                    a1:13:1d:d4:83:21:ad:00:e1:c3:19:83:ba:bd:c4:
                    96:11:ac:a4:a5:2e:dc:69:2c:e2:57:2e:34:71:a9:
                    ea:63:b0:1b:86:8f:84:34:7f:e4:14:c4:0f:b7:f6:
                    f1:54:b2:18:75:e6:94:11:9e:73:e6:83:dc:94:57:
                    92:29:ed:61:61:03:c3:99:ea:ef:b0:b3:ed:0a:78:
                    b8:21:3c:fb:c5:94:60:af:00:16:2a:c7:9c:10:44:
                    5e:0b:0e:02:20:dc:73:2a:4f:77:39:71:a5:79:cf:
                    de:27:02:2b:b8:80:d1:a1:ef:4e:74:72:0a:63:76:
                    05:ae:c1:76:38:fb:e2:d2:53:27:7c:33:d2:e6:57:
                    0a:12:bf:3a:db:50:b5:94:3d:a7:79:82:ac:be:f2:
                    38:a9:51:43:7b:1d:4a:db:e5:2a:a2:ae:17:37:3a:
                    09:83:f9:85:38:89:fd:13:9b:3f:b5:1b:1a:74:ea:
                    aa:35:b9:22:51:6a:0f:94:60:aa:8f:3e:5d:ac:b4:
                    24:8c:ac:3b:55:55:d0:e5:ee:cd:d0:35:df:94:6e:
                    67:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E7:E8:CC:AC:BE:9F:61:03:03:8B:B1:9A:79:AC:19:3F:CF:81:7A
            X509v3 Authority Key Identifier:
                keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:61:76:6a:aa:26:d7:3b:4e:3a:04:f9:0a:1e:80:c6:79:30:
         ce:60:b9:01:19:4a:01:e3:50:ec:ee:36:23:55:9a:98:b7:55:
         6c:88:10:4b:2b:bf:14:9e:8c:a7:21:74:e9:a7:3a:22:f9:66:
         2c:9d:d0:5f:81:98:80:60:f1:30:96:d0:23:94:e9:7c:18:01:
         6d:6d:41:43:33:5d:86:67:69:c5:aa:a5:66:24:3c:95:1b:cd:
         7f:e7:7b:6c:ed:73:71:1f:32:b2:96:4e:38:15:77:ba:b1:2e:
         01:76:53:6a:5c:47:5d:bf:e8:b3:f4:9d:66:07:d8:f6:ac:a3:
         ef:08:a5:f3:41:99:d0:f7:2a:47:6e:74:d5:e8:d9:5d:7c:51:
         cf:65:fb:be:10:92:db:ec:a4:e4:22:dc:1d:96:b2:c1:97:70:
         d9:a8:b7:71:71:b1:c3:30:ef:fd:ca:57:30:a9:14:80:0e:5a:
         6e:a9:6c:16:55:fa:e2:90:06:40:0a:94:06:ed:a3:28:81:99:
         de:f2:c5:bf:fe:d2:61:6c:2b:0c:51:3a:30:5d:23:91:98:56:
         21:dc:7b:88:0a:68:be:c1:04:33:a0:73:0b:2c:99:03:df:3b:
         a1:e2:78:87:e9:a8:b3:0e:41:7c:f1:1c:ef:b4:88:c4:79:24:
         66:59:05:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:21:16 2026 by rpki-client