Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
File:                     SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json)
Hash identifier:          JDRXpwqtaLI7QTuj/dhG3q/9Ew73/rzfZl4a96sB4YQ=
Subject key identifier:   14:CE:88:98:BD:B5:27:9F:CA:EC:13:98:6E:7B:31:44:CB:52:CC:DA
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Certificate issuer:       /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial:       019E56DB92EB55952D56C6E230C67C0F0838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
Manifest number:          0840
Signing time:             Sat 23 May 2026 22:01:31 +0000
Manifest this update:     Sat 23 May 2026 22:01:31 +0000
Manifest next update:     Sun 24 May 2026 22:01:31 +0000
Files and hashes:         1: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: LZC+Xm1uiuXm0z44A0XyicfR7k1F2t5JxbdTKk6B2gE=)
                          2: cCOa9Td1dyXgSsJH0W6VbUWVeS8.roa (hash: D7Hy4SDe+u2iQvMr4uFM192GN65qy0Iw55cUiW6a9ys=)
                          3: xN2tlbslAO9Hhzxol73kyIlksfo.roa (hash: 0KNISEhduMT4pUQpo6yJ7mPJDI8W5U5qrMtAEUOQhz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:56:db:92:eb:55:95:2d:56:c6:e2:30:c6:7c:0f:08:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
        Validity
            Not Before: May 23 22:01:31 2026 GMT
            Not After : May 24 22:01:31 2026 GMT
        Subject: CN=14ce8898bdb5279fcaec13986e7b3144cb52ccda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1d:74:6b:d3:fe:69:7e:e5:3a:ea:ac:87:ae:
                    72:3f:61:be:10:cf:8e:70:05:da:27:82:7f:6b:16:
                    b5:e7:33:8d:ff:ee:95:33:80:88:cf:e2:ae:32:ff:
                    9a:7e:ad:82:35:3f:1c:80:93:2b:6f:49:a1:31:20:
                    af:6b:ae:71:76:a1:74:b0:af:d9:4e:2f:5e:90:3e:
                    8e:3c:1d:88:fb:fc:92:01:9e:c8:f6:03:55:6b:20:
                    48:93:bd:4f:e3:88:5f:e4:34:15:01:15:87:d7:6d:
                    12:0f:41:b6:8f:17:8e:5b:d0:ec:32:6b:46:24:d4:
                    87:6c:f1:3a:9a:f8:78:d0:c6:bd:0e:7d:4d:94:c0:
                    f3:7c:9a:02:a4:32:88:7c:35:64:b1:ab:06:c6:92:
                    d9:ca:bb:d1:63:14:40:8d:4d:1b:87:15:62:7e:a6:
                    38:3f:f6:b0:6a:18:c1:2a:16:28:89:41:81:66:0d:
                    c5:24:b2:1b:25:28:95:10:82:e4:8b:fc:20:34:db:
                    7a:c3:46:9d:7b:07:e4:01:4e:ae:b4:7d:b8:0f:a7:
                    47:35:2e:03:45:be:58:19:a3:3b:ba:95:7b:39:50:
                    dd:69:f4:5d:b1:e0:98:b7:72:98:1c:50:03:43:df:
                    d5:51:5e:7a:73:cb:fa:3a:f0:5b:a9:e5:41:bb:5f:
                    80:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CE:88:98:BD:B5:27:9F:CA:EC:13:98:6E:7B:31:44:CB:52:CC:DA
            X509v3 Authority Key Identifier:
                keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d1:37:71:26:1d:34:51:5a:e6:2d:24:f4:05:f6:2e:e3:2e:
         29:43:06:04:e8:cc:54:1d:17:28:7e:1d:e0:87:98:f1:4c:95:
         fb:46:14:92:01:19:06:45:a2:56:9b:8a:a9:74:ff:de:47:48:
         34:c7:f2:95:fd:90:6b:e5:47:d4:9f:67:53:84:60:97:bf:94:
         32:60:13:ab:0c:2e:73:16:8a:71:52:86:7a:61:a7:bd:1b:a4:
         24:2a:ee:26:91:dd:1b:aa:32:b2:3c:73:e4:4c:ee:1f:a5:52:
         f9:43:79:eb:15:b4:d2:3a:36:7b:6f:0f:29:9e:8e:71:1e:b7:
         72:93:b6:a9:f4:b0:c3:f8:c8:d7:9b:0a:62:2a:b5:a9:cc:6a:
         a2:ce:b0:ca:16:15:b5:d6:81:29:d0:fd:82:46:64:df:3f:21:
         51:9d:5b:c0:fc:5a:75:c4:13:72:81:d1:06:cf:a1:c4:34:ba:
         93:b0:09:6b:15:d1:d9:4c:38:06:d6:95:3d:7d:dc:33:e3:78:
         12:47:a7:f3:55:47:be:ee:9b:74:60:66:87:f9:6d:03:50:ff:
         e5:d4:a1:71:8c:0d:1a:f9:7f:de:e7:d0:ad:96:f4:72:18:1a:
         13:8a:73:8d:bb:ed:68:f5:f0:a9:56:c3:25:bb:08:7f:cf:fa:
         2c:73:18:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5W25LrVZUtVsbiMMZ8Dwg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDU0NzJiNTUwYjM0ZmRiMDFhZGNkNTEwYTlkY2Q4MjFj
OWQ5OTEwHhcNMjYwNTIzMjIwMTMxWhcNMjYwNTI0MjIwMTMxWjAzMTEwLwYDVQQD
EygxNGNlODg5OGJkYjUyNzlmY2FlYzEzOTg2ZTdiMzE0NGNiNTJjY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR10a9P+aX7lOuqsh65yP2G+EM+O
cAXaJ4J/axa15zON/+6VM4CIz+KuMv+afq2CNT8cgJMrb0mhMSCva65xdqF0sK/Z
Ti9ekD6OPB2I+/ySAZ7I9gNVayBIk71P44hf5DQVARWH120SD0G2jxeOW9DsMmtG
JNSHbPE6mvh40Ma9Dn1NlMDzfJoCpDKIfDVksasGxpLZyrvRYxRAjU0bhxVifqY4
P/awahjBKhYoiUGBZg3FJLIbJSiVEILki/wgNNt6w0adewfkAU6utH24D6dHNS4D
Rb5YGaM7upV7OVDdafRdseCYt3KYHFADQ9/VUV56c8v6OvBbqeVBu1+AwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTOiJi9tSefyuwTmG57MUTLUszaMB8GA1UdIwQY
MBaAFEpFRytVCzT9sBrc1RCp3NghydmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgt
MTJjMDU4YmZhY2MxLzEvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgtMTJjMDU4YmZhY2Mx
LzEvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNE3cSYd
NFFa5i0k9AX2LuMuKUMGBOjMVB0XKH4d4IeY8UyV+0YUkgEZBkWiVpuKqXT/3kdI
NMfylf2Qa+VH1J9nU4Rgl7+UMmATqwwucxaKcVKGemGnvRukJCruJpHdG6oysjxz
5EzuH6VS+UN56xW00jo2e28PKZ6OcR63cpO2qfSww/jI15sKYiq1qcxqos6wyhYV
tdaBKdD9gkZk3z8hUZ1bwPxadcQTcoHRBs+hxDS6k7AJaxXR2Uw4BtaVPX3cM+N4
Eken81VHvu6bdGBmh/ltA1D/5dShcYwNGvl/3ufQrZb0chgaE4pzjbvtaPXwqVbD
JbsIf8/6LHMYVw==
-----END CERTIFICATE-----
Generated at Sun May 24 04:38:14 2026 by rpki-client