Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
File:                     skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json)
Hash identifier:          Vyzf74TNPAJ0OSxImE3bIT/JG5hJQ0aYNI8Q3bXa8zQ=
Subject key identifier:   0B:9C:7E:8A:0E:A2:DA:85:AB:D4:73:42:08:2B:3B:E2:AB:FB:AA:EA
Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Certificate issuer:       /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Certificate serial:       019E29276A9DEFDE026CB19E4CAE1C732DA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
Manifest number:          190D
Signing time:             Fri 15 May 2026 01:01:49 +0000
Manifest this update:     Fri 15 May 2026 01:01:49 +0000
Manifest next update:     Sat 16 May 2026 01:01:49 +0000
Files and hashes:         1: mBarFDGWX74TA5Zzt2YAA4dJipo.roa (hash: CId8nPwT9kwu7694B2Snf7hm053RirlYLW2TmMowCn0=)
                          2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: GQbM1fkj7bmjCmlbwxHZZnHpmzgcc2DwlDQKGtB/kB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:27:6a:9d:ef:de:02:6c:b1:9e:4c:ae:1c:73:2d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
        Validity
            Not Before: May 15 01:01:49 2026 GMT
            Not After : May 16 01:01:49 2026 GMT
        Subject: CN=0b9c7e8a0ea2da85abd47342082b3be2abfbaaea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d7:20:04:4d:b3:52:58:71:b1:c8:19:d9:d6:
                    d1:d3:b5:6b:27:da:01:27:8a:09:4e:44:8c:a2:f9:
                    c3:a4:88:6c:73:00:e4:16:d4:0c:a4:fc:c5:5f:bc:
                    21:f7:52:5a:98:67:3a:e3:95:25:49:ec:21:43:21:
                    68:52:bd:95:a7:33:c1:d6:17:84:e0:fb:43:26:68:
                    3c:e4:dc:a6:87:4c:89:ca:4f:e9:e7:45:a0:95:e5:
                    82:6d:87:db:6a:cb:c4:e5:9b:b4:58:70:5d:9f:ba:
                    5a:6f:c6:3e:6a:da:5e:b9:6f:71:3f:14:2d:8b:a0:
                    e4:18:84:21:a9:63:e4:9b:54:68:b4:5b:17:24:6f:
                    17:d0:89:72:94:79:85:69:ba:2e:cf:86:4d:e1:a9:
                    97:6b:55:42:78:45:42:fb:65:96:4c:2b:fc:0e:57:
                    1c:6b:58:9d:6d:c2:e0:f6:bc:00:4e:45:c5:5a:4c:
                    94:11:16:21:72:58:af:f4:cc:9f:1b:a1:d1:55:35:
                    37:64:d7:f8:5c:72:58:09:84:fb:3e:fd:c5:fa:3c:
                    88:35:81:42:d7:0a:61:54:48:8f:6b:55:be:33:f0:
                    4c:56:78:32:1a:76:30:9b:fc:05:41:6c:8d:fe:92:
                    fc:54:ca:43:0e:f8:9b:99:78:ea:93:95:96:17:aa:
                    ff:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9C:7E:8A:0E:A2:DA:85:AB:D4:73:42:08:2B:3B:E2:AB:FB:AA:EA
            X509v3 Authority Key Identifier:
                keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:80:9e:a7:61:dc:6d:0f:b8:07:46:44:7f:b2:91:3c:b2:f0:
         d8:fe:c0:5b:a4:03:93:df:c7:b4:83:3b:28:d0:fe:21:96:33:
         02:9f:e1:a7:d2:c5:0f:c7:f6:f7:07:8d:4c:16:a9:46:be:e3:
         15:ff:ef:c2:87:51:b0:3c:d2:79:5b:1f:0a:5f:73:5b:67:5f:
         26:c4:53:95:cc:18:3e:79:b8:b6:b4:c7:d0:f0:02:e5:e4:1b:
         fb:f5:cc:1c:9b:39:21:54:76:6a:68:94:bb:8a:5e:a3:ee:5a:
         65:12:47:d7:f0:17:a9:e7:65:77:3c:1b:1a:43:31:31:e2:db:
         df:80:f1:72:9d:b5:04:a4:1c:8c:cc:aa:ed:82:26:94:79:5b:
         b8:bd:fb:1d:63:e9:eb:a8:52:fd:15:2a:49:ee:87:de:d3:42:
         9e:7e:02:12:82:73:f8:dd:1a:0a:d6:47:a6:82:e1:6e:7c:23:
         15:c8:42:40:d8:e9:b8:d5:b4:ea:66:5f:12:06:e5:bd:d8:b2:
         98:e5:5a:c4:3f:22:21:00:bf:b8:9b:94:8e:50:0b:63:e2:aa:
         51:5e:8d:d4:d9:9b:b4:c9:83:96:1e:f7:25:1f:1f:9d:2c:46:
         a0:45:a7:cf:84:a9:0c:32:74:ac:a0:e5:63:65:60:b4:b6:ba:
         5d:72:8d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:15:04 2026 by rpki-client