Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
File:                     skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json)
Hash identifier:          nyoJhhOAcSN3gKNh8lC1Y3yFs8+vC5o63klwHv3rrP0=
Subject key identifier:   E6:19:98:2D:2A:3F:AE:F1:21:76:0F:7C:B8:C2:65:B8:6F:0B:49:A2
Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Certificate issuer:       /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Certificate serial:       019FFC7FCDB57968831821C227F9FFA55DE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
Manifest number:          19FF
Signing time:             Thu 13 Aug 2026 19:01:01 +0000
Manifest this update:     Thu 13 Aug 2026 19:01:01 +0000
Manifest next update:     Fri 14 Aug 2026 19:01:01 +0000
Files and hashes:         1: mBarFDGWX74TA5Zzt2YAA4dJipo.roa (hash: CId8nPwT9kwu7694B2Snf7hm053RirlYLW2TmMowCn0=)
                          2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: CQGuIfSSFdmM9FWD1fKLAv5HZCAoZClTGgVKTqqhO2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 15:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fc:7f:cd:b5:79:68:83:18:21:c2:27:f9:ff:a5:5d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
        Validity
            Not Before: Aug 13 19:01:01 2026 GMT
            Not After : Aug 14 19:01:01 2026 GMT
        Subject: CN=e619982d2a3faef121760f7cb8c265b86f0b49a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:fe:02:a7:c1:30:7a:61:af:4e:26:86:c8:
                    1c:06:04:68:b8:f8:9c:5a:9f:8e:be:73:f8:3e:67:
                    75:f2:34:2f:7c:42:26:80:33:2b:b8:bb:4a:34:22:
                    eb:5c:82:b6:f9:20:ea:be:4a:da:03:68:73:84:44:
                    60:fc:a1:56:9d:45:50:9a:af:8b:5c:c7:29:66:a5:
                    f7:a6:ca:a8:40:99:83:49:36:05:19:38:12:d6:a5:
                    ee:27:72:2d:a5:74:d5:ec:b2:33:9a:a7:99:2f:fe:
                    97:1c:64:a3:a6:9e:69:a6:97:61:9e:0a:0e:c0:0b:
                    18:04:19:3d:fb:c8:92:2f:d1:7b:08:58:46:5a:ce:
                    6e:94:fa:4d:08:b5:4a:97:5a:ae:6e:dd:4d:bd:26:
                    ff:75:f4:e5:9f:15:75:95:c2:92:ee:8f:99:16:a1:
                    41:ec:82:2a:4e:c1:dd:e2:1d:22:cb:d9:66:0f:6f:
                    b0:7e:33:f5:e8:2a:b1:a8:df:09:ef:45:34:03:1f:
                    9e:07:00:21:9a:08:7d:b2:f2:a8:f2:bb:81:26:2f:
                    c4:27:50:e5:33:1f:d7:0a:0c:42:d3:7e:7e:b3:eb:
                    9f:f8:7b:79:35:b1:2b:1b:ac:29:79:72:42:6c:0b:
                    9b:a7:80:35:84:31:28:26:83:c6:28:ec:12:e8:45:
                    0b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:19:98:2D:2A:3F:AE:F1:21:76:0F:7C:B8:C2:65:B8:6F:0B:49:A2
            X509v3 Authority Key Identifier:
                keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6b:77:d1:6e:b2:73:64:47:35:6a:b9:a4:ca:69:ed:c6:e9:
         8d:37:8e:ed:64:9a:00:ba:07:c0:48:70:8e:78:ef:44:f9:cf:
         01:cd:59:a4:d5:67:a5:80:ee:c4:7f:51:c0:46:b0:cb:42:e9:
         e8:d6:4b:3c:76:bb:71:9d:f3:64:03:e7:6f:68:f5:38:f5:19:
         c2:c7:f4:c9:34:ea:33:6c:74:50:eb:0a:b0:67:0d:7d:01:1e:
         77:e3:6c:7e:55:56:6b:e3:7e:a0:fc:61:94:59:4b:12:07:08:
         80:64:35:25:07:e6:56:4e:35:fb:4f:51:c9:ad:c7:14:f5:c7:
         39:ea:f2:5e:95:d1:16:cd:81:6d:97:41:98:0d:e5:61:12:6b:
         9b:ab:a8:a4:0f:63:14:ca:96:5f:80:44:9c:3b:0f:9f:6e:fd:
         9e:75:db:c9:1e:6e:38:c7:a9:77:b2:98:0e:ce:ed:2f:51:90:
         6a:28:6c:40:92:b3:92:28:71:f2:88:0a:a1:d9:3a:78:c6:c1:
         bb:a5:74:f8:c7:b8:f3:ed:7d:ad:2a:ec:13:34:d9:69:9c:ed:
         d9:58:e3:3d:7c:d3:79:df:9d:37:22:2b:4d:d7:0c:89:5e:44:
         d2:4c:f0:30:7b:6b:93:fc:c8:d6:d1:b8:8e:44:dc:7b:fa:2b:
         32:06:8a:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/8f821eWiDGCHCJ/n/pV3mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNDlhZTY5YjNhNzJlYzJlNmU5YWRiOTkwOTBkODEyYTFk
Mjk5NTEwHhcNMjYwODEzMTkwMTAxWhcNMjYwODE0MTkwMTAxWjAzMTEwLwYDVQQD
EyhlNjE5OTgyZDJhM2ZhZWYxMjE3NjBmN2NiOGMyNjViODZmMGI0OWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfT+AqfBMHphr04mhsgcBgRouPic
Wp+OvnP4Pmd18jQvfEImgDMruLtKNCLrXIK2+SDqvkraA2hzhERg/KFWnUVQmq+L
XMcpZqX3psqoQJmDSTYFGTgS1qXuJ3ItpXTV7LIzmqeZL/6XHGSjpp5pppdhngoO
wAsYBBk9+8iSL9F7CFhGWs5ulPpNCLVKl1qubt1NvSb/dfTlnxV1lcKS7o+ZFqFB
7IIqTsHd4h0iy9lmD2+wfjP16CqxqN8J70U0Ax+eBwAhmgh9svKo8ruBJi/EJ1Dl
Mx/XCgxC035+s+uf+Ht5NbErG6wpeXJCbAubp4A1hDEoJoPGKOwS6EUL9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYZmC0qP67xIXYPfLjCZbhvC0miMB8GA1UdIwQY
MBaAFLJJrmmzpy7C5umtuZCQ2BKh0plRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjkt
OWRmMmY3OWJlZjEwLzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjktOWRmMmY3OWJlZjEw
LzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2t30W6y
c2RHNWq5pMpp7cbpjTeO7WSaALoHwEhwjnjvRPnPAc1ZpNVnpYDuxH9RwEawy0Lp
6NZLPHa7cZ3zZAPnb2j1OPUZwsf0yTTqM2x0UOsKsGcNfQEed+NsflVWa+N+oPxh
lFlLEgcIgGQ1JQfmVk41+09Rya3HFPXHOeryXpXRFs2BbZdBmA3lYRJrm6uopA9j
FMqWX4BEnDsPn279nnXbyR5uOMepd7KYDs7tL1GQaihsQJKzkihx8ogKodk6eMbB
u6V0+Me48+19rSrsEzTZaZzt2VjjPXzTed+dNyIrTdcMiV5E0kzwMHtrk/zI1tG4
jkTce/orMgaK1A==
-----END CERTIFICATE-----
Generated at Thu Aug 13 20:49:57 2026 by rpki-client