Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
File:                     skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json)
Hash identifier:          ljGwPvAiPbs8fhoVECF+68nLYr2lXOzOyMzvQQ++9/c=
Subject key identifier:   50:94:8B:BB:B8:8B:9E:40:B8:0E:2B:23:1D:A7:51:03:6C:EC:BA:80
Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Certificate issuer:       /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Certificate serial:       019F12D39E9DC1549B8F66DC34F0C900A93E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
Manifest number:          1986
Signing time:             Mon 29 Jun 2026 10:01:26 +0000
Manifest this update:     Mon 29 Jun 2026 10:01:26 +0000
Manifest next update:     Tue 30 Jun 2026 10:01:26 +0000
Files and hashes:         1: mBarFDGWX74TA5Zzt2YAA4dJipo.roa (hash: CId8nPwT9kwu7694B2Snf7hm053RirlYLW2TmMowCn0=)
                          2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: 5dEW2Tu3+ekFAvWlgme4ads6ShX1637Q6pRhadoa2rg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 10:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:d3:9e:9d:c1:54:9b:8f:66:dc:34:f0:c9:00:a9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
        Validity
            Not Before: Jun 29 10:01:26 2026 GMT
            Not After : Jun 30 10:01:26 2026 GMT
        Subject: CN=50948bbbb88b9e40b80e2b231da751036cecba80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:37:5a:d7:84:b3:9b:4c:04:b8:c6:80:4f:5c:
                    3d:c7:5a:bb:29:d6:fa:ea:1e:72:c6:d1:b7:01:bb:
                    1f:50:d6:45:77:a3:16:ce:a0:7d:10:ee:a4:e1:74:
                    e9:ec:c7:3a:5e:2d:4f:67:0d:4f:ce:d8:32:09:c6:
                    39:11:36:95:f8:8a:24:fc:73:d4:01:65:f3:be:82:
                    6b:98:17:6a:c5:a2:73:ae:b3:36:ae:65:ad:e0:c5:
                    f1:8a:1a:17:ca:ee:7f:6c:1a:de:90:17:6b:ad:8c:
                    78:01:83:cf:98:71:55:cd:0d:03:57:24:6b:67:a3:
                    57:4b:37:e7:76:a3:91:29:5f:37:bb:12:ac:e2:32:
                    5b:a6:30:5b:2f:50:eb:d6:cf:1e:2b:08:4f:fa:e6:
                    34:ed:62:a9:07:85:9f:dc:e4:b7:59:07:8c:33:5a:
                    88:46:ba:8d:96:c4:fa:77:de:0d:9d:b8:70:6d:4f:
                    c6:96:a6:28:ca:e8:ff:f1:52:6c:6d:c9:76:b8:4a:
                    27:2f:fb:15:87:f9:18:89:95:2d:43:07:0d:49:18:
                    d9:09:ff:c7:89:54:0b:e5:3d:24:29:c2:80:86:d9:
                    6d:7f:44:90:60:a8:a6:5e:ae:97:3d:31:22:66:6b:
                    67:a4:6a:da:f8:46:be:0a:73:e2:b7:22:58:f3:9f:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:94:8B:BB:B8:8B:9E:40:B8:0E:2B:23:1D:A7:51:03:6C:EC:BA:80
            X509v3 Authority Key Identifier:
                keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5a:81:5b:ff:97:ce:0e:4c:e0:8c:1c:64:3b:33:17:c1:25:
         7a:4a:83:a0:95:db:70:f0:86:9c:cf:22:b5:30:76:2a:f5:19:
         a2:30:4d:85:71:82:75:dd:c6:93:1c:8d:4e:1d:81:c8:62:72:
         f1:57:7b:1a:05:15:91:f4:e7:fd:bd:6c:ba:8d:3e:55:f0:25:
         ba:fb:ad:2a:09:23:0d:f0:83:66:dc:f2:50:3a:b5:e4:e6:d1:
         23:72:ad:43:89:07:77:6a:7f:6b:84:79:df:e4:4c:49:f5:99:
         5f:53:02:cc:67:31:1b:cc:38:aa:53:55:42:ec:e1:b5:02:c7:
         d1:83:87:45:6f:0a:ef:fc:65:cd:44:03:4d:13:b7:6a:fb:eb:
         9b:93:c9:d8:83:92:a5:96:37:30:07:d7:dc:c1:23:f1:df:96:
         09:c0:69:66:93:c0:b8:50:34:06:9a:28:a6:77:4a:2d:18:a9:
         e2:ac:d1:c7:d8:40:2a:35:47:95:32:90:d7:a3:45:1c:79:69:
         02:05:dc:46:3e:3e:16:ae:06:0d:0f:00:96:bf:d2:6f:46:c7:
         03:97:84:56:ce:7d:9b:13:95:39:14:50:3f:89:a9:4b:af:78:
         6c:7c:29:d6:ab:46:f5:0a:7d:23:6e:28:37:d0:ea:6b:47:b5:
         90:ea:68:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:34:30 2026 by rpki-client