Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File:                     skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier:          WYBxL6EleSLOKVmaCYmUX+UwIodN/Z63lgsggGNrciU=
Subject key identifier:   1A:41:EF:56:D9:21:7D:55:91:CD:76:F7:17:87:EB:D1:B5:F4:FA:CD
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer:       /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial:       019F93C91A529BE442C11FEE6831AEC58EB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number:          0EAC
Signing time:             Fri 24 Jul 2026 11:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:57 +0000
Files and hashes:         1: 2_rmRx0h4Ldgjna3JZ3fPaV_8K4.roa (hash: Db9G7H48+/jdUTzq6s6B93b4lpE5OnZQxkmWnM9jPYM=)
                          2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: 8HrxNuP8KpT7OGVSRJQ0pf4nIzQPN1hk/oWo7Iv7iCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:1a:52:9b:e4:42:c1:1f:ee:68:31:ae:c5:8e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
        Validity
            Not Before: Jul 24 11:00:57 2026 GMT
            Not After : Jul 25 11:00:57 2026 GMT
        Subject: CN=1a41ef56d9217d5591cd76f71787ebd1b5f4facd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1a:57:6b:d4:65:12:fb:c5:5e:cb:94:9f:22:
                    05:43:b8:11:1b:58:d9:9e:00:e1:bb:9c:6b:e7:0e:
                    f4:90:2c:f5:65:89:8d:bf:a2:fb:74:8a:67:08:3a:
                    56:b6:eb:c6:fe:ed:44:ed:b3:dd:01:e7:a2:4f:0e:
                    a8:1d:bc:43:1f:86:45:2e:eb:f3:3f:cf:3a:19:86:
                    3c:ed:40:86:fc:c5:10:14:0f:ac:59:5d:0b:7b:2f:
                    a7:0a:08:ca:cc:37:85:9b:8b:80:eb:d9:3d:a4:29:
                    8b:a1:09:e7:e0:e4:d6:ea:2a:a7:56:d5:6d:36:74:
                    13:dc:8c:27:92:26:bd:97:49:b5:04:44:a6:4d:3b:
                    a7:8c:94:ed:a2:a2:04:b2:39:45:1d:dd:f5:9f:5d:
                    74:00:b9:8f:02:3f:24:4c:f4:4e:da:cf:54:2c:5f:
                    e4:81:fe:a3:38:f7:4b:0e:78:31:33:f9:9b:fd:0f:
                    2f:75:1e:5c:04:31:b9:e1:bc:1b:7a:11:1a:0d:98:
                    22:87:b1:df:4f:b1:32:01:55:7e:fd:64:48:a7:cb:
                    fe:f8:8f:40:34:66:57:eb:21:40:30:db:ab:b0:51:
                    83:72:a3:95:bb:e3:7a:85:d8:b0:5e:8a:07:6d:6d:
                    f3:bc:ec:b4:5b:8d:fe:31:43:6a:54:0f:c5:41:82:
                    31:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:41:EF:56:D9:21:7D:55:91:CD:76:F7:17:87:EB:D1:B5:F4:FA:CD
            X509v3 Authority Key Identifier:
                keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c7:f9:e5:cd:27:fa:19:70:10:4f:10:48:0a:b2:5b:d0:68:
         86:cd:d6:ad:2e:f0:ea:95:9f:08:04:3f:75:09:dc:89:86:3f:
         a6:90:cf:6a:88:ed:d7:99:08:8c:76:1b:92:d1:78:7e:8e:3f:
         ed:8f:e9:16:20:2f:bb:e3:43:c9:76:b0:d9:4a:ed:12:62:eb:
         e0:17:2f:d8:a8:9e:8b:27:97:e5:c0:e1:92:75:21:55:ac:a0:
         59:19:7d:d6:7a:e1:3e:66:ed:d6:99:bc:fb:69:d4:e9:6a:79:
         b4:5b:e9:1a:2c:42:ce:e2:c0:0b:4a:c3:51:39:a4:a7:c2:80:
         02:0e:1b:05:86:e3:43:6e:94:3e:43:ff:5d:94:42:78:61:64:
         5b:36:40:33:e5:77:41:79:a6:c3:6e:8c:6a:f8:b4:0b:36:a8:
         77:bc:48:c0:c4:e9:95:23:9d:af:42:19:ad:f1:39:87:c4:17:
         9a:79:d1:c9:87:cc:66:f5:a0:1d:1b:3f:a7:9c:f0:19:19:e6:
         97:bd:9f:22:e0:ed:11:a0:ed:83:4a:99:87:41:e2:a7:21:0a:
         a0:fe:e2:10:c7:f7:52:63:b8:b1:28:53:05:e7:8a:2c:e2:58:
         2c:4f:e8:33:ce:e1:52:0c:b6:10:8b:7a:24:8f:d0:87:ab:81:
         5f:aa:36:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:17:53 2026 by rpki-client