Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft
File:                     SkGx4j_iN1JHQnvXHg28MIGM0-0.mft (raw, json)
Hash identifier:          2bJgYTotU9eSui/6dWjcrXiIavdfdqTUiAOzakkq5hs=
Subject key identifier:   E3:1F:DC:1E:69:F1:B9:21:22:6D:07:B0:15:98:6D:7D:D4:E9:5F:E7
Authority key identifier: 4A:41:B1:E2:3F:E2:37:52:47:42:7B:D7:1E:0D:BC:30:81:8C:D3:ED
Certificate issuer:       /CN=4a41b1e23fe2375247427bd71e0dbc30818cd3ed
Certificate serial:       01A10FCD8D138276DDBE650ED55E31872B30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkGx4j_iN1JHQnvXHg28MIGM0-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft
Manifest number:          0106
Signing time:             Tue 06 Oct 2026 06:01:31 +0000
Manifest this update:     Tue 06 Oct 2026 06:01:31 +0000
Manifest next update:     Wed 07 Oct 2026 06:01:31 +0000
Files and hashes:         1: IptzpnH_OFvUHflcdcx5DR3SgII.roa (hash: tVTdfvKBqky+sXQObBePDrpGmyKb51agI6Imvb9ozhI=)
                          2: SkGx4j_iN1JHQnvXHg28MIGM0-0.crl (hash: nOkOSCfUM7S0d0vdaudscosAgZ0ickjuT5iNTejAk+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkGx4j_iN1JHQnvXHg28MIGM0-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 06:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:cd:8d:13:82:76:dd:be:65:0e:d5:5e:31:87:2b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a41b1e23fe2375247427bd71e0dbc30818cd3ed
        Validity
            Not Before: Oct  6 06:01:31 2026 GMT
            Not After : Oct  7 06:01:31 2026 GMT
        Subject: CN=e31fdc1e69f1b921226d07b015986d7dd4e95fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:3e:9a:32:eb:73:a5:ff:3f:cd:00:b9:aa:
                    6b:3a:ae:ed:97:86:2d:49:03:8a:b0:0f:f8:d5:ec:
                    95:a0:d8:e0:ec:f6:b7:5d:55:88:d7:83:5b:74:d9:
                    2e:57:f2:b3:23:c3:c2:e7:24:0a:d6:73:f6:61:0c:
                    43:0c:09:97:3d:ba:15:20:78:ee:11:20:d1:aa:9b:
                    b3:40:c8:8f:10:fd:fc:99:66:e0:53:2e:a5:05:10:
                    77:b3:2b:9d:77:ba:d1:65:84:1f:d5:2e:11:d1:25:
                    63:b7:1e:3d:1b:91:d1:33:f7:f4:52:ea:73:cd:44:
                    55:e7:d4:9f:20:6d:2d:8c:ee:29:5d:3e:8f:8f:cd:
                    1e:03:d9:ee:5e:e0:60:71:b3:c2:64:20:3b:37:88:
                    6d:99:48:f3:99:5a:3b:d3:f1:50:e4:28:77:8c:b5:
                    47:5a:d7:95:82:56:2b:84:25:25:1c:f8:f5:a6:47:
                    fe:2a:f9:5a:16:95:90:bc:68:32:2d:23:7c:0a:e8:
                    e9:ee:b4:0f:30:34:aa:b7:69:37:4e:1f:2d:28:00:
                    50:79:ec:48:0e:92:31:ce:87:de:76:4a:e8:50:56:
                    49:cb:53:c9:a3:91:f8:46:3c:0c:9e:6c:6b:e5:1a:
                    57:aa:49:c9:ff:1b:d5:ac:f0:4e:a6:f8:64:ae:49:
                    78:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1F:DC:1E:69:F1:B9:21:22:6D:07:B0:15:98:6D:7D:D4:E9:5F:E7
            X509v3 Authority Key Identifier:
                keyid:4A:41:B1:E2:3F:E2:37:52:47:42:7B:D7:1E:0D:BC:30:81:8C:D3:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkGx4j_iN1JHQnvXHg28MIGM0-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:30:09:88:a1:04:0a:48:a7:ff:c3:a0:03:ee:9e:e7:f1:c9:
         a8:01:c4:29:33:64:3b:20:f8:ea:ab:0a:de:78:d3:95:44:95:
         bc:6c:1a:3a:55:6c:ef:a5:f3:f1:4c:0e:b7:17:7d:ce:33:fe:
         c3:86:cd:dc:60:50:d2:52:56:21:0c:02:64:60:9a:10:35:75:
         f8:bb:c1:4b:2d:6a:6f:00:e8:c1:5f:34:1a:ed:b0:76:1d:ed:
         cf:33:42:37:31:b9:54:eb:7c:53:cb:5c:81:f1:3f:21:9e:63:
         a5:11:2c:a9:0d:53:cf:ef:ae:62:bc:42:fd:ac:b8:7e:0b:dc:
         78:ad:ce:2a:e1:cd:6d:1a:c2:b1:6d:9a:72:7d:77:69:31:39:
         9d:c2:a2:0b:04:7a:c2:5f:0a:ec:51:28:9c:bf:4f:b4:e4:73:
         63:19:c1:a3:90:a3:2e:fe:b5:0d:bc:6d:17:96:ca:6e:c4:6f:
         4a:48:79:99:56:a2:d5:1e:ef:80:0b:fc:1d:51:b6:c1:23:79:
         8b:57:71:77:ac:8b:1e:62:8b:6c:10:27:87:67:c4:05:6a:48:
         9d:00:8b:32:32:0f:f0:57:7d:7e:96:7c:19:7e:99:5a:86:5e:
         1a:5a:e9:22:0c:b6:19:6b:51:f9:83:fa:84:10:74:bf:8f:b9:
         14:12:c8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:58:29 2026 by rpki-client