Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft
File:                     SkGx4j_iN1JHQnvXHg28MIGM0-0.mft (raw, json)
Hash identifier:          jwAewttBgOd9HyALlueZUN6tJBlRdctku8OCXAlhwCc=
Subject key identifier:   63:B9:29:EC:B9:DD:50:26:36:6D:BA:15:06:F6:6B:0E:58:1D:A0:33
Authority key identifier: 4A:41:B1:E2:3F:E2:37:52:47:42:7B:D7:1E:0D:BC:30:81:8C:D3:ED
Certificate issuer:       /CN=4a41b1e23fe2375247427bd71e0dbc30818cd3ed
Certificate serial:       01A1212F2FFBB5660EEC72B894D9622458DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkGx4j_iN1JHQnvXHg28MIGM0-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft
Manifest number:          010F
Signing time:             Fri 09 Oct 2026 15:01:42 +0000
Manifest this update:     Fri 09 Oct 2026 15:01:42 +0000
Manifest next update:     Sat 10 Oct 2026 15:01:42 +0000
Files and hashes:         1: IptzpnH_OFvUHflcdcx5DR3SgII.roa (hash: tVTdfvKBqky+sXQObBePDrpGmyKb51agI6Imvb9ozhI=)
                          2: SkGx4j_iN1JHQnvXHg28MIGM0-0.crl (hash: 19mTngkDMUYjT4eWJ7vtMLLK0EpVLSVfyAcBqSFSeJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkGx4j_iN1JHQnvXHg28MIGM0-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:21:2f:2f:fb:b5:66:0e:ec:72:b8:94:d9:62:24:58:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a41b1e23fe2375247427bd71e0dbc30818cd3ed
        Validity
            Not Before: Oct  9 15:01:42 2026 GMT
            Not After : Oct 10 15:01:42 2026 GMT
        Subject: CN=63b929ecb9dd5026366dba1506f66b0e581da033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:94:74:30:a3:dd:ac:60:7b:79:bd:ca:49:
                    cf:c0:ea:e4:eb:b1:51:cd:1b:c6:83:0c:7f:ab:c2:
                    96:bf:91:b4:43:32:5f:d8:c9:24:9b:39:ef:a8:77:
                    59:ef:46:5a:91:91:a7:a8:2f:e9:d2:92:0e:ee:a7:
                    b8:ad:2f:9e:1e:3d:32:02:99:95:ee:92:68:25:e8:
                    99:0f:a6:c6:df:b8:9a:75:cc:b1:c5:d1:62:be:0a:
                    99:1b:06:dc:af:58:d3:a5:7a:af:d8:78:fd:2b:fe:
                    eb:76:29:fa:ce:f0:41:99:db:8a:ea:7a:c3:d2:f2:
                    59:af:3d:cf:aa:a2:02:ec:20:b4:ef:48:e9:b4:38:
                    d3:13:d1:b4:58:9a:a3:13:e4:40:d9:3b:0a:a7:94:
                    33:51:f1:16:94:5d:e0:73:96:96:54:db:b1:aa:0a:
                    1e:60:bc:3e:95:65:32:0d:4f:e1:0a:ab:e1:9b:3d:
                    48:12:a6:73:6e:a6:a0:76:94:55:da:4e:c9:eb:c1:
                    73:86:9c:1f:e8:86:d3:cc:03:0c:2a:d7:e2:f5:e0:
                    cb:fd:85:8e:49:d3:55:f8:a4:05:f2:ec:f2:1e:ff:
                    1c:47:1b:a6:32:63:4c:51:28:47:4b:22:e2:f2:59:
                    06:ec:c3:f3:9a:1b:8f:36:e3:a8:ee:95:fa:ef:df:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B9:29:EC:B9:DD:50:26:36:6D:BA:15:06:F6:6B:0E:58:1D:A0:33
            X509v3 Authority Key Identifier:
                keyid:4A:41:B1:E2:3F:E2:37:52:47:42:7B:D7:1E:0D:BC:30:81:8C:D3:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkGx4j_iN1JHQnvXHg28MIGM0-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ef:54:20:d5:f1:b6:09:fc:3e:3b:77:45:c5:90:72:3a:f5:
         cf:89:5b:bd:da:56:45:b5:80:d8:03:9c:2a:3e:ad:3a:15:8d:
         de:ad:4a:8d:ef:32:ad:c0:19:ff:84:3a:f1:fe:57:97:01:d2:
         1a:e7:6e:a1:3e:70:e0:72:d7:1a:4a:e1:a1:6d:19:6b:40:08:
         3f:57:57:27:55:53:2e:87:98:47:3b:0b:38:8f:96:5c:62:78:
         ef:a0:d2:68:bd:1d:8b:c8:94:9b:92:4e:25:88:11:fe:97:7f:
         4b:2a:df:f3:da:a7:14:10:ea:b6:28:12:fa:27:81:99:ac:42:
         7c:89:3f:2e:f8:72:e0:45:3f:86:f8:7e:2f:81:06:07:eb:b8:
         6d:0e:5f:51:38:72:fb:23:74:09:2e:98:56:6c:6e:c0:c9:c0:
         c4:93:39:2a:b5:8f:5e:8f:8d:08:4d:41:bb:84:85:69:07:b1:
         4b:92:8e:f2:e8:01:b6:b3:cc:69:66:af:79:7f:43:77:0a:c8:
         52:6a:27:c2:29:22:5c:9b:b1:82:db:13:f8:1c:d7:a8:f2:74:
         d2:24:b6:7d:0a:95:f0:c8:38:33:f8:0e:52:a5:b5:95:a5:13:
         65:13:55:fa:31:28:01:55:5b:dc:3e:6d:5d:22:01:9b:49:51:
         6d:46:b3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:35:51 2026 by rpki-client