Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft
File:                     SkGx4j_iN1JHQnvXHg28MIGM0-0.mft (raw, json)
Hash identifier:          WQhgapaEBxVnbkf2hDJKItDjTzhuVWsP0AUtI4YHnIE=
Subject key identifier:   35:7A:A4:05:D2:EB:7B:E6:5F:98:20:C8:AB:E9:E6:BF:DC:84:54:C6
Authority key identifier: 4A:41:B1:E2:3F:E2:37:52:47:42:7B:D7:1E:0D:BC:30:81:8C:D3:ED
Certificate issuer:       /CN=4a41b1e23fe2375247427bd71e0dbc30818cd3ed
Certificate serial:       019F935AC88D4315A6E2AE7396AD47BD7B3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkGx4j_iN1JHQnvXHg28MIGM0-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:00:28 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:28 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:28 +0000
Files and hashes:         1: IptzpnH_OFvUHflcdcx5DR3SgII.roa (hash: tVTdfvKBqky+sXQObBePDrpGmyKb51agI6Imvb9ozhI=)
                          2: SkGx4j_iN1JHQnvXHg28MIGM0-0.crl (hash: ZXOLNHr2EjZbEQ3K3x4uPdAjIhP3u0Esuchzp8evxFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkGx4j_iN1JHQnvXHg28MIGM0-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:c8:8d:43:15:a6:e2:ae:73:96:ad:47:bd:7b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a41b1e23fe2375247427bd71e0dbc30818cd3ed
        Validity
            Not Before: Jul 24 09:00:28 2026 GMT
            Not After : Jul 25 09:00:28 2026 GMT
        Subject: CN=357aa405d2eb7be65f9820c8abe9e6bfdc8454c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:28:f4:1d:2a:ee:bb:5a:f5:7c:b1:f9:03:
                    f3:38:a3:b7:d6:d6:e8:c4:cb:ed:33:98:60:d1:9a:
                    09:0e:85:0f:b7:f8:0c:53:d7:0a:63:84:b0:89:f2:
                    76:c3:30:68:82:74:20:09:c0:fd:b7:a5:85:89:fc:
                    6e:6e:3e:2e:ec:d8:7a:9f:31:5c:b4:66:7a:75:0e:
                    24:42:67:2f:27:40:57:dc:bc:53:a0:00:4d:49:94:
                    a3:66:5d:8d:94:33:29:bc:30:5a:47:e6:6b:0f:d6:
                    e7:06:fc:af:9f:39:15:f9:c6:46:18:f4:44:df:68:
                    f9:4f:78:b8:bf:bc:42:99:78:2d:23:9e:2d:84:11:
                    99:73:b9:d4:ef:c9:6b:73:34:cd:07:73:af:e8:68:
                    4a:07:31:09:7a:4b:75:3f:56:79:1d:7e:07:f2:a4:
                    eb:9f:7b:07:e0:01:8b:6d:08:a6:8e:dd:73:ed:ed:
                    56:7f:f1:6a:d2:87:e7:c0:92:79:e8:8b:75:3b:ec:
                    25:cc:d0:c5:30:d6:a6:d6:d0:3a:f3:c7:8c:d9:d1:
                    4d:25:ca:83:c8:67:3c:ab:9f:fa:df:2e:51:d8:63:
                    e2:e8:7f:30:e1:f5:79:9f:2c:3b:4c:b0:64:7c:ed:
                    23:2e:57:19:80:27:36:10:94:41:bc:2e:2a:07:35:
                    39:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7A:A4:05:D2:EB:7B:E6:5F:98:20:C8:AB:E9:E6:BF:DC:84:54:C6
            X509v3 Authority Key Identifier:
                keyid:4A:41:B1:E2:3F:E2:37:52:47:42:7B:D7:1E:0D:BC:30:81:8C:D3:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkGx4j_iN1JHQnvXHg28MIGM0-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:2e:48:a1:8b:48:59:3e:47:b4:22:88:f8:30:bd:c5:31:a6:
         0d:6c:13:b8:6b:b0:a0:95:08:71:37:cb:73:48:ac:fe:36:58:
         9f:99:08:e6:07:58:9b:23:1c:de:92:e8:f0:5a:98:9a:b5:ec:
         08:60:1f:b7:bb:99:37:ed:ac:c6:f2:bb:a5:b4:80:09:be:dd:
         1e:aa:3b:01:57:bb:9c:88:bb:10:75:ac:23:ed:cf:ee:ec:d6:
         e5:56:6c:95:b9:74:7d:c0:a5:32:ee:dd:1e:c2:b1:18:9d:7a:
         3c:1f:96:17:4b:a9:6d:43:1f:8a:fc:e8:39:2f:fc:3d:d9:64:
         8a:24:6d:be:49:69:e4:06:db:07:23:0a:9d:d3:af:30:97:3b:
         c9:06:73:10:b1:e0:28:6e:52:ac:59:04:23:67:ee:74:49:2c:
         cd:fe:ae:4e:ef:6c:f8:27:5b:0d:58:14:77:18:fa:20:cf:35:
         e2:69:60:55:a1:7e:80:1f:a9:dc:46:3d:40:d9:2b:96:15:de:
         c6:77:a3:39:3c:50:5a:f2:c3:5e:b0:f7:9e:05:73:22:25:04:
         74:26:b4:a9:63:64:d8:66:ee:3a:2b:4f:42:70:be:ad:8d:55:
         79:2e:5f:83:8f:bb:c8:68:b1:bb:fc:b4:9f:d4:7a:6d:43:91:
         f8:e6:9b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:03:53 2026 by rpki-client