Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
File:                     SKvyn974VwUC9LUb5f_AXE2bNGU.mft (raw, json)
Hash identifier:          4v+a3Qi2VLpJRJWPJfUw5vH/+Nq5enHbYb9+dbbPdrU=
Subject key identifier:   11:8A:C8:10:9A:29:21:B0:49:77:F1:C3:21:D1:2A:24:BE:8D:5E:64
Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
Certificate issuer:       /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Certificate serial:       01A0D4265263740AD24FB0B5B331BC4F3EB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
Manifest number:          13C1
Signing time:             Thu 24 Sep 2026 16:01:16 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:16 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:16 +0000
Files and hashes:         1: NTfOXNXZRUr1slwiC5jri_Pj3nE.roa (hash: 2cTeTvGq9Ma3xGEMix+i4fzR4v6Kuv41txoLWaf+1IU=)
                          2: SKvyn974VwUC9LUb5f_AXE2bNGU.crl (hash: 4lYNaZU9LXlIi97CjKuv9VgN1FE/7QLIsBWYUe818GI=)
                          3: WMExniDkNilW8Ca6K2scKNWFfng.roa (hash: kFeHB2m2ioqOfBMWJEcpqCW9jakGMmWIYvyS4MtQx1Q=)
                          4: iNg_c-CfOC92tOM1l9NX1aHGBcE.roa (hash: S6ilU7cZs9nHF8afuNO9l5+AXij1afMkASuHEvG633E=)
                          5: rpxSx-Kq5Z10yUYYr3jlY1CTjVY.roa (hash: JbhnUk6+5HxtHO4sN+DED43HcgG3ryZMySqa9ROUaUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:52:63:74:0a:d2:4f:b0:b5:b3:31:bc:4f:3e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
        Validity
            Not Before: Sep 24 16:01:16 2026 GMT
            Not After : Sep 25 16:01:16 2026 GMT
        Subject: CN=118ac8109a2921b04977f1c321d12a24be8d5e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:11:64:15:ab:45:37:1d:e9:07:a5:49:2e:
                    43:14:82:23:ef:7b:a2:b0:8c:f7:cf:42:7d:e8:4f:
                    fc:5b:f6:a1:66:1c:29:8c:85:08:f0:5e:0d:e8:3d:
                    cd:77:9b:df:dd:eb:49:30:6f:be:da:1a:a6:dc:a4:
                    75:04:6f:d3:61:55:be:d5:76:b5:c5:19:31:ce:e2:
                    24:d7:61:9b:36:f6:0c:29:20:74:11:2b:cd:17:82:
                    87:df:43:d0:b2:5f:e9:b8:42:b2:de:c1:00:57:ed:
                    f0:12:47:e7:b2:cf:67:92:6f:b4:33:ce:29:d2:45:
                    5a:ca:fe:9a:b3:ed:8a:27:e6:c1:dd:18:d8:a8:f3:
                    da:23:01:62:98:3c:40:49:bd:d3:02:43:7b:51:be:
                    34:cf:c4:e0:7c:68:f2:f8:3c:53:35:88:e2:fa:5d:
                    d9:80:c6:a7:a8:87:e3:dd:a4:cb:fc:e0:25:4f:98:
                    02:59:26:36:d5:dc:8b:23:95:46:f3:46:f7:ce:76:
                    55:c0:68:6c:8d:6e:22:fa:29:4a:c7:3c:e7:c0:f1:
                    9a:cc:13:05:2d:0f:8c:78:8f:34:92:bd:3b:e5:4d:
                    be:31:12:d3:a4:d2:03:99:72:6e:53:d3:8f:8d:4a:
                    3e:e8:5b:bc:4d:c7:44:4e:86:94:1b:46:cf:28:b7:
                    9c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8A:C8:10:9A:29:21:B0:49:77:F1:C3:21:D1:2A:24:BE:8D:5E:64
            X509v3 Authority Key Identifier:
                keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a4:5c:f8:09:d4:7c:39:a8:e1:7f:fb:b2:7c:07:9d:dd:1e:
         f8:a1:89:16:1c:79:4f:c0:9b:1e:e2:32:15:4f:67:96:de:8c:
         3c:d2:b1:f9:06:89:5e:a4:31:fc:99:47:f1:a8:d5:a4:68:40:
         a3:71:08:ab:82:a2:e5:27:f5:f0:4f:96:21:e6:fe:3b:cd:98:
         47:4d:e0:97:ba:dd:b2:12:ca:25:80:60:4c:aa:6f:6b:16:75:
         28:a7:37:5a:1c:98:cf:6a:49:2e:46:d4:d6:8c:b0:0a:c6:92:
         e3:64:79:39:92:68:3c:04:88:5d:38:d0:bc:25:c7:dd:6b:ae:
         1a:87:2d:a0:f9:b7:4b:4f:a5:dc:50:11:a1:af:4e:6b:f0:e4:
         eb:d4:49:4b:a9:f8:9b:87:e1:8a:64:e0:bd:e5:94:67:f8:dd:
         a9:e8:d8:d0:7a:fc:fa:24:93:b5:2b:9e:8a:d2:36:ce:d0:d9:
         a5:59:50:7f:51:04:1b:65:d2:98:4e:20:52:19:e0:59:43:98:
         e4:93:9c:3d:e8:44:16:46:4c:7d:f3:e8:b5:2e:13:2e:4d:42:
         c6:13:0d:cd:88:e8:30:c5:4a:46:09:73:a3:84:1e:65:db:51:
         31:55:3e:1a:f6:72:51:94:17:63:c5:b1:83:26:f0:08:a4:b5:
         25:27:5a:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUJlJjdArST7C1szG8Tz6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YWJmMjlmZGVmODU3MDUwMmY0YjUxYmU1ZmZjMDVjNGQ5
YjM0NjUwHhcNMjYwOTI0MTYwMTE2WhcNMjYwOTI1MTYwMTE2WjAzMTEwLwYDVQQD
EygxMThhYzgxMDlhMjkyMWIwNDk3N2YxYzMyMWQxMmEyNGJlOGQ1ZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzggRZBWrRTcd6QelSS5DFIIj73ui
sIz3z0J96E/8W/ahZhwpjIUI8F4N6D3Nd5vf3etJMG++2hqm3KR1BG/TYVW+1Xa1
xRkxzuIk12GbNvYMKSB0ESvNF4KH30PQsl/puEKy3sEAV+3wEkfnss9nkm+0M84p
0kVayv6as+2KJ+bB3RjYqPPaIwFimDxASb3TAkN7Ub40z8TgfGjy+DxTNYji+l3Z
gManqIfj3aTL/OAlT5gCWSY21dyLI5VG80b3znZVwGhsjW4i+ilKxzznwPGazBMF
LQ+MeI80kr075U2+MRLTpNIDmXJuU9OPjUo+6Fu8TcdEToaUG0bPKLecOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGKyBCaKSGwSXfxwyHRKiS+jV5kMB8GA1UdIwQY
MBaAFEir8p/e+FcFAvS1G+X/wFxNmzRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0t2eW45NzRWd1VDOUxVYjVmX0FYRTJiTkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hZjQxY2ItZmY5MS00NTljLTlhNjQt
YWJhMTEzZjNlM2FlLzEvU0t2eW45NzRWd1VDOUxVYjVmX0FYRTJiTkdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hZjQxY2ItZmY5MS00NTljLTlhNjQtYWJhMTEzZjNlM2Fl
LzEvU0t2eW45NzRWd1VDOUxVYjVmX0FYRTJiTkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKRc+AnU
fDmo4X/7snwHnd0e+KGJFhx5T8CbHuIyFU9nlt6MPNKx+QaJXqQx/JlH8ajVpGhA
o3EIq4Ki5Sf18E+WIeb+O82YR03gl7rdshLKJYBgTKpvaxZ1KKc3WhyYz2pJLkbU
1oywCsaS42R5OZJoPASIXTjQvCXH3WuuGoctoPm3S0+l3FARoa9Oa/Dk69RJS6n4
m4fhimTgveWUZ/jdqejY0Hr8+iSTtSueitI2ztDZpVlQf1EEG2XSmE4gUhngWUOY
5JOcPehEFkZMffPotS4TLk1CxhMNzYjoMMVKRglzo4QeZdtRMVU+GvZyUZQXY8Wx
gybwCKS1JSdaHg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:39:39 2026 by rpki-client