Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          qhxijzJCY6yHvo/H5kE9ptIEVsw4ZZjxWYOBlIy3Nv0=
Subject key identifier:   F7:46:E8:0F:ED:11:75:C3:85:37:9A:63:60:D4:64:77:81:9B:22:F3
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019F91A39397E8F82FED64DEE3599683A9BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          1040
Signing time:             Fri 24 Jul 2026 01:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:44 +0000
Files and hashes:         1: 0zsz-mz3QUq_RZV4eHpIMCvlE2Q.roa (hash: zsKWU4kWBcHffnCldd/6EPM4YqHbeKQgB7/qG1/ysUw=)
                          2: 1-5fTi6s1Kplp75lWlcBDMf3u4o.roa (hash: tkr93CENCQMU8I4CRf7NT1nfm7qY9AruXpGRBogFjDc=)
                          3: 4NdCq8obZr436D2aMDPBKInOKng.roa (hash: nCVG/YTz/OgaKxKZF5iZyXglkJRNwFm23KPtP5MS7yg=)
                          4: 9U9UZsJALoO5uYFbr8y_ZEG6R0o.roa (hash: L9NVxLU8O9i95hEu9k7Po4V4b+iJv7NAW4494Hk5YUw=)
                          5: HvPJromQatJpK21zTf_zEWzRrcs.roa (hash: MlXOal2TwzQ7NF4YnJ7EYZ0o/+GTjGWME37sNwfO/wU=)
                          6: IbohXdTLOI5jMkwRsX5bUmXSpAc.roa (hash: UBaFG47zbBGMBn4xKaby4a1MFrL+PkMMbb8aT7/JD8s=)
                          7: Nn0JzGgy_u6vjsYI0Crz56q0DkY.roa (hash: RxEsMznFmzmlGwJT1srwSiUrG5r0NzfeEQAmBuii6aA=)
                          8: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: HEmnlItj69wnuOnsMZ8Ez8WdocYPk61kIoHbWXKdozo=)
                          9: Xa3aUsiQYVlNZ5VcrIIK_jAKctk.roa (hash: kmDj33CZwukfWzcqZSB35AY27WE1Fo7eUVsk7tTOXog=)
                          10: Z3qTKJ7CIGasieELz7lpIp2Yh6k.roa (hash: 7cCBpyUsGDrcq8EeS5YX2uI808hKjfebRICORugyh0E=)
                          11: bsvN2b5UZsB0fGW7kiw7OedgIDE.roa (hash: YACRChowg54sllVK3l+6K9IbWrwbmt0gZsObr1HWNsI=)
                          12: fNAR_JPkkC491YU-kT_ByTYIEm4.roa (hash: sYR/Ti3r2dDvrcuUCgrf8MhHNZLnx4vKqJjpp3V/CwA=)
                          13: j-uU8XQlwViTYTY7MMI9THoHjU8.roa (hash: jVFaUQIB9Y2fTUDqumECkc/IKMgCwoMMHfvoWihijHQ=)
                          14: kvNYuyJjxpLiL78r_HWCaKIVSeM.roa (hash: an7+no5fubSIGYKy4WMOxhF8ErceM1kP8W7CMY2bk44=)
                          15: n-n0F8-smlKDKWswC1m2gxnHDDY.roa (hash: q6YsSdX5hsZsNG4NcA8tNzI34ml2KRfXVRRHtJp3KRQ=)
                          16: u6D6IhT01RFHYtXcDxjfNMZBM8M.roa (hash: m6UqHoD9Mb+jAm+l2P3nH+xVGpm69d2EaiSe7G0I0NQ=)
                          17: uK6_ifWLoIZv8VuYRndlwMy_4bU.roa (hash: bzZHRyxvv4u3wzZyj+e9ebfI0EsjjmajKyBNoIA9GYk=)
                          18: xiMy2SPaH8lHFI3-H2U9JOLwGwg.roa (hash: JOE5tXZ69kYpokkhO+4/eAyh65at7yTIXXS2i46knHo=)
                          19: zbB9bOrDvpQhz8rM2SWmNLWPUT0.roa (hash: rpkVJVzw/qdvIkZyInRx6Bx7b3NqiJEAzZ8FKUQsPfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:93:97:e8:f8:2f:ed:64:de:e3:59:96:83:a9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Jul 24 01:00:44 2026 GMT
            Not After : Jul 25 01:00:44 2026 GMT
        Subject: CN=f746e80fed1175c385379a6360d46477819b22f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:42:ac:77:24:df:fa:51:5e:e8:88:6b:7b:00:
                    cb:bf:15:61:09:fd:7f:a2:90:d2:84:f2:ed:f3:da:
                    5b:8f:74:1b:a2:28:f2:72:46:b1:1b:9f:da:fc:c3:
                    d9:84:b2:13:e7:ff:f4:53:0e:e1:57:f8:66:52:6d:
                    16:39:02:32:f2:82:72:29:b6:d6:14:b2:e7:d4:ec:
                    4e:33:45:93:b3:97:87:69:0b:9d:14:86:3c:24:4c:
                    51:54:14:d8:18:72:66:8c:50:07:15:27:b3:c5:67:
                    ef:69:b4:4c:d9:7f:66:31:0d:bf:71:47:70:34:87:
                    53:21:b1:65:6a:c4:95:ae:ec:66:66:e6:8c:6b:be:
                    12:a5:71:57:94:d8:1b:1b:13:84:64:5e:31:6e:df:
                    1e:4e:be:07:e0:80:57:ca:07:ae:2f:ff:6b:32:10:
                    e5:7e:56:e1:d0:b8:d5:51:ca:94:5a:8d:a3:fe:54:
                    63:9d:75:02:b4:67:eb:1f:a4:ad:5c:03:ae:50:bf:
                    88:47:ad:42:0a:0c:3d:dd:0a:a9:d1:ad:e1:18:78:
                    0e:f0:e7:bb:20:a0:52:28:dc:8d:68:0f:65:62:c0:
                    b4:6f:f2:5f:f1:89:77:99:ab:11:99:88:88:23:9e:
                    f6:b2:1c:ae:c6:82:02:e7:4b:98:f7:0f:6f:09:34:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:46:E8:0F:ED:11:75:C3:85:37:9A:63:60:D4:64:77:81:9B:22:F3
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:09:8f:a3:0b:ae:d4:6f:ee:72:81:25:2a:49:3d:03:4f:41:
         ec:04:9d:c3:70:f9:f6:33:d7:59:b7:78:78:88:b5:bf:27:02:
         d1:0a:bd:1f:ec:b1:4f:b8:10:c5:7c:6a:e7:83:e5:78:81:fb:
         25:41:46:db:7f:b0:58:cd:67:73:c8:4f:00:93:c8:a1:49:57:
         78:03:ea:79:64:58:b0:8e:e1:27:21:3d:69:9f:0e:2f:e4:9a:
         27:1c:70:6d:7a:17:cd:cb:5b:81:ac:1e:05:aa:a6:07:03:fb:
         53:51:e1:5e:88:88:f6:43:0e:2f:93:1c:67:2e:17:9c:86:0b:
         91:41:5c:d4:79:be:d5:2f:33:59:71:3d:ed:ef:39:29:51:40:
         27:fb:c5:71:8a:d7:e5:d2:8c:99:d9:21:01:20:50:23:6e:9e:
         63:c3:93:5a:aa:e0:5a:91:6a:b8:ba:20:43:83:97:48:60:10:
         a9:ff:68:eb:84:9e:5e:cf:9e:28:ee:15:b7:ab:10:80:96:39:
         27:59:01:ca:43:7b:1a:3f:9d:97:d0:07:25:9d:be:b9:45:a9:
         13:fa:8a:0f:a1:4f:04:aa:df:36:64:9b:04:0f:e9:d8:5c:77:
         b0:49:76:f5:95:2f:06:83:36:8e:49:ae:47:6a:7b:50:79:92:
         f4:fe:55:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:30:49 2026 by rpki-client