Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          +PgGp8Lok0ORwl2TXERKUL81o5SRItbP/p2x1xHnxNs=
Subject key identifier:   0B:3B:5D:ED:48:E7:1E:A1:DF:84:C1:4D:9B:A5:E5:A6:0E:C9:68:53
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019D2A04E8D70A35AC6699734E0B97EF0AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          0EF4
Signing time:             Thu 26 Mar 2026 12:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:57 +0000
Files and hashes:         1: 1-5fTi6s1Kplp75lWlcBDMf3u4o.roa (hash: tkr93CENCQMU8I4CRf7NT1nfm7qY9AruXpGRBogFjDc=)
                          2: ELj-7MtBAtrrOwfrcGQsv5K41fI.roa (hash: UmiOzYn6lnl4NAVu/sgPO8PDzJPZXZFdp9At+J21yrA=)
                          3: Fow_DRD0J9Sk-bBDpqDfNKsW1qg.roa (hash: OKmdm7ysJvOteC9H/zvOdemCTeoLV8EABr4yQLYsMuA=)
                          4: J4ZfI_RfOrpmy1A2S2Vj8ciYG7U.roa (hash: xU01SBexU2pgq8GahrrSha80apeSc4qMCG32pF8S8lI=)
                          5: Nn0JzGgy_u6vjsYI0Crz56q0DkY.roa (hash: RxEsMznFmzmlGwJT1srwSiUrG5r0NzfeEQAmBuii6aA=)
                          6: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: n0YNEzqQMFrw71SHQnliCkwaBH2qhYiniUyqV10edWY=)
                          7: Xa3aUsiQYVlNZ5VcrIIK_jAKctk.roa (hash: kmDj33CZwukfWzcqZSB35AY27WE1Fo7eUVsk7tTOXog=)
                          8: YwC9pKPBjvGZtmMsz8q7-L2iwUg.roa (hash: doEjRnjZRLGiYVoGRzQjHdhg1pJzAYP6ZgcVU+Bf/bE=)
                          9: Z3qTKJ7CIGasieELz7lpIp2Yh6k.roa (hash: 7cCBpyUsGDrcq8EeS5YX2uI808hKjfebRICORugyh0E=)
                          10: dR0zpIqq8tLg1OamhsPNo_J5QBg.roa (hash: oBSo9M/Eu7aDbt6HN3S3ca9KyP+2wEB/H+NG+mj4DOQ=)
                          11: fNAR_JPkkC491YU-kT_ByTYIEm4.roa (hash: sYR/Ti3r2dDvrcuUCgrf8MhHNZLnx4vKqJjpp3V/CwA=)
                          12: jbhpweVxvqHx9iUgFePmmEKTB0o.roa (hash: qnKLr3s/P3uzBC1O7P51ocSp/Gdd2Nk4CeL6u6vfdYg=)
                          13: kvNYuyJjxpLiL78r_HWCaKIVSeM.roa (hash: an7+no5fubSIGYKy4WMOxhF8ErceM1kP8W7CMY2bk44=)
                          14: n-n0F8-smlKDKWswC1m2gxnHDDY.roa (hash: q6YsSdX5hsZsNG4NcA8tNzI34ml2KRfXVRRHtJp3KRQ=)
                          15: nUDA_fVQAq7u5DtvMgTU2n6GNZo.roa (hash: 8r/gTOIQVfb9/uVsDnl2O2ydLcKyMbec0yYUjkpHhaI=)
                          16: rugEHoaHVajoVfoc97cSAKNDn0w.roa (hash: 7ghfXJusobnUoN3Z3OZ6ek2nYh+X9Gs5M1yKtLkxaGo=)
                          17: u6D6IhT01RFHYtXcDxjfNMZBM8M.roa (hash: m6UqHoD9Mb+jAm+l2P3nH+xVGpm69d2EaiSe7G0I0NQ=)
                          18: uK6_ifWLoIZv8VuYRndlwMy_4bU.roa (hash: bzZHRyxvv4u3wzZyj+e9ebfI0EsjjmajKyBNoIA9GYk=)
                          19: vtDS3h0cv8sKwu60fmQfZvHkuHI.roa (hash: 1jLMCQj/DnUGyTFUb2JE9h+GQ/o44K4S5NUsN/49N6o=)
                          20: yS-0BxtvAt6IeR55AkgaLECC9TA.roa (hash: R3FujKz/FTazeX7vxtoHKe8ijVfIAf1K0lV4khxwtAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:e8:d7:0a:35:ac:66:99:73:4e:0b:97:ef:0a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Mar 26 12:00:57 2026 GMT
            Not After : Mar 27 12:00:57 2026 GMT
        Subject: CN=0b3b5ded48e71ea1df84c14d9ba5e5a60ec96853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:88:5b:58:44:bb:a9:38:e2:72:31:b6:a9:
                    8e:33:ff:3b:19:96:e6:8f:fa:0b:4e:21:e2:c7:36:
                    98:1b:fc:d1:c3:6a:88:56:b7:15:cd:8c:e0:0f:f4:
                    2a:f1:34:bf:55:65:48:b5:a2:b0:ed:5c:a6:2e:f9:
                    a3:65:f8:c6:33:d0:02:c7:21:28:b4:c9:a7:88:94:
                    34:93:f8:ee:31:00:97:4a:97:ab:2b:6c:f6:08:66:
                    43:a7:f5:33:cd:8b:fa:b5:b3:03:c2:42:d2:b2:1f:
                    de:9f:f7:2e:47:a1:b1:71:52:79:89:58:e2:35:a9:
                    65:f5:cf:17:e3:f3:a6:a0:49:f9:b4:8a:32:4c:10:
                    68:29:a6:d5:83:13:59:4e:2d:22:64:53:56:ab:9e:
                    0a:a7:24:a4:b1:e0:fb:3c:d1:d1:c4:ef:e3:84:4e:
                    af:db:c3:fa:84:a3:4b:48:1e:1a:5e:36:58:c2:d7:
                    b7:98:c7:9f:2d:d8:16:cb:c7:f1:e6:e2:41:8d:ff:
                    28:50:1e:03:c9:e9:ec:49:1f:0b:9b:ef:7a:f4:1d:
                    f6:f2:59:51:14:f8:01:77:51:e1:9d:5d:ff:37:ef:
                    a4:39:20:07:0b:78:59:ab:c8:b8:26:56:12:20:d3:
                    a8:05:4d:60:a8:10:b9:1d:de:7f:af:a9:86:c4:89:
                    0b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3B:5D:ED:48:E7:1E:A1:DF:84:C1:4D:9B:A5:E5:A6:0E:C9:68:53
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0c:2c:af:ce:5f:fc:9d:03:f7:12:14:df:c0:f9:59:88:95:
         ec:6f:48:50:07:2d:ad:7d:aa:67:dc:53:b9:95:9b:db:44:cf:
         b0:c5:2f:4a:d0:e1:7f:f1:79:12:6b:ed:77:78:af:52:d6:59:
         61:f4:c7:4e:0c:5f:3b:a8:33:ce:61:b9:32:f7:d5:3d:0c:dd:
         b1:d4:62:8d:7d:80:a8:06:ef:50:22:19:23:c8:14:43:f6:d3:
         6f:b3:18:5c:48:fd:17:61:96:0c:69:76:15:7a:8a:ff:3f:c2:
         a2:6d:d7:85:f1:09:d9:a7:31:d3:ed:d6:e1:45:74:0d:19:5f:
         6e:52:98:e8:a2:a9:05:80:1b:4e:ee:ce:90:df:2f:e1:31:87:
         22:48:19:a2:4d:50:48:67:86:16:2c:74:f2:e0:b2:aa:95:f6:
         a4:20:2b:47:ac:ba:64:c5:4b:30:47:4f:bd:ad:c0:4c:02:2c:
         06:ee:e7:9b:1b:e5:26:35:ad:33:a2:b9:39:20:d8:b2:7e:77:
         ba:86:17:2c:12:7c:d2:cd:b5:4f:3a:78:ec:05:52:84:7a:54:
         c5:8f:8b:62:24:e8:19:a0:bd:c3:3b:e4:34:79:df:29:76:8a:
         f2:41:e7:30:51:b3:6d:a4:fb:c0:01:f9:80:96:32:0d:0c:4f:
         70:8b:47:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBOjXCjWsZplzTguX7wrtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjYwMzI2MTIwMDU3WhcNMjYwMzI3MTIwMDU3WjAzMTEwLwYDVQQD
EygwYjNiNWRlZDQ4ZTcxZWExZGY4NGMxNGQ5YmE1ZTVhNjBlYzk2ODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww+IW1hEu6k44nIxtqmOM/87GZbm
j/oLTiHixzaYG/zRw2qIVrcVzYzgD/Qq8TS/VWVItaKw7VymLvmjZfjGM9ACxyEo
tMmniJQ0k/juMQCXSperK2z2CGZDp/UzzYv6tbMDwkLSsh/en/cuR6GxcVJ5iVji
Nall9c8X4/OmoEn5tIoyTBBoKabVgxNZTi0iZFNWq54KpySkseD7PNHRxO/jhE6v
28P6hKNLSB4aXjZYwte3mMefLdgWy8fx5uJBjf8oUB4DyensSR8Lm+969B328llR
FPgBd1HhnV3/N++kOSAHC3hZq8i4JlYSINOoBU1gqBC5Hd5/r6mGxIkLWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAs7Xe1I5x6h34TBTZul5aYOyWhTMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwwsr85f
/J0D9xIU38D5WYiV7G9IUActrX2qZ9xTuZWb20TPsMUvStDhf/F5Emvtd3ivUtZZ
YfTHTgxfO6gzzmG5MvfVPQzdsdRijX2AqAbvUCIZI8gUQ/bTb7MYXEj9F2GWDGl2
FXqK/z/Com3XhfEJ2acx0+3W4UV0DRlfblKY6KKpBYAbTu7OkN8v4TGHIkgZok1Q
SGeGFix08uCyqpX2pCArR6y6ZMVLMEdPva3ATAIsBu7nmxvlJjWtM6K5OSDYsn53
uoYXLBJ80s21Tzp47AVShHpUxY+LYiToGaC9wzvkNHnfKXaK8kHnMFGzbaT7wAH5
gJYyDQxPcItH5A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:36:53 2026 by rpki-client