Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.mft
File:                     SkoOHJOfCurGcQfqB_2uUWvb9wU.mft (raw, json)
Hash identifier:          zTR0deRfB9SG/z4xnMmvKOYft5eTG4twxJGPS0Vi6JM=
Subject key identifier:   08:C1:17:E1:96:89:3A:77:55:86:E3:56:D3:61:5B:6F:E8:86:C0:F9
Authority key identifier: 4A:4A:0E:1C:93:9F:0A:EA:C6:71:07:EA:07:FD:AE:51:6B:DB:F7:05
Certificate issuer:       /CN=4a4a0e1c939f0aeac67107ea07fdae516bdbf705
Certificate serial:       01A0DD6053D0190959848ECC98D54F8C94E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkoOHJOfCurGcQfqB_2uUWvb9wU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.mft
Manifest number:          EA
Signing time:             Sat 26 Sep 2026 11:01:12 +0000
Manifest this update:     Sat 26 Sep 2026 11:01:12 +0000
Manifest next update:     Sun 27 Sep 2026 11:01:12 +0000
Files and hashes:         1: SkoOHJOfCurGcQfqB_2uUWvb9wU.crl (hash: a5NOsb/fNP1Q8nGd9NNlf4GHnRbvF+kEUVYjxRlUUYg=)
                          2: abPQvZftn6KJAeQY-dEytO7cxZY.roa (hash: R8vNG4brLgkvsyByQsU/FMzt+IrfXl75oZ8JXs9klhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkoOHJOfCurGcQfqB_2uUWvb9wU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:60:53:d0:19:09:59:84:8e:cc:98:d5:4f:8c:94:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4a0e1c939f0aeac67107ea07fdae516bdbf705
        Validity
            Not Before: Sep 26 11:01:12 2026 GMT
            Not After : Sep 27 11:01:12 2026 GMT
        Subject: CN=08c117e196893a775586e356d3615b6fe886c0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:17:e0:a0:12:85:c6:53:78:b8:cd:18:f5:3d:
                    0f:94:f3:30:d9:22:1e:dc:51:b5:29:43:74:01:3a:
                    17:fa:af:56:b3:51:9e:00:82:7a:2c:3a:1b:5a:85:
                    da:a0:27:63:06:23:32:71:db:b0:c9:82:06:2f:90:
                    67:e1:ec:a1:73:13:13:bd:a9:f8:8b:14:aa:c4:27:
                    0a:ec:14:b0:2c:fe:e5:9e:59:d9:96:ea:c9:7d:a5:
                    8f:6d:e9:bf:c1:16:6e:e9:86:e3:aa:34:74:9a:00:
                    b0:19:09:04:1b:90:bd:4b:77:28:06:46:2d:38:03:
                    2f:52:cc:31:28:98:b5:18:b7:7f:d8:57:dd:34:c7:
                    ec:c2:cd:88:6a:fb:7d:61:d2:05:c8:d2:6f:0a:4c:
                    f5:65:50:4d:15:df:fc:7c:5b:91:c6:3b:5d:ec:8f:
                    a8:a2:73:be:2a:9c:82:96:a8:a6:e8:9f:99:35:b5:
                    0b:b0:2d:1a:5a:34:f3:cb:95:30:f6:26:4b:8c:0d:
                    f0:dd:91:95:12:63:ed:8a:7b:9f:87:1b:2c:c3:2a:
                    2d:38:e9:e1:81:b5:df:ed:77:c5:f5:c2:0f:a1:80:
                    d9:e8:0f:77:a7:98:bf:05:7b:e7:55:91:00:5e:2c:
                    2f:42:5c:af:62:40:e6:24:53:e1:59:01:ff:a4:bf:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C1:17:E1:96:89:3A:77:55:86:E3:56:D3:61:5B:6F:E8:86:C0:F9
            X509v3 Authority Key Identifier:
                keyid:4A:4A:0E:1C:93:9F:0A:EA:C6:71:07:EA:07:FD:AE:51:6B:DB:F7:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkoOHJOfCurGcQfqB_2uUWvb9wU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:6e:d4:de:db:5b:3b:fd:b5:da:b4:57:21:c4:79:c7:47:3a:
         7e:65:78:b5:c8:c1:74:e3:e5:72:cb:d2:f9:f7:f9:50:e9:39:
         a4:52:db:ba:c9:a5:b2:e5:4d:a5:09:9c:d1:a4:07:08:36:ea:
         ae:2d:fe:ff:99:04:35:34:b9:66:7c:9b:ae:af:b8:23:97:57:
         62:8e:d2:0c:6f:56:d2:ba:70:62:1b:27:8e:7a:db:eb:3c:89:
         1c:37:4c:0c:4e:c7:ab:9f:85:ba:50:f4:3b:a9:38:92:04:a1:
         50:08:06:2f:8b:8d:a5:73:46:c2:cd:b4:9f:ec:3d:a6:3a:e6:
         f2:94:69:aa:30:01:88:44:37:75:18:31:f1:2d:f1:1a:89:54:
         85:31:7d:d4:ea:49:99:bd:22:34:54:88:5f:51:5a:a5:e1:75:
         3b:35:2c:86:a3:67:18:74:ff:7f:98:ea:fa:d7:11:04:09:da:
         d6:77:b7:95:db:23:3b:41:cd:4a:59:58:7a:ef:da:bc:8d:01:
         ff:91:ac:66:c8:cf:73:66:31:f2:0e:97:b4:c9:5b:c7:81:60:
         b9:71:27:9a:9f:cf:97:0a:10:0d:e1:c5:0d:aa:2c:52:77:d6:
         0c:5c:2a:c2:bd:fb:c2:c5:e6:7d:2e:e4:56:20:b7:4c:63:16:
         4f:07:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:46:30 2026 by rpki-client