Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File:                     SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier:          ccnHjmdRa0EIzc4/EuCBV2eg2fILubhu9b+iME/OzN0=
Subject key identifier:   17:00:C9:5F:50:40:CB:46:03:73:A6:8C:CD:7D:72:CE:FA:49:0E:56
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer:       /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial:       019F93FF8A75E2F131AA75BDAB75F96C355A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number:          12C5
Signing time:             Fri 24 Jul 2026 12:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:25 +0000
Files and hashes:         1: 3EeJh95vWlbqkBMJsY8WJvQJZSQ.roa (hash: HKt/H+HcjtF1ud6gYULu77Dwf2Spakt+G/k1RzaE2tU=)
                          2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: Bx2WuylMkyfNFa/p1MgGUdTsK9P88QWKwujoYEFrD8g=)
                          3: wvUTboW8ZBUP6kKOMK2PMJNwHKA.roa (hash: qmo6aS/eJTUU20epsF5LshfZ02w0I+n/dRPdKj8OTLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:8a:75:e2:f1:31:aa:75:bd:ab:75:f9:6c:35:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
        Validity
            Not Before: Jul 24 12:00:25 2026 GMT
            Not After : Jul 25 12:00:25 2026 GMT
        Subject: CN=1700c95f5040cb460373a68ccd7d72cefa490e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:61:0f:c2:2d:5c:9d:8d:dc:f9:49:3e:86:
                    56:dd:32:80:84:a8:31:28:ee:29:da:6f:b5:b1:b0:
                    de:c7:20:9d:bd:51:87:4f:b3:af:41:f8:f3:39:e4:
                    5f:a0:b1:12:39:b9:03:6b:8e:ee:59:c4:fe:72:03:
                    f4:13:d4:fb:dd:d9:29:14:34:8a:f0:f6:54:04:25:
                    4c:0d:c9:e5:1a:f9:50:f0:a9:3f:52:5b:b0:53:ed:
                    cf:0f:1b:dc:df:25:ac:31:7b:20:f5:4a:dc:42:a8:
                    85:a1:c8:a6:02:e4:1e:dc:ad:d4:6f:d5:f2:6b:49:
                    b2:31:a1:db:71:9c:9e:c9:e7:43:d8:a3:1e:70:35:
                    ac:73:0c:75:ed:6a:67:3c:29:98:4b:14:c9:26:5f:
                    7f:17:01:2e:5f:3f:e7:ce:78:98:d7:29:29:ef:bc:
                    4c:a4:a0:f4:2f:c6:67:04:e9:e4:24:31:02:3e:b0:
                    e7:26:95:d7:b9:78:d2:60:cd:c7:36:6e:d3:85:dd:
                    72:82:fc:30:45:34:31:1e:78:1f:91:31:e3:ca:9e:
                    4c:0e:7d:bd:7a:df:f1:37:a5:b0:d4:40:16:4a:e9:
                    99:ff:31:29:bd:9f:2d:5f:86:08:c8:08:9e:a7:84:
                    2b:5c:2a:80:a8:51:1e:84:80:1a:e4:6a:64:2b:1f:
                    ed:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:00:C9:5F:50:40:CB:46:03:73:A6:8C:CD:7D:72:CE:FA:49:0E:56
            X509v3 Authority Key Identifier:
                keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:1c:e3:9c:6a:80:e9:24:80:01:be:32:3e:58:7e:23:ad:af:
         ea:51:a7:b1:d4:9d:96:7b:9d:ee:b2:d1:61:0e:37:14:09:d0:
         5f:dc:b9:4b:f4:a4:b2:90:13:2b:33:3d:9c:8f:8a:73:6e:78:
         54:e0:25:40:93:29:cc:27:55:b3:2d:ee:8c:dd:9c:0f:82:88:
         79:93:50:76:6f:49:9e:94:1e:78:22:a7:4b:ea:7d:31:cd:e4:
         06:63:cc:fe:dc:c5:d3:c2:f8:2c:7c:5d:71:22:84:b4:6d:07:
         44:10:8b:68:f1:90:63:cb:c3:c7:55:db:d5:8e:9e:84:ce:0f:
         47:ea:0c:fd:5b:29:41:60:ea:bb:33:54:88:14:a5:3b:42:9f:
         c6:85:82:9c:00:6f:8a:84:6c:22:cc:90:c2:0b:0f:74:44:95:
         2d:9b:b9:e4:f7:6a:1a:f2:d4:f8:9f:de:b8:2e:64:44:23:27:
         f8:3e:4c:07:f6:ab:7a:c0:ed:51:61:75:87:f2:16:fb:ce:27:
         4a:85:a0:e9:35:a6:89:5c:73:c6:16:b2:8b:eb:da:be:58:1b:
         b8:84:e3:fd:7e:07:75:46:3e:fe:e7:bd:00:2b:85:69:53:58:
         0e:9f:3e:4f:b1:75:b5:34:a5:8a:b5:86:70:b8:b9:d3:63:18:
         56:d0:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:59 2026 by rpki-client