Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File:                     SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier:          swqb/94d0ZqxUYiKG8lVxX4F0WFFHu0vd0qBwW0t6KU=
Subject key identifier:   F9:56:AB:5B:C8:75:C4:11:84:3E:69:F5:47:CD:ED:C1:BB:49:59:31
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer:       /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial:       019D27E05134D94147312C97F666BE71988C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number:          1180
Signing time:             Thu 26 Mar 2026 02:01:45 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:45 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:45 +0000
Files and hashes:         1: NIVw741XEPPSN6oP0Msosmkxzog.roa (hash: 81sIUsuDOEVQ3nze8u1y0++GrZqpK3rQuE99u/xjAtI=)
                          2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: M5wwci0+lXW2r/vsm69rgE0nT8XtO7TAX0eqoArR9v0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:51:34:d9:41:47:31:2c:97:f6:66:be:71:98:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
        Validity
            Not Before: Mar 26 02:01:45 2026 GMT
            Not After : Mar 27 02:01:45 2026 GMT
        Subject: CN=f956ab5bc875c411843e69f547cdedc1bb495931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e5:71:7a:3f:f9:31:01:a5:5b:e3:e5:cc:0c:
                    7f:6c:4c:f0:a5:79:e9:c1:79:0f:d9:f9:c1:4e:f8:
                    34:86:33:3f:95:83:05:dd:13:4f:66:21:1f:8b:36:
                    25:78:0f:c6:ea:0d:a1:15:12:d2:15:1f:b0:67:d2:
                    55:f9:f5:60:39:12:57:d6:8d:2b:df:6f:5d:3c:d7:
                    eb:18:65:ce:cc:46:b1:e4:e3:e8:40:9a:c4:85:62:
                    19:87:ac:33:80:d4:0d:5f:46:71:3f:1e:98:d8:ae:
                    32:39:00:d8:99:fe:83:33:17:f4:5f:02:22:d7:b8:
                    eb:d8:c5:df:66:7b:05:8c:46:0b:ce:82:7b:83:c6:
                    8c:c7:01:be:7e:8d:36:88:33:f7:71:90:8c:4d:62:
                    e4:3b:22:10:bf:4c:33:87:3b:da:9a:c8:a8:71:30:
                    85:8e:84:06:8c:e0:b8:83:59:90:d3:80:c8:af:9b:
                    45:8e:8e:bc:78:a1:f3:8e:82:66:69:4a:ad:33:0a:
                    fc:db:e5:41:a6:af:9d:9b:80:a5:9d:0e:ad:00:d7:
                    e4:25:2d:83:fb:ff:96:77:2e:9a:4f:72:b2:94:c3:
                    b9:22:a1:bd:8b:d8:d6:68:2b:86:81:8f:6d:32:b2:
                    22:2c:04:11:5f:b7:78:ec:78:65:b4:fe:61:94:f2:
                    aa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:56:AB:5B:C8:75:C4:11:84:3E:69:F5:47:CD:ED:C1:BB:49:59:31
            X509v3 Authority Key Identifier:
                keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c6:50:04:21:de:df:54:45:46:ef:1e:ee:21:d3:d8:a4:81:
         43:c1:29:48:78:ea:29:44:bb:aa:f9:38:2f:d4:59:9f:db:dd:
         d9:40:d0:b5:0a:97:38:0f:8d:64:0a:af:93:37:8b:b1:0d:07:
         94:9c:87:97:5f:bd:51:29:21:23:25:0b:17:9a:0a:1f:aa:ce:
         49:ec:f0:98:d7:c8:4e:12:24:1f:77:d1:14:62:02:4f:02:13:
         8a:95:b4:e9:25:69:51:6f:35:14:39:32:88:82:a9:e3:65:df:
         d3:a9:dd:b4:4d:50:8a:89:92:0a:44:3c:d7:79:32:2c:dd:92:
         ac:bb:72:52:80:1e:95:55:d9:7e:d7:3b:12:7c:00:1f:e6:22:
         58:34:d4:bd:79:8d:bc:04:11:ae:9d:e6:eb:d0:e7:be:55:b9:
         ae:da:52:b6:44:5d:fd:e6:5f:52:f7:70:33:8e:34:1d:35:55:
         45:c6:b6:01:e7:fe:49:cf:b2:2b:68:a9:de:c5:3e:4c:a2:60:
         4f:72:41:33:28:92:1e:87:0e:19:c2:3c:eb:cb:42:b6:a8:20:
         2b:d0:87:e4:e9:50:88:60:3e:01:20:8b:f7:c8:a8:ce:f6:80:
         a0:a2:90:84:7e:b8:10:78:22:f5:07:97:5e:2d:64:aa:a8:28:
         fc:04:90:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:16 2026 by rpki-client