Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft
File:                     SkGx4j_iN1JHQnvXHg28MIGM0-0.mft (raw, json)
Hash identifier:          oFrWUo8OVKarcY1wZC5JkohDN3tB1vXLMw+2x9j7ZnU=
Subject key identifier:   2E:AE:52:11:37:83:96:BE:52:03:D0:BE:9F:F3:0F:4A:E6:CA:14:09
Authority key identifier: 4A:41:B1:E2:3F:E2:37:52:47:42:7B:D7:1E:0D:BC:30:81:8C:D3:ED
Certificate issuer:       /CN=4a41b1e23fe2375247427bd71e0dbc30818cd3ed
Certificate serial:       01A128E84714FFABA926B8587DD882A872C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkGx4j_iN1JHQnvXHg28MIGM0-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft
Manifest number:          0113
Signing time:             Sun 11 Oct 2026 03:01:13 +0000
Manifest this update:     Sun 11 Oct 2026 03:01:13 +0000
Manifest next update:     Mon 12 Oct 2026 03:01:13 +0000
Files and hashes:         1: IptzpnH_OFvUHflcdcx5DR3SgII.roa (hash: tVTdfvKBqky+sXQObBePDrpGmyKb51agI6Imvb9ozhI=)
                          2: SkGx4j_iN1JHQnvXHg28MIGM0-0.crl (hash: 1dpXZQTyQHv7ke6MnnprfcdyY4iSeH+mS4VjMep8IFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkGx4j_iN1JHQnvXHg28MIGM0-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 03:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:e8:47:14:ff:ab:a9:26:b8:58:7d:d8:82:a8:72:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a41b1e23fe2375247427bd71e0dbc30818cd3ed
        Validity
            Not Before: Oct 11 03:01:13 2026 GMT
            Not After : Oct 12 03:01:13 2026 GMT
        Subject: CN=2eae5211378396be5203d0be9ff30f4ae6ca1409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:11:88:a4:59:1f:8c:cc:70:49:3b:c9:bf:71:
                    d4:d0:fd:9c:de:20:fc:24:53:4e:ea:de:de:38:cb:
                    35:dd:c8:fd:9c:2f:95:19:25:05:65:66:a2:a9:20:
                    26:64:93:b5:9c:09:15:48:28:7d:87:09:8c:db:42:
                    9a:c3:a8:ac:97:ba:b0:a4:a3:03:2d:98:15:20:65:
                    e8:6f:1d:a8:45:d4:6c:bb:6c:bc:19:67:40:5b:37:
                    4d:65:b2:5d:8c:aa:93:bd:54:d4:ac:e1:03:db:3c:
                    79:3a:f2:21:45:40:dc:b6:50:9a:b5:87:8a:11:1a:
                    28:62:c4:ba:fe:03:21:8c:c3:ce:08:68:12:78:84:
                    76:72:a1:77:5c:23:8c:66:80:f0:ac:51:d8:7c:69:
                    8a:a3:92:f5:58:f6:71:22:a5:6b:94:a5:e6:32:5a:
                    2b:a4:0f:2d:66:12:f7:58:5b:69:46:d7:3c:13:9d:
                    c1:68:db:ec:ef:9b:18:42:b4:59:d7:58:8a:f9:8e:
                    41:26:a3:c0:a6:86:9b:5f:55:f8:a7:fb:d7:f7:9c:
                    4e:78:a1:ab:f0:34:30:f4:76:00:14:0f:9e:c0:fc:
                    e5:d3:9f:9a:d2:6f:ec:c0:d1:66:4c:aa:b0:0f:04:
                    b8:69:7f:bd:2e:f7:3f:1c:64:8b:28:fb:ba:19:24:
                    7c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AE:52:11:37:83:96:BE:52:03:D0:BE:9F:F3:0F:4A:E6:CA:14:09
            X509v3 Authority Key Identifier:
                keyid:4A:41:B1:E2:3F:E2:37:52:47:42:7B:D7:1E:0D:BC:30:81:8C:D3:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkGx4j_iN1JHQnvXHg28MIGM0-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/SkGx4j_iN1JHQnvXHg28MIGM0-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ff:0b:13:c1:64:7a:8c:ae:01:7d:8e:25:85:a7:c4:65:0a:
         13:9a:3d:12:91:9e:02:1d:67:b2:d7:37:6e:8b:85:55:7f:22:
         18:8a:d6:7f:65:89:f4:29:85:2d:bf:63:d7:e3:f5:74:5c:53:
         bd:34:b0:af:5c:00:7a:90:7b:8c:0f:de:03:9f:7c:bd:29:f7:
         11:c5:d5:03:1f:1b:00:46:15:46:09:65:d9:8a:af:d6:c6:5b:
         5d:df:38:46:77:1e:c7:8c:01:94:90:ec:97:1a:53:fa:6d:ae:
         68:53:33:14:b4:d3:34:ec:22:5d:9f:16:f3:33:3e:0e:b5:05:
         f6:ed:fd:c1:e4:de:82:62:11:4e:4e:2b:3a:29:ae:b9:13:70:
         62:1d:1e:21:9b:e5:bc:76:af:ee:ca:a4:c6:95:a0:04:36:57:
         2e:6a:c6:92:b8:35:d6:7b:ec:d9:3f:fa:4c:e7:83:1a:dd:94:
         61:d3:fd:92:6d:f9:6c:3d:21:4e:c5:80:8e:61:c5:53:be:b6:
         f3:22:3d:1f:c6:fa:0b:a7:5b:34:02:e7:fa:93:5e:c2:b4:19:
         c8:e7:ab:2c:8c:90:65:97:70:9a:06:9e:bc:44:48:ec:7c:35:
         b8:b2:c6:ce:ed:f7:9c:39:3c:ea:e3:42:0e:dc:21:26:8d:72:
         6b:d7:47:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:28:09 2026 by rpki-client