Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
File:                     skTScYj-UmvXJjZzgZXR639gYzU.mft (raw, json)
Hash identifier:          KeU+XLfmfwnHW62U3NL/2U+jCDNhbpLPJ1V/WY6Gb74=
Subject key identifier:   D7:7B:D4:C8:BA:48:2D:B2:F5:1D:5F:47:05:06:7E:09:EF:B4:0B:B1
Authority key identifier: B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
Certificate issuer:       /CN=b244d27188fe526bd72636738195d1eb7f606335
Certificate serial:       019D9C63980DAB6564C70EDA9AE10ED7AF4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 17:01:05 +0000
Manifest this update:     Fri 17 Apr 2026 17:01:05 +0000
Manifest next update:     Sat 18 Apr 2026 17:01:05 +0000
Files and hashes:         1: 1WFKhbvTJWB93p6BRF4MIhxyrE0.roa (hash: vbxgmYXayRhnSkSppEwHN/q5tKy6yDwafh4xyBQ3/1M=)
                          2: skTScYj-UmvXJjZzgZXR639gYzU.crl (hash: YqzMpbFGkl9shD0sWd0nd8aQOKNpP7ZFvy6mtgjY4zY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:98:0d:ab:65:64:c7:0e:da:9a:e1:0e:d7:af:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b244d27188fe526bd72636738195d1eb7f606335
        Validity
            Not Before: Apr 17 17:01:05 2026 GMT
            Not After : Apr 18 17:01:05 2026 GMT
        Subject: CN=d77bd4c8ba482db2f51d5f4705067e09efb40bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f6:42:ff:4d:ab:49:a6:1e:c8:ab:57:91:73:
                    db:c3:57:90:ee:0f:8b:c3:88:2d:c5:92:ac:ee:ea:
                    af:a2:d3:2c:a8:e8:b0:02:ed:17:2c:bb:2a:20:45:
                    05:95:5b:08:cd:53:ef:62:40:5f:fd:a8:a6:f4:74:
                    26:7c:1a:90:b9:43:42:d1:cd:5f:45:78:25:96:bf:
                    a0:6d:5b:47:f1:b2:3b:39:f5:4c:89:3e:13:2e:9c:
                    9a:70:4b:ef:6d:b8:ed:8c:7f:4c:27:85:a1:84:71:
                    0a:61:e3:5c:aa:4e:0d:e0:5f:0f:04:9f:45:ac:cb:
                    c0:ce:ca:14:fa:33:61:5a:32:8e:7c:0d:e7:9d:3b:
                    a7:86:00:cb:6a:e3:00:53:bc:79:49:68:e3:3f:58:
                    f4:e1:b8:3f:ac:da:e9:49:e9:29:59:d0:7b:c5:31:
                    34:ed:ca:b6:70:da:08:a8:d4:73:11:fa:af:62:72:
                    38:e2:fa:d9:1a:67:09:00:c1:56:af:25:37:bf:d9:
                    e9:82:34:b7:07:d5:5e:2f:0c:90:78:26:8c:19:36:
                    12:d5:34:74:79:08:5d:20:87:1a:fe:ff:17:1d:83:
                    20:f5:37:18:bd:42:fb:da:1f:85:2e:9f:85:6c:3f:
                    30:68:ed:e5:3c:84:aa:6b:db:8b:10:37:32:89:52:
                    2c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7B:D4:C8:BA:48:2D:B2:F5:1D:5F:47:05:06:7E:09:EF:B4:0B:B1
            X509v3 Authority Key Identifier:
                keyid:B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:44:9a:1c:46:f3:7c:bf:c6:3e:04:f1:13:46:5a:7c:ab:d6:
         63:4b:f8:07:22:a4:c4:55:cb:ae:15:c1:e4:3c:a0:cd:22:05:
         9e:34:a5:49:ff:51:57:1b:45:09:20:87:74:74:96:df:85:f3:
         3e:ea:c2:41:c2:49:34:b0:8e:80:72:7d:01:0d:46:b0:4d:20:
         40:df:96:28:58:ae:d3:56:3e:91:72:fc:77:22:6b:57:5a:fd:
         e4:2a:54:05:9e:dd:c8:9a:10:41:79:6e:e4:d7:3b:3f:89:ea:
         e1:05:bf:3d:97:5b:4d:aa:1e:11:bf:a0:2e:73:5d:e7:d2:e2:
         94:cc:69:03:49:12:e0:7f:61:3e:c7:a5:b0:51:f5:47:58:4a:
         62:f4:c0:c2:66:1f:b6:cc:58:ad:c8:b6:b9:8f:1b:38:94:89:
         af:86:69:44:a4:7b:17:42:4b:23:a9:18:d2:f8:5a:0c:99:59:
         65:fd:9b:55:4b:78:df:89:84:6e:dd:b8:15:3a:fc:0b:65:ff:
         1a:46:58:df:e2:7a:e0:bb:af:a1:2f:b8:df:4c:66:05:a3:d4:
         f5:ba:7f:07:fb:c4:0a:ce:19:3a:5b:60:c7:93:e1:08:d9:a8:
         62:3b:76:9e:35:3d:36:ad:5d:c3:6a:c1:16:40:19:ad:11:65:
         d9:39:6e:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cY5gNq2Vkxw7amuEO169MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNDRkMjcxODhmZTUyNmJkNzI2MzY3MzgxOTVkMWViN2Y2
MDYzMzUwHhcNMjYwNDE3MTcwMTA1WhcNMjYwNDE4MTcwMTA1WjAzMTEwLwYDVQQD
EyhkNzdiZDRjOGJhNDgyZGIyZjUxZDVmNDcwNTA2N2UwOWVmYjQwYmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfZC/02rSaYeyKtXkXPbw1eQ7g+L
w4gtxZKs7uqvotMsqOiwAu0XLLsqIEUFlVsIzVPvYkBf/aim9HQmfBqQuUNC0c1f
RXgllr+gbVtH8bI7OfVMiT4TLpyacEvvbbjtjH9MJ4WhhHEKYeNcqk4N4F8PBJ9F
rMvAzsoU+jNhWjKOfA3nnTunhgDLauMAU7x5SWjjP1j04bg/rNrpSekpWdB7xTE0
7cq2cNoIqNRzEfqvYnI44vrZGmcJAMFWryU3v9npgjS3B9VeLwyQeCaMGTYS1TR0
eQhdIIca/v8XHYMg9TcYvUL72h+FLp+FbD8waO3lPISqa9uLEDcyiVIsTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNd71Mi6SC2y9R1fRwUGfgnvtAuxMB8GA1UdIwQY
MBaAFLJE0nGI/lJr1yY2c4GV0et/YGM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yYTcyN2ItYTc0NS00MzM5LTkyNWEt
NGQwMGQ2MDMyYWZlLzEvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yYTcyN2ItYTc0NS00MzM5LTkyNWEtNGQwMGQ2MDMyYWZl
LzEvc2tUU2NZai1VbXZYSmpaemdaWFI2MzlnWXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0SaHEbz
fL/GPgTxE0ZafKvWY0v4ByKkxFXLrhXB5DygzSIFnjSlSf9RVxtFCSCHdHSW34Xz
PurCQcJJNLCOgHJ9AQ1GsE0gQN+WKFiu01Y+kXL8dyJrV1r95CpUBZ7dyJoQQXlu
5Nc7P4nq4QW/PZdbTaoeEb+gLnNd59LilMxpA0kS4H9hPselsFH1R1hKYvTAwmYf
tsxYrci2uY8bOJSJr4ZpRKR7F0JLI6kY0vhaDJlZZf2bVUt434mEbt24FTr8C2X/
GkZY3+J64LuvoS+430xmBaPU9bp/B/vECs4ZOltgx5PhCNmoYjt2njU9Nq1dw2rB
FkAZrRFl2TluDA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:55 2026 by rpki-client