Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
File:                     Skati1EM9VlIXjYRVVuLQ571M7s.mft (raw, json)
Hash identifier:          Lw6qQKpIB1Mpwn+Cxj7Xz9nZ1D9ZWv3ZFYE25s1NXF8=
Subject key identifier:   C5:CE:09:CD:86:07:C2:BB:CB:2D:43:DB:B3:2A:E1:D3:B1:44:8E:DD
Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
Certificate issuer:       /CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Certificate serial:       019D9818A33A6B6E14E93316CB153CBDEB9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
Manifest number:          08A5
Signing time:             Thu 16 Apr 2026 21:00:44 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:44 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:44 +0000
Files and hashes:         1: EvI8mErWEMbmThEo1JjM2x_4Gnw.roa (hash: iNz3IkF1f9samVwnI+HYLRpCD607SHFYQXXHMEOKQ0I=)
                          2: Skati1EM9VlIXjYRVVuLQ571M7s.crl (hash: 5+2GOykC3gAMMwRF1qrmWDOISBE3XGWxodElwxGrlck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:a3:3a:6b:6e:14:e9:33:16:cb:15:3c:bd:eb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb
        Validity
            Not Before: Apr 16 21:00:44 2026 GMT
            Not After : Apr 17 21:00:44 2026 GMT
        Subject: CN=c5ce09cd8607c2bbcb2d43dbb32ae1d3b1448edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:58:7a:cc:de:ed:03:28:72:7d:3c:eb:d2:
                    fd:ff:41:9d:af:23:c2:ab:e2:09:93:57:3d:89:35:
                    ef:89:35:c1:ba:7a:62:e4:1e:22:65:90:d7:f9:c6:
                    fc:b8:c2:7c:c4:9f:62:6d:6e:11:9f:ec:ed:08:22:
                    7c:fe:13:32:3b:2a:ac:61:4a:6d:fd:7d:a7:0b:14:
                    1e:8f:71:cb:9a:83:b6:41:c6:cd:4e:02:35:bd:96:
                    bd:a7:26:6a:3f:c8:d9:91:a2:e4:e0:9d:71:9e:ca:
                    c6:33:1f:95:8e:2d:2e:2e:22:54:c7:c4:47:36:9b:
                    27:3d:43:99:18:f2:fa:56:43:19:48:bf:0f:65:10:
                    dc:68:64:9a:b7:72:be:6d:e3:15:04:ac:05:57:b6:
                    cd:93:ce:c6:e0:f1:b5:30:b1:39:ee:5c:18:4c:04:
                    f3:29:09:e8:bf:eb:83:d9:65:cd:82:b8:77:f8:a1:
                    f0:32:46:bc:2f:bc:11:5a:3b:f9:7b:68:0d:10:6c:
                    d5:16:5a:c6:62:40:22:a9:41:c2:04:4e:ec:13:42:
                    0c:cb:8a:d9:73:df:8d:9e:75:cc:81:b2:a9:ff:56:
                    7f:18:21:16:ae:7a:64:62:95:84:d7:4a:fb:74:64:
                    e3:8b:8a:7c:6a:8a:35:be:4f:35:e5:75:4c:1b:e5:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CE:09:CD:86:07:C2:BB:CB:2D:43:DB:B3:2A:E1:D3:B1:44:8E:DD
            X509v3 Authority Key Identifier:
                keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:26:23:eb:58:32:19:a8:5b:f2:9c:99:5c:cc:ba:18:00:b0:
         b7:40:9e:c8:66:8c:7b:e5:b1:17:be:f2:e2:cb:ce:84:bc:c9:
         13:7e:51:77:88:4f:1a:93:4d:73:4c:bb:d6:3e:dd:df:26:00:
         22:8f:8a:64:26:c4:b9:6b:3b:bc:df:6e:73:54:6f:2d:43:57:
         fc:15:45:2c:bd:70:d9:a0:c5:0e:5d:09:cb:1f:24:50:2c:0e:
         34:4a:14:9b:59:0e:ac:95:6d:94:65:84:a6:a7:b7:c4:5c:cb:
         4c:21:4f:47:9d:77:af:f8:1d:1e:e9:88:55:4a:4b:ae:85:46:
         8d:cb:83:f2:92:88:53:d6:15:2c:22:60:cc:4a:32:be:bd:0b:
         6b:a9:44:41:6b:c8:f3:31:33:3e:1f:6f:86:9a:69:8a:9c:14:
         d4:d4:c6:0c:bf:31:86:df:6e:4f:c6:0d:88:01:93:96:7c:a1:
         a0:dc:03:78:1b:79:86:cf:fc:24:80:69:39:77:ad:4c:7e:36:
         36:ed:84:1a:aa:4e:5d:d2:f5:72:99:b4:7f:0d:cd:69:ad:71:
         97:a3:6c:77:dd:d5:33:08:cf:45:cb:fe:a1:87:ab:89:a6:3e:
         5b:27:c9:6a:47:45:5d:56:ff:ae:94:42:6c:4a:ed:3c:8f:1f:
         90:50:41:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGKM6a24U6TMWyxU8veudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDZhZDhiNTEwY2Y1NTk0ODVlMzYxMTU1NWI4YjQzOWVm
NTMzYmIwHhcNMjYwNDE2MjEwMDQ0WhcNMjYwNDE3MjEwMDQ0WjAzMTEwLwYDVQQD
EyhjNWNlMDljZDg2MDdjMmJiY2IyZDQzZGJiMzJhZTFkM2IxNDQ4ZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOJYesze7QMocn0869L9/0GdryPC
q+IJk1c9iTXviTXBunpi5B4iZZDX+cb8uMJ8xJ9ibW4Rn+ztCCJ8/hMyOyqsYUpt
/X2nCxQej3HLmoO2QcbNTgI1vZa9pyZqP8jZkaLk4J1xnsrGMx+Vji0uLiJUx8RH
NpsnPUOZGPL6VkMZSL8PZRDcaGSat3K+beMVBKwFV7bNk87G4PG1MLE57lwYTATz
KQnov+uD2WXNgrh3+KHwMka8L7wRWjv5e2gNEGzVFlrGYkAiqUHCBE7sE0IMy4rZ
c9+NnnXMgbKp/1Z/GCEWrnpkYpWE10r7dGTji4p8aoo1vk815XVMG+W/WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXOCc2GB8K7yy1D27Mq4dOxRI7dMB8GA1UdIwQY
MBaAFEpGrYtRDPVZSF42EVVbi0Oe9TO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85ZWEwOGEtMWE5OS00ZWUzLWEzYzQt
ODQyNmFhMWE2ZDJmLzEvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS85ZWEwOGEtMWE5OS00ZWUzLWEzYzQtODQyNmFhMWE2ZDJm
LzEvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCYj61gy
Gahb8pyZXMy6GACwt0CeyGaMe+WxF77y4svOhLzJE35Rd4hPGpNNc0y71j7d3yYA
Io+KZCbEuWs7vN9uc1RvLUNX/BVFLL1w2aDFDl0Jyx8kUCwONEoUm1kOrJVtlGWE
pqe3xFzLTCFPR513r/gdHumIVUpLroVGjcuD8pKIU9YVLCJgzEoyvr0La6lEQWvI
8zEzPh9vhpppipwU1NTGDL8xht9uT8YNiAGTlnyhoNwDeBt5hs/8JIBpOXetTH42
Nu2EGqpOXdL1cpm0fw3Naa1xl6Nsd93VMwjPRcv+oYeriaY+WyfJakdFXVb/rpRC
bErtPI8fkFBB7w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:35 2026 by rpki-client