Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
File:                     Skati1EM9VlIXjYRVVuLQ571M7s.mft (raw, json)
Hash identifier:          lE5+EOWcmNjWtkqbhSVm3aHh9O/baSjlTVDSLkhFbZU=
Subject key identifier:   4A:5D:C2:4D:38:F7:4F:0B:B2:8E:B3:57:73:F6:C9:C3:B3:B9:CC:EF
Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
Certificate issuer:       /CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Certificate serial:       019ED3F41F3D2521F08C6DFD944C5F08E643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
Manifest number:          0949
Signing time:             Wed 17 Jun 2026 05:00:51 +0000
Manifest this update:     Wed 17 Jun 2026 05:00:51 +0000
Manifest next update:     Thu 18 Jun 2026 05:00:51 +0000
Files and hashes:         1: Skati1EM9VlIXjYRVVuLQ571M7s.crl (hash: aRPqeoPao9ixAIR/EphTbxkYyMHb7TKs9YDKGnvcaUA=)
                          2: nYd9WAHfnnkyefHNJxlyLZw7juY.roa (hash: 0Jl7sSfyxb2cLvac18MQkQRRmrhCrh71DaYL81jG5C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:f4:1f:3d:25:21:f0:8c:6d:fd:94:4c:5f:08:e6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb
        Validity
            Not Before: Jun 17 05:00:51 2026 GMT
            Not After : Jun 18 05:00:51 2026 GMT
        Subject: CN=4a5dc24d38f74f0bb28eb35773f6c9c3b3b9ccef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:11:0f:91:8c:8f:e6:dc:5b:c7:5b:52:26:
                    e8:3d:a0:6d:08:a2:f0:db:5b:ff:4c:b6:89:95:e9:
                    f7:ef:f6:b7:f4:34:63:94:1d:c7:61:38:a7:99:40:
                    2b:64:56:f5:ff:19:d7:55:c7:5e:47:6e:b2:fd:31:
                    e5:a6:b0:75:d5:d2:40:85:da:c3:e6:ca:34:38:3f:
                    95:c5:4d:b5:0b:ac:6d:62:61:d0:55:67:f5:43:b4:
                    95:0f:bf:e0:a7:01:3f:33:83:4e:65:de:8f:46:fd:
                    17:bf:12:11:de:3f:f3:88:80:4a:1f:58:d5:8e:43:
                    ad:ae:01:d4:05:6b:b8:7c:3f:01:d7:01:d3:2b:aa:
                    ea:a8:74:ee:ab:82:e1:a0:c9:26:dd:8f:d5:87:2d:
                    a0:64:4b:01:0e:16:0d:86:ff:d7:a8:f9:34:f4:63:
                    8a:a5:fa:20:ed:40:64:50:6f:0b:da:42:d9:1e:f0:
                    b8:f3:dc:fd:b5:2f:e3:96:fe:1c:47:3c:46:60:b0:
                    3f:d3:9a:ad:f0:dc:54:2d:76:c9:fb:52:ad:5f:d9:
                    31:24:6b:79:3f:48:e6:a9:c7:ea:b2:ca:b4:b1:56:
                    f8:ff:f2:60:82:2b:d1:e9:f7:99:a8:b6:98:88:bd:
                    01:53:bc:a6:dc:95:83:03:df:2a:7a:8c:97:e5:a6:
                    e2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5D:C2:4D:38:F7:4F:0B:B2:8E:B3:57:73:F6:C9:C3:B3:B9:CC:EF
            X509v3 Authority Key Identifier:
                keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c2:e4:c1:13:22:7e:af:87:de:a5:bc:96:6d:55:c2:5c:95:
         19:bc:8d:dd:39:d2:c0:ff:67:f0:93:4f:86:96:af:d7:9b:9f:
         4d:81:a7:85:7c:2c:39:16:ba:7b:29:e1:80:56:6a:b2:37:2a:
         81:3f:62:d4:12:5f:0c:65:c1:f4:04:78:8d:27:3a:ea:1e:0d:
         ce:a6:7a:4d:3f:54:14:6b:ae:8d:17:b1:79:0e:bc:db:5a:20:
         4e:41:2a:f3:b5:5e:d6:7c:db:3c:10:30:05:72:ec:cf:03:39:
         36:6c:7f:76:b0:2c:82:40:10:f7:fb:3c:64:ba:d0:8e:41:86:
         e4:34:56:6c:7a:ed:7c:9a:d3:64:87:23:55:3a:ba:77:b6:fa:
         c7:73:01:c3:3f:fd:dc:d8:03:9c:0f:a1:c2:9d:0b:d8:a3:c6:
         2d:ca:52:65:f3:cf:a2:65:9e:d2:58:58:f0:20:70:0b:e4:ef:
         ee:92:7c:dd:63:e6:8c:85:2a:91:37:58:a7:01:d8:15:af:33:
         30:8f:7a:64:3d:91:72:30:5e:87:2d:fd:65:3f:44:48:a8:6a:
         6e:87:52:18:27:6b:b4:74:58:ba:0b:05:b9:6f:56:a6:50:bf:
         2a:57:41:f2:16:10:55:2d:07:16:6c:72:1e:65:1b:ca:2c:a9:
         ec:1e:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:21:47 2026 by rpki-client