Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
File:                     SKvyn974VwUC9LUb5f_AXE2bNGU.mft (raw, json)
Hash identifier:          G/gfDMN98K/L8JLnBmTc+Kv+TjBv//6APUcrESJUO0c=
Subject key identifier:   AF:CC:60:D7:28:C8:3B:2D:3F:35:A9:77:3A:69:08:8E:B3:11:10:A0
Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
Certificate issuer:       /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Certificate serial:       01A1DEA79FDA895DB352C45B34C9CF04393F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
Manifest number:          144B
Signing time:             Sun 15 Nov 2026 10:01:29 +0000
Manifest this update:     Sun 15 Nov 2026 10:01:29 +0000
Manifest next update:     Mon 16 Nov 2026 10:01:29 +0000
Files and hashes:         1: NTfOXNXZRUr1slwiC5jri_Pj3nE.roa (hash: 2cTeTvGq9Ma3xGEMix+i4fzR4v6Kuv41txoLWaf+1IU=)
                          2: SKvyn974VwUC9LUb5f_AXE2bNGU.crl (hash: cdAXvyxDqLOQ/HZoQndMYszVXl32ksNErMv9+zvqveU=)
                          3: WMExniDkNilW8Ca6K2scKNWFfng.roa (hash: kFeHB2m2ioqOfBMWJEcpqCW9jakGMmWIYvyS4MtQx1Q=)
                          4: iNg_c-CfOC92tOM1l9NX1aHGBcE.roa (hash: S6ilU7cZs9nHF8afuNO9l5+AXij1afMkASuHEvG633E=)
                          5: rpxSx-Kq5Z10yUYYr3jlY1CTjVY.roa (hash: JbhnUk6+5HxtHO4sN+DED43HcgG3ryZMySqa9ROUaUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:a7:9f:da:89:5d:b3:52:c4:5b:34:c9:cf:04:39:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
        Validity
            Not Before: Nov 15 10:01:29 2026 GMT
            Not After : Nov 16 10:01:29 2026 GMT
        Subject: CN=afcc60d728c83b2d3f35a9773a69088eb31110a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:f8:da:9f:1d:88:44:8b:62:5c:73:99:e7:
                    bc:e2:88:95:1f:de:aa:68:63:b4:e5:88:17:8e:d7:
                    83:8e:51:ac:1f:d9:74:c2:d1:43:5c:17:d4:02:bf:
                    b1:48:86:83:82:03:88:f3:0a:53:49:e5:36:95:e1:
                    8c:7b:eb:06:a9:4d:ee:b6:68:1a:d7:bf:2d:af:45:
                    bd:5b:bb:8f:38:0a:ef:d1:34:dc:3c:77:b7:74:cb:
                    a0:30:91:5d:5a:5b:3e:45:8a:df:e1:97:5c:76:fb:
                    64:64:2a:97:22:ad:fe:79:a0:d0:93:46:a9:e1:44:
                    d5:0e:45:fd:42:58:89:86:0b:0a:15:9a:62:75:bf:
                    c9:6d:9e:e5:ad:8e:39:27:9a:b0:c3:5b:9c:c5:11:
                    39:74:dd:e7:4e:93:bd:74:e6:bd:ee:0a:c1:51:23:
                    a2:14:b1:69:c2:a4:47:92:6a:0d:53:bf:3f:6b:97:
                    cd:b6:6b:54:8d:b3:4d:64:0b:ff:94:5e:13:59:73:
                    77:fc:86:e9:ef:9c:0c:cf:0b:35:c2:e7:27:5c:35:
                    b7:88:4c:19:92:bf:70:2f:5a:08:98:c3:32:73:46:
                    43:57:aa:d9:46:e0:45:f5:be:6c:9f:57:f6:f1:e7:
                    71:c9:ee:37:a4:75:00:a7:27:db:81:97:5e:13:71:
                    14:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CC:60:D7:28:C8:3B:2D:3F:35:A9:77:3A:69:08:8E:B3:11:10:A0
            X509v3 Authority Key Identifier:
                keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a7:29:34:d7:64:e2:a4:fa:0c:c0:f4:07:38:ed:bc:95:74:
         a3:bb:15:f7:c2:ae:8b:b5:d6:30:50:9f:d9:b5:08:31:0f:09:
         81:33:33:65:91:f8:45:9a:16:24:1d:92:7e:fd:d4:6d:ef:e5:
         5e:fc:b8:87:da:78:c3:53:f5:34:08:1f:cd:7d:ba:cf:fa:fa:
         8e:9a:8c:a8:12:7b:f9:61:83:4f:7b:8e:33:e8:04:79:83:04:
         f9:b4:92:b1:8b:72:0b:95:40:96:39:c1:cb:b3:9a:91:ff:ae:
         e0:95:ba:c7:10:0c:ed:92:de:b0:ed:aa:30:ad:8d:e2:95:6a:
         cf:17:8c:8a:d7:f8:45:15:4f:d4:0d:2c:6b:b0:5a:f2:f0:55:
         c4:41:f6:d0:01:0a:6a:3e:69:69:51:80:72:af:72:9d:a0:94:
         2f:6b:1f:ca:23:40:4a:06:d8:b6:0b:33:69:21:9a:be:56:60:
         84:2c:2f:0b:1e:12:9c:4c:d2:39:07:e9:2b:be:dd:a4:8c:84:
         27:cf:82:a1:39:9f:bb:b3:25:13:f5:0e:92:01:21:ea:60:06:
         12:e3:13:ab:76:d7:ca:64:05:ee:dd:ce:c8:14:67:2a:bf:d5:
         31:12:6f:25:9f:05:9c:51:d3:47:7c:58:d6:bd:c0:50:8d:21:
         c5:5e:fa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:53:10 2026 by rpki-client