Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
File:                     SKvyn974VwUC9LUb5f_AXE2bNGU.mft (raw, json)
Hash identifier:          8MUgpg+RdK4o87AsWvY481hiTn0pdMDsC8Ip8GPwQr8=
Subject key identifier:   C2:DC:70:88:35:4D:AF:82:F3:63:70:79:0C:7E:6F:EA:F2:62:C8:09
Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
Certificate issuer:       /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Certificate serial:       019CAC4682EF36EB3D6DB59E65589BAC313D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
Manifest number:          1198
Signing time:             Mon 02 Mar 2026 02:00:28 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:28 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:28 +0000
Files and hashes:         1: NTfOXNXZRUr1slwiC5jri_Pj3nE.roa (hash: 2cTeTvGq9Ma3xGEMix+i4fzR4v6Kuv41txoLWaf+1IU=)
                          2: OmjJ2pra7ZH3kLcHVULQEDldWT0.roa (hash: HKO7YcTjc8EFym8TIk3ZAFMXKyhjZxul8fsRraKS1vs=)
                          3: SKvyn974VwUC9LUb5f_AXE2bNGU.crl (hash: JnFfCoRNlD+UtuzX2xhiTaVfEIinTyRfF01gMce/MlA=)
                          4: WMExniDkNilW8Ca6K2scKNWFfng.roa (hash: kFeHB2m2ioqOfBMWJEcpqCW9jakGMmWIYvyS4MtQx1Q=)
                          5: _bc090pdV_zEssTeMpRcQFCLxsQ.roa (hash: b2HUi3BWlo2KpOBVeFkvC7UurEqR/J07z81OFa/x5to=)
                          6: rpxSx-Kq5Z10yUYYr3jlY1CTjVY.roa (hash: JbhnUk6+5HxtHO4sN+DED43HcgG3ryZMySqa9ROUaUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:82:ef:36:eb:3d:6d:b5:9e:65:58:9b:ac:31:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
        Validity
            Not Before: Mar  2 02:00:28 2026 GMT
            Not After : Mar  3 02:00:28 2026 GMT
        Subject: CN=c2dc7088354daf82f36370790c7e6feaf262c809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:ed:e7:e0:bd:cf:2a:37:6c:8d:94:9f:5f:
                    29:63:99:55:5e:63:9c:c8:fd:8d:a4:e8:ea:d6:c8:
                    80:3a:f6:70:06:4c:59:50:60:a5:ed:59:c0:8d:d8:
                    38:4d:52:a5:53:d9:c0:64:c3:bb:5c:ee:94:ab:bb:
                    ef:57:3d:8a:75:8c:cc:75:7b:fd:1f:5d:5e:90:b9:
                    33:71:13:68:55:5c:e2:4d:f8:d4:ab:41:ff:91:53:
                    ad:55:c8:10:87:29:98:db:b5:af:1b:56:8c:7b:09:
                    c2:09:ef:70:79:41:ad:70:b2:5c:0f:d4:ad:bb:a2:
                    6d:9e:5f:94:89:09:3d:08:e8:21:17:a4:16:20:67:
                    1c:8a:81:5e:df:55:46:17:5c:8e:04:4d:fe:5c:26:
                    59:34:c7:d4:22:04:98:b9:ef:12:91:39:f4:53:f5:
                    e2:50:13:4b:d2:e9:7d:ca:9c:e2:40:10:93:b4:16:
                    f8:d6:cf:53:61:2f:f5:a0:e2:93:64:9d:1b:6a:68:
                    7d:46:8e:4d:e1:b0:4d:2f:69:8d:f7:27:9a:03:1c:
                    2d:39:7c:89:7b:ef:92:d1:2c:30:1f:46:6e:b2:4a:
                    80:de:a8:3f:23:48:62:38:64:2b:ae:e7:f5:d0:7b:
                    e8:9f:e2:1f:00:da:fa:8c:cf:d2:66:5f:16:6c:6c:
                    be:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DC:70:88:35:4D:AF:82:F3:63:70:79:0C:7E:6F:EA:F2:62:C8:09
            X509v3 Authority Key Identifier:
                keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:04:ca:e6:12:5e:ef:1e:c3:d8:45:0f:24:c1:7b:be:b4:1d:
         b2:8c:94:83:90:4a:83:36:b5:9f:2f:69:92:3e:38:07:03:bb:
         49:07:43:25:86:89:ba:64:0c:c3:13:51:0e:7b:84:9a:bd:59:
         63:97:2d:ca:02:d0:81:11:b5:fc:b0:74:c6:54:73:49:d6:0f:
         f1:65:22:ae:40:b5:7e:cb:2a:26:6e:0e:97:f0:44:3e:8e:a7:
         33:b8:e8:ef:b7:68:2c:65:6b:7c:91:85:14:73:0b:62:fb:99:
         45:18:de:b0:a1:46:de:c2:94:ad:52:37:94:5c:2a:c5:7a:05:
         e2:f2:05:f5:7f:8c:92:75:2c:5a:49:04:bb:1b:d0:89:61:3c:
         60:98:2f:ab:68:33:5f:c4:32:6d:f2:da:fd:45:6a:aa:6c:00:
         80:4d:3f:d7:6a:ba:e3:bb:04:e6:04:d4:cc:b2:39:4c:fc:f0:
         98:c5:e9:4a:59:a3:b5:78:02:ec:fd:33:e9:ff:b1:24:7f:28:
         2e:ba:46:30:75:4b:35:af:1d:8c:9a:19:13:e5:74:a7:2f:5f:
         64:a5:e6:f9:c1:a4:ad:98:2b:b6:3c:77:7b:82:ea:ce:4d:09:
         b2:98:ac:76:24:c5:0d:45:50:3d:5b:19:50:57:6c:ee:ae:7c:
         19:4c:0b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:11 2026 by rpki-client