Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File:                     SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier:          jMx0DIs63+3I3Kp64/hH21j72Sr1+I7lPH92wIIEgH8=
Subject key identifier:   3D:E3:1C:64:B6:9C:81:CE:FA:08:49:26:7A:60:6B:82:76:3A:9B:03
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer:       /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial:       019EC0DABF291DF691AEFEF13C71BE996F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number:          1878
Signing time:             Sat 13 Jun 2026 12:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:21 +0000
Files and hashes:         1: LY2SZaS4pei18ToSlPlrLXW5sMk.roa (hash: nROSVRfoddVkaul+J1xodezFnhIj684VanT5Ow2R/wE=)
                          2: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: /IQW/eouIFMaBQpxztgGA+QRxnxCXOccnE5IP3J4CXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:bf:29:1d:f6:91:ae:fe:f1:3c:71:be:99:6f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
        Validity
            Not Before: Jun 13 12:00:21 2026 GMT
            Not After : Jun 14 12:00:21 2026 GMT
        Subject: CN=3de31c64b69c81cefa0849267a606b82763a9b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:48:8e:47:75:de:a1:66:b7:63:87:68:73:1b:
                    fc:a0:2f:76:85:cd:8f:3b:91:a5:46:7f:c0:c2:70:
                    35:26:c9:f4:f1:94:55:0f:4d:db:88:d6:97:67:27:
                    8d:f3:24:44:a7:cf:03:66:00:79:b3:e8:47:77:c6:
                    53:03:d5:ee:1c:20:a2:02:be:d1:f0:1a:3c:64:8d:
                    8b:29:fb:32:6c:f8:70:63:4d:53:a1:39:13:ba:43:
                    17:c5:b8:1c:26:05:c3:08:fb:3f:2c:08:99:6c:32:
                    e8:b0:dd:0f:1b:0a:bd:5b:90:25:4d:96:25:5b:2a:
                    40:a1:75:d3:d6:15:3c:4c:b4:3a:97:f6:a5:93:ed:
                    de:aa:11:8d:7d:52:f0:39:68:b4:59:2c:3e:ff:97:
                    04:45:20:01:be:f4:be:18:d8:97:49:22:26:84:77:
                    03:28:3e:52:61:ba:9b:cc:88:a8:08:cc:84:46:2f:
                    33:df:e3:75:32:51:5f:01:48:e7:68:45:ce:a9:7b:
                    ff:32:42:75:ad:55:38:b8:09:81:72:4e:6d:11:16:
                    37:6b:67:3e:0e:1b:70:3d:93:da:c9:87:c8:98:8b:
                    37:2b:d4:e8:05:90:e6:65:47:4c:4b:73:28:6c:03:
                    ed:42:5a:6c:f6:18:89:de:ad:b6:07:a0:7e:62:ac:
                    84:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E3:1C:64:B6:9C:81:CE:FA:08:49:26:7A:60:6B:82:76:3A:9B:03
            X509v3 Authority Key Identifier:
                keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c9:00:4b:e5:b1:e7:e2:c6:97:7f:99:71:be:ac:b0:37:0f:
         00:83:08:cd:85:b6:95:eb:eb:b7:2b:37:ca:59:46:48:cd:be:
         b9:ca:4c:3f:73:87:36:d4:60:85:15:83:34:2f:a3:e3:bd:a2:
         1f:39:66:16:9b:fd:0f:b4:55:25:75:a6:0a:48:2a:f0:38:1f:
         4a:0f:bf:c2:2b:bc:f0:e6:f1:da:32:e7:1e:74:18:b6:19:2c:
         01:2e:3c:04:ad:4f:48:7b:93:9c:6f:8f:b4:65:11:95:47:3f:
         43:4f:f3:4c:2b:34:ef:6a:64:70:26:8b:a3:27:37:35:4a:3e:
         40:7a:71:74:81:86:38:db:6e:5c:d7:ac:2b:ad:2e:f2:5f:61:
         2e:69:b7:21:0e:19:d2:17:47:93:da:05:6d:ce:cf:f6:fb:61:
         fd:47:bf:2f:59:22:08:ab:07:6d:db:0d:47:c4:34:18:a7:9c:
         fa:cd:6a:81:bb:77:9c:61:90:b4:26:84:9b:23:15:df:87:90:
         b2:fb:1d:0b:c3:b3:bb:98:70:41:7c:1a:86:8a:bb:3d:1c:c3:
         9f:7a:b2:55:c9:02:dd:e5:4b:ec:03:51:c2:4c:b4:f2:ce:af:
         8c:49:ed:93:8b:bd:5a:7c:9e:d0:12:f9:98:90:26:8b:20:f2:
         a2:ca:02:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:07 2026 by rpki-client