Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          gth9W9nzuRrBkEU5UqGhtmUE0AVphZ50GtTrnMwDyLo=
Subject key identifier:   0E:6A:7E:A0:3A:E3:89:B6:2B:7B:1F:0D:ED:4E:78:73:82:72:4E:BA
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019FA8D06B2FFA5F5F48EA00DF792B4DE241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          104C
Signing time:             Tue 28 Jul 2026 13:00:58 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:58 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:58 +0000
Files and hashes:         1: 0zsz-mz3QUq_RZV4eHpIMCvlE2Q.roa (hash: zsKWU4kWBcHffnCldd/6EPM4YqHbeKQgB7/qG1/ysUw=)
                          2: 1-5fTi6s1Kplp75lWlcBDMf3u4o.roa (hash: tkr93CENCQMU8I4CRf7NT1nfm7qY9AruXpGRBogFjDc=)
                          3: 4NdCq8obZr436D2aMDPBKInOKng.roa (hash: nCVG/YTz/OgaKxKZF5iZyXglkJRNwFm23KPtP5MS7yg=)
                          4: 9U9UZsJALoO5uYFbr8y_ZEG6R0o.roa (hash: L9NVxLU8O9i95hEu9k7Po4V4b+iJv7NAW4494Hk5YUw=)
                          5: HvPJromQatJpK21zTf_zEWzRrcs.roa (hash: MlXOal2TwzQ7NF4YnJ7EYZ0o/+GTjGWME37sNwfO/wU=)
                          6: IbohXdTLOI5jMkwRsX5bUmXSpAc.roa (hash: UBaFG47zbBGMBn4xKaby4a1MFrL+PkMMbb8aT7/JD8s=)
                          7: Nn0JzGgy_u6vjsYI0Crz56q0DkY.roa (hash: RxEsMznFmzmlGwJT1srwSiUrG5r0NzfeEQAmBuii6aA=)
                          8: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: AZflmsNHjIZQ39C+6Oy3kGmxyAoO+S6dQtF14TTdkp0=)
                          9: Xa3aUsiQYVlNZ5VcrIIK_jAKctk.roa (hash: kmDj33CZwukfWzcqZSB35AY27WE1Fo7eUVsk7tTOXog=)
                          10: Z3qTKJ7CIGasieELz7lpIp2Yh6k.roa (hash: 7cCBpyUsGDrcq8EeS5YX2uI808hKjfebRICORugyh0E=)
                          11: bsvN2b5UZsB0fGW7kiw7OedgIDE.roa (hash: YACRChowg54sllVK3l+6K9IbWrwbmt0gZsObr1HWNsI=)
                          12: fNAR_JPkkC491YU-kT_ByTYIEm4.roa (hash: sYR/Ti3r2dDvrcuUCgrf8MhHNZLnx4vKqJjpp3V/CwA=)
                          13: j-uU8XQlwViTYTY7MMI9THoHjU8.roa (hash: jVFaUQIB9Y2fTUDqumECkc/IKMgCwoMMHfvoWihijHQ=)
                          14: kvNYuyJjxpLiL78r_HWCaKIVSeM.roa (hash: an7+no5fubSIGYKy4WMOxhF8ErceM1kP8W7CMY2bk44=)
                          15: n-n0F8-smlKDKWswC1m2gxnHDDY.roa (hash: q6YsSdX5hsZsNG4NcA8tNzI34ml2KRfXVRRHtJp3KRQ=)
                          16: u6D6IhT01RFHYtXcDxjfNMZBM8M.roa (hash: m6UqHoD9Mb+jAm+l2P3nH+xVGpm69d2EaiSe7G0I0NQ=)
                          17: uK6_ifWLoIZv8VuYRndlwMy_4bU.roa (hash: bzZHRyxvv4u3wzZyj+e9ebfI0EsjjmajKyBNoIA9GYk=)
                          18: xiMy2SPaH8lHFI3-H2U9JOLwGwg.roa (hash: JOE5tXZ69kYpokkhO+4/eAyh65at7yTIXXS2i46knHo=)
                          19: zbB9bOrDvpQhz8rM2SWmNLWPUT0.roa (hash: rpkVJVzw/qdvIkZyInRx6Bx7b3NqiJEAzZ8FKUQsPfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:6b:2f:fa:5f:5f:48:ea:00:df:79:2b:4d:e2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Jul 28 13:00:58 2026 GMT
            Not After : Jul 29 13:00:58 2026 GMT
        Subject: CN=0e6a7ea03ae389b62b7b1f0ded4e787382724eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:36:27:5f:80:a1:56:f1:78:a5:cc:52:86:
                    2c:3a:fd:49:95:24:af:7a:d7:6d:7f:f1:98:75:f2:
                    c1:15:08:a7:d4:79:b0:c1:44:38:dd:ac:9a:c0:6c:
                    c8:0f:b4:91:d1:6b:4c:0e:fa:c3:e4:e2:06:1e:0d:
                    7c:13:91:9b:3d:f4:4c:d4:18:10:83:61:a2:f7:e0:
                    2b:d4:c6:ba:d6:ea:4a:13:bd:54:cb:22:24:c1:c6:
                    a8:21:18:49:2c:31:70:55:95:62:05:a2:0a:b8:ca:
                    4d:53:16:c4:8d:b9:7b:47:d9:05:b4:31:67:5b:71:
                    d3:64:02:dc:86:30:56:42:dd:18:db:ab:e5:3b:68:
                    9c:40:65:70:11:d6:5a:c1:aa:79:31:d5:82:6e:2b:
                    fd:76:5f:b1:45:14:33:33:d1:ac:43:6d:66:2c:bc:
                    b2:7f:4f:f5:05:7e:a8:30:02:98:a5:0d:7f:94:a5:
                    fc:29:99:47:44:69:2c:66:bb:45:bf:8e:0d:86:d4:
                    be:d8:06:04:37:17:c5:34:ff:f7:6a:68:0f:40:fd:
                    ab:a0:2a:fb:4c:ac:fe:6a:17:f1:76:fe:d5:ae:64:
                    1a:ba:f7:19:a9:a1:0c:21:4f:a1:94:70:15:51:14:
                    67:88:d2:c7:5d:6f:18:a5:63:8d:d0:8a:f4:92:a1:
                    01:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6A:7E:A0:3A:E3:89:B6:2B:7B:1F:0D:ED:4E:78:73:82:72:4E:BA
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a8:0b:e6:b4:75:76:5a:3e:ab:dd:80:3e:2c:65:1b:39:7a:
         d6:0d:f7:b7:5f:e9:de:bb:d7:07:e8:b1:67:3c:b0:23:5a:09:
         2c:ff:48:11:be:38:5f:bf:4f:14:28:26:65:66:90:da:ee:a5:
         9c:60:66:7d:c5:7a:be:6d:1c:22:09:7d:b1:c7:5f:ed:7f:ff:
         28:ed:ec:b1:b1:71:e3:ba:e5:b0:e8:7b:29:45:e4:be:7d:c8:
         b6:53:91:dc:ae:ff:30:9f:18:a5:20:41:7f:d9:4d:46:6b:e5:
         43:c4:3f:e5:d5:4c:06:f1:ef:23:0c:ea:8d:24:92:b0:6f:68:
         37:1b:31:2f:a5:40:ab:1f:4a:f7:b1:33:d9:0b:8f:e9:f5:c8:
         47:73:e6:8c:62:5e:3e:7d:29:9e:5c:0d:46:d7:5b:3e:07:e1:
         12:62:27:25:1f:dc:a6:77:37:18:af:76:60:95:f3:a1:0a:a2:
         9f:2d:1b:20:04:c9:14:cc:99:33:cf:21:9f:c5:f6:be:14:1c:
         e8:41:5b:30:ec:01:fd:4b:b1:69:e3:f1:04:0f:34:82:fb:7e:
         35:f7:1f:fb:6a:26:45:91:68:03:4f:0c:88:5a:9a:a3:5d:73:
         34:f7:b9:5d:a5:e1:05:01:15:dd:8f:52:3b:52:36:ea:44:69:
         f2:b5:56:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0Gsv+l9fSOoA33krTeJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjYwNzI4MTMwMDU4WhcNMjYwNzI5MTMwMDU4WjAzMTEwLwYDVQQD
EygwZTZhN2VhMDNhZTM4OWI2MmI3YjFmMGRlZDRlNzg3MzgyNzI0ZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb02J1+AoVbxeKXMUoYsOv1JlSSv
etdtf/GYdfLBFQin1HmwwUQ43ayawGzID7SR0WtMDvrD5OIGHg18E5GbPfRM1BgQ
g2Gi9+Ar1Ma61upKE71UyyIkwcaoIRhJLDFwVZViBaIKuMpNUxbEjbl7R9kFtDFn
W3HTZALchjBWQt0Y26vlO2icQGVwEdZawap5MdWCbiv9dl+xRRQzM9GsQ21mLLyy
f0/1BX6oMAKYpQ1/lKX8KZlHRGksZrtFv44NhtS+2AYENxfFNP/3amgPQP2roCr7
TKz+ahfxdv7VrmQauvcZqaEMIU+hlHAVURRniNLHXW8YpWON0Ir0kqEBuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5qfqA644m2K3sfDe1OeHOCck66MB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOagL5rR1
dlo+q92APixlGzl61g33t1/p3rvXB+ixZzywI1oJLP9IEb44X79PFCgmZWaQ2u6l
nGBmfcV6vm0cIgl9scdf7X//KO3ssbFx47rlsOh7KUXkvn3ItlOR3K7/MJ8YpSBB
f9lNRmvlQ8Q/5dVMBvHvIwzqjSSSsG9oNxsxL6VAqx9K97Ez2QuP6fXIR3PmjGJe
Pn0pnlwNRtdbPgfhEmInJR/cpnc3GK92YJXzoQqiny0bIATJFMyZM88hn8X2vhQc
6EFbMOwB/UuxaePxBA80gvt+Nfcf+2omRZFoA08MiFqao11zNPe5XaXhBQEV3Y9S
O1I26kRp8rVW3A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:12:10 2026 by rpki-client