Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          MgF3JuRjeYR0E1Wz8M8azzij7SMMjP7rGA0nzJl5oqg=
Subject key identifier:   06:2B:F5:A2:52:57:77:66:DD:E4:49:4C:6A:EF:71:48:46:25:DF:DE
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019CAC7E3DC70F2F4070E6685FDBFE3E79FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          0EB0
Signing time:             Mon 02 Mar 2026 03:01:20 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:20 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:20 +0000
Files and hashes:         1: 1-5fTi6s1Kplp75lWlcBDMf3u4o.roa (hash: tkr93CENCQMU8I4CRf7NT1nfm7qY9AruXpGRBogFjDc=)
                          2: Fow_DRD0J9Sk-bBDpqDfNKsW1qg.roa (hash: OKmdm7ysJvOteC9H/zvOdemCTeoLV8EABr4yQLYsMuA=)
                          3: J4ZfI_RfOrpmy1A2S2Vj8ciYG7U.roa (hash: xU01SBexU2pgq8GahrrSha80apeSc4qMCG32pF8S8lI=)
                          4: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: sWhRwAFc0ykxtXIBMhA+FZwX9AZPkknzUvLXTkf3qjc=)
                          5: Xa3aUsiQYVlNZ5VcrIIK_jAKctk.roa (hash: kmDj33CZwukfWzcqZSB35AY27WE1Fo7eUVsk7tTOXog=)
                          6: YwC9pKPBjvGZtmMsz8q7-L2iwUg.roa (hash: doEjRnjZRLGiYVoGRzQjHdhg1pJzAYP6ZgcVU+Bf/bE=)
                          7: Z3qTKJ7CIGasieELz7lpIp2Yh6k.roa (hash: 7cCBpyUsGDrcq8EeS5YX2uI808hKjfebRICORugyh0E=)
                          8: dR0zpIqq8tLg1OamhsPNo_J5QBg.roa (hash: oBSo9M/Eu7aDbt6HN3S3ca9KyP+2wEB/H+NG+mj4DOQ=)
                          9: fNAR_JPkkC491YU-kT_ByTYIEm4.roa (hash: sYR/Ti3r2dDvrcuUCgrf8MhHNZLnx4vKqJjpp3V/CwA=)
                          10: j7jCrIsqMJcGCU6v3_MhfncBGmU.roa (hash: nXAiToHifSC1NBCocPYjsfwz/YN5X6I+EcIkLfLsl5M=)
                          11: jbhpweVxvqHx9iUgFePmmEKTB0o.roa (hash: qnKLr3s/P3uzBC1O7P51ocSp/Gdd2Nk4CeL6u6vfdYg=)
                          12: kvNYuyJjxpLiL78r_HWCaKIVSeM.roa (hash: an7+no5fubSIGYKy4WMOxhF8ErceM1kP8W7CMY2bk44=)
                          13: n-n0F8-smlKDKWswC1m2gxnHDDY.roa (hash: q6YsSdX5hsZsNG4NcA8tNzI34ml2KRfXVRRHtJp3KRQ=)
                          14: pcWMRWhYeiOy3kqkQxP424kAjSw.roa (hash: 91t3lOCpz165XTACShSUX5kfMv7uJUtfiuBmjOM8WJQ=)
                          15: rugEHoaHVajoVfoc97cSAKNDn0w.roa (hash: 7ghfXJusobnUoN3Z3OZ6ek2nYh+X9Gs5M1yKtLkxaGo=)
                          16: uK6_ifWLoIZv8VuYRndlwMy_4bU.roa (hash: bzZHRyxvv4u3wzZyj+e9ebfI0EsjjmajKyBNoIA9GYk=)
                          17: vtDS3h0cv8sKwu60fmQfZvHkuHI.roa (hash: 1jLMCQj/DnUGyTFUb2JE9h+GQ/o44K4S5NUsN/49N6o=)
                          18: yL84KgQiEkrFhcIz77PcmceUZH0.roa (hash: WxtF8tgkkiaIVCA8P1DkKpbudbvofxFG8K0h5BegKA4=)
                          19: yS-0BxtvAt6IeR55AkgaLECC9TA.roa (hash: R3FujKz/FTazeX7vxtoHKe8ijVfIAf1K0lV4khxwtAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:3d:c7:0f:2f:40:70:e6:68:5f:db:fe:3e:79:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Mar  2 03:01:20 2026 GMT
            Not After : Mar  3 03:01:20 2026 GMT
        Subject: CN=062bf5a252577766dde4494c6aef71484625dfde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b9:14:ff:14:34:7c:54:31:7f:62:65:d8:99:
                    df:b1:59:c4:09:c0:1c:0a:16:b6:51:1b:be:b1:cc:
                    13:57:b2:a3:7c:54:fd:d0:3d:69:df:83:f8:31:a5:
                    10:00:20:91:d3:84:c0:cf:c0:26:17:93:75:97:c9:
                    58:1e:7c:2f:31:7e:58:f5:3e:00:f4:e2:d1:f2:a7:
                    a1:f3:f4:55:19:a7:57:e3:2d:c9:cf:83:07:7f:56:
                    fc:02:66:0d:74:36:ba:ee:dc:4b:d3:b5:86:0c:9f:
                    5e:48:b1:30:cd:5f:b1:da:0c:f1:fe:7e:a1:93:86:
                    5b:88:a0:d4:07:07:4d:64:5e:3a:ad:cb:df:85:cc:
                    78:ef:d0:f9:b2:c3:93:71:95:19:55:39:d3:e0:db:
                    4e:a9:2b:4e:d5:65:66:ee:f0:0e:d5:2b:e9:e8:3b:
                    3a:bf:b6:27:f5:db:a9:ac:2e:e5:de:5d:19:50:48:
                    ef:7c:dd:3e:2a:22:9c:cf:ef:17:de:c0:a3:fb:bf:
                    ec:a6:b1:af:a1:42:9c:5f:7a:36:25:25:2b:92:81:
                    84:85:0a:98:d6:5d:8b:b1:b5:db:56:60:a4:1c:31:
                    a3:75:89:7f:1e:28:f4:4f:7c:9b:bc:b5:2e:51:9b:
                    c4:38:31:94:de:23:f0:53:06:02:f5:c1:7a:41:22:
                    1c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2B:F5:A2:52:57:77:66:DD:E4:49:4C:6A:EF:71:48:46:25:DF:DE
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f1:a6:ac:ef:74:65:ce:5a:ce:d5:2c:42:a0:fd:b6:f6:b2:
         70:58:83:d2:fa:3d:45:c5:bc:fd:64:a8:1d:68:a8:74:ff:a8:
         19:51:fc:99:d7:3a:40:b3:67:cd:42:f4:57:97:f2:0e:50:e4:
         62:39:a7:28:67:97:2c:c0:45:10:64:85:a4:ae:6b:a5:54:1a:
         35:0d:92:33:14:a1:74:9f:27:e0:01:43:f6:b1:14:e4:4e:ce:
         bc:38:fa:08:48:21:f5:7e:23:3b:5a:c7:75:62:2b:81:8d:18:
         78:20:99:e8:00:c0:bd:aa:ea:e8:35:d2:ea:96:3a:c5:69:5b:
         91:9e:d3:01:06:38:27:d2:c6:ca:06:f5:65:d7:f6:88:fd:7e:
         ab:df:98:f8:a2:da:1e:79:65:aa:53:78:1e:75:69:bb:6a:2b:
         91:9a:70:09:d4:87:4b:e6:c4:10:e4:53:3c:bb:af:3f:08:a2:
         03:18:82:69:d7:a5:13:f5:e4:72:6b:ee:51:12:56:b5:80:df:
         e2:8f:2e:7d:f2:69:29:07:78:ab:f2:1c:09:49:9c:9c:80:9f:
         e9:15:52:fb:fc:8f:7a:88:f9:2f:5b:33:c0:fe:02:84:6a:6a:
         4f:c1:5f:9f:a3:6f:77:2f:6b:d1:24:d8:9f:94:1e:7f:eb:47:
         02:43:fd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:33 2026 by rpki-client