Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          Ai0cgQpobAgg56KFztUo53hOmEAYyKkfXRSWGxlPM3k=
Subject key identifier:   35:99:A7:26:46:F3:84:1D:03:5C:40:C1:24:D5:F2:8F:79:9D:57:E7
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019A4E18BA093747455C531F7DFE234EFC0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          0D70
Signing time:             Tue 04 Nov 2025 09:00:34 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:34 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:34 +0000
Files and hashes:         1: A9GxPF4ifZ6rbABmHPjtyPKjmzE.roa (hash: W77hd6FGDraLnDkaoT1pKx2we4vpUTM+eeqG9pbSJEo=)
                          2: F6wdCUdNs0S6x-lvMlPtyMpUfZs.roa (hash: 9jMOcYoLdDpo5EB5/0BEoeSC3reaOBGBRYSNiNLwg9k=)
                          3: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (hash: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=)
                          4: GAnOR60hpofm0szlGWoPLIE5k9U.roa (hash: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=)
                          5: HIg12NFUg7Eb_z2q4_r85AxcQMM.roa (hash: +6laq1iJCnub2N6uqVJ0BPm3G2zkWo723oA1FoMeiQM=)
                          6: Rtf-eqgW1jg7kzfL0pg8e63I-5M.roa (hash: IMz1jRwRZYT/rMcvQ4nY+BdL0NQuZlG7iPglwgBzyqQ=)
                          7: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: XdQVVDl9XEZEz0UF/fcyTL9GJwrlToRrBf0UbmhqmXo=)
                          8: TdMhRHczxWCfuj6WCF3aHSZcWoE.roa (hash: OExPlz/NvHlKGK16isLHnODAZh99vhb3NAPmGcjd+nw=)
                          9: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (hash: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=)
                          10: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (hash: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=)
                          11: fXIkEQH3meKCBAEQ5mXacq0TJ20.roa (hash: rnj1CDmi4d3j1os+cxi9WBUMoxTK5VvPgUCy380Y0oI=)
                          12: o979ZrblSrorE9B9zxDq41HUGYA.roa (hash: kigJPd/hpDjSHjs7rzVTH64QUtXJbGCT3yl7CjOiV2A=)
                          13: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (hash: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=)
                          14: peIOlV3OfBEMu-qBfSwFNIMmyUg.roa (hash: 6anSx7OoDk9TVb+rhIIUnKyoMu5IPmI9Uc6n5lkG9F0=)
                          15: qGL-UUbfc2n5gMthqcDrY6oqiRI.roa (hash: fb04IIPduA2+NhPfcjizdhoAsQqWUl17Qoy+hMnSrwg=)
                          16: rAiRJTmW8XfVmhpte53A3cU5F0E.roa (hash: 4rCJoUat5Hf3Yqw8erIeJ6FU4KlxG5HpAnlRqviFfYc=)
                          17: sYn86kZKw4G3fFE4L_epfK7wXCA.roa (hash: fdCIDuHioT3v4CHhE018xXjPJRG+/QyggQzYrvRftpc=)
                          18: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (hash: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=)
                          19: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (hash: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:ba:09:37:47:45:5c:53:1f:7d:fe:23:4e:fc:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Nov  4 09:00:34 2025 GMT
            Not After : Nov  5 09:00:34 2025 GMT
        Subject: CN=3599a72646f3841d035c40c124d5f28f799d57e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:4c:2f:f8:50:39:65:3a:18:3a:d7:0a:69:
                    19:8e:1b:dd:b2:1b:d3:19:4c:c5:4f:d5:7e:e2:09:
                    f6:cc:42:0b:ca:3b:55:f2:2d:aa:98:ba:1c:66:b8:
                    49:15:7a:b7:9f:a4:5c:2e:0b:a6:9a:06:ab:30:db:
                    0c:23:ef:7b:2f:45:81:89:2c:87:88:54:48:35:7c:
                    71:7f:bc:e5:3b:f0:e9:95:a8:b1:11:e9:74:65:eb:
                    cd:ba:c4:5a:ae:f5:72:65:07:e4:a5:be:3d:a8:f3:
                    db:e5:12:8e:0f:13:52:49:8c:f3:fe:b3:01:56:20:
                    1b:2e:48:8a:ac:3a:10:95:49:66:ca:d9:6f:5d:a8:
                    be:1c:a0:9c:a8:e7:d0:2a:51:86:f6:ba:31:b0:60:
                    d5:fa:34:2d:b8:53:16:d9:be:78:62:4e:05:96:1b:
                    97:f9:44:2f:39:7f:f4:2b:20:7f:70:6b:aa:93:da:
                    d4:7d:a7:52:fa:29:a8:d9:fb:53:56:4b:ff:a0:ee:
                    28:2a:a0:87:34:93:71:37:2b:23:00:8f:07:46:c9:
                    3d:72:48:c5:0e:14:e5:d5:ac:c1:6a:1c:81:36:59:
                    b4:3f:0a:47:bf:a5:01:9a:78:c6:fc:6f:d0:ab:a7:
                    10:ba:f7:bb:d3:60:ef:44:26:cc:71:93:be:db:20:
                    a2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:99:A7:26:46:F3:84:1D:03:5C:40:C1:24:D5:F2:8F:79:9D:57:E7
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:26:e4:78:25:a4:4a:a3:6d:23:50:df:50:67:0e:18:6e:ea:
         e5:db:4f:75:57:1e:ab:4c:42:30:39:67:2c:88:b4:b2:d5:81:
         9e:98:6b:7d:f8:90:73:32:51:17:34:2d:6d:30:75:18:16:b4:
         5d:cf:5a:a6:f4:a3:d5:13:29:f5:b2:e5:e8:0b:8e:31:90:8f:
         a3:c9:12:98:46:be:c5:72:f5:f5:dc:80:94:94:88:4c:51:8d:
         47:17:89:e4:6c:25:66:08:4b:5e:8b:10:b3:be:d8:a1:d4:d1:
         8d:f6:19:3f:d9:f9:1c:65:2b:50:98:f3:a4:01:ee:17:ee:b6:
         91:48:51:e4:1d:ad:4b:06:cb:5b:af:aa:27:84:24:17:43:33:
         df:fb:d7:f5:d3:85:ed:0f:92:7a:64:73:fd:1e:4c:23:40:e2:
         d4:c7:dc:fa:b2:cc:fe:61:ca:7f:0a:9f:54:cc:0a:0b:ff:d0:
         1b:bb:86:43:eb:7a:90:a4:9d:ae:f8:1b:4f:a1:9f:1c:4c:a6:
         03:de:d5:4b:cd:9f:4e:f7:2f:74:3a:81:20:15:d2:e9:21:8c:
         51:71:f2:ed:7f:9e:84:91:f5:ad:43:34:c5:aa:8d:e9:29:3e:
         ee:14:fd:ff:c0:1b:29:30:8a:b1:2a:f3:77:bb:7a:e1:5f:b5:
         b3:c2:ea:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:15 2025 by rpki-client