Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          SnoXvkKbOiOSEUbadC7JdZAQcwXqzjhs3TjEaxU0GYg=
Subject key identifier:   D6:C4:B1:2B:62:57:69:80:95:7D:C8:96:EC:89:F4:0D:C9:8F:AF:8C
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       01987B9C2BFEF90FEA5668837C2A5407FF6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          0C77
Signing time:             Tue 05 Aug 2025 19:01:29 +0000
Manifest this update:     Tue 05 Aug 2025 19:01:29 +0000
Manifest next update:     Wed 06 Aug 2025 19:01:29 +0000
Files and hashes:         1: 9rmctfL499xq_XdP3NUoaQL9dt8.roa (hash: qmWMMe4np6q+yuy7dqi4TF4eBy7zv3FZoKf6q8wuZjY=)
                          2: A9GxPF4ifZ6rbABmHPjtyPKjmzE.roa (hash: W77hd6FGDraLnDkaoT1pKx2we4vpUTM+eeqG9pbSJEo=)
                          3: Ec-3R5lSbUg4nkiWhBSyhOomcnQ.roa (hash: 62Xy6RK/IfEoVB5QCyI3LUCOJ3jLbPB31KKuSd8Y3RM=)
                          4: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (hash: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=)
                          5: GAnOR60hpofm0szlGWoPLIE5k9U.roa (hash: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=)
                          6: HIg12NFUg7Eb_z2q4_r85AxcQMM.roa (hash: +6laq1iJCnub2N6uqVJ0BPm3G2zkWo723oA1FoMeiQM=)
                          7: Rtf-eqgW1jg7kzfL0pg8e63I-5M.roa (hash: IMz1jRwRZYT/rMcvQ4nY+BdL0NQuZlG7iPglwgBzyqQ=)
                          8: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: 6AWwKA9wOnAxBiUzcQ4Gt/WtnQ1z1qsTOO7raOdabQg=)
                          9: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (hash: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=)
                          10: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (hash: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=)
                          11: fXIkEQH3meKCBAEQ5mXacq0TJ20.roa (hash: rnj1CDmi4d3j1os+cxi9WBUMoxTK5VvPgUCy380Y0oI=)
                          12: o979ZrblSrorE9B9zxDq41HUGYA.roa (hash: kigJPd/hpDjSHjs7rzVTH64QUtXJbGCT3yl7CjOiV2A=)
                          13: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (hash: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=)
                          14: qGL-UUbfc2n5gMthqcDrY6oqiRI.roa (hash: fb04IIPduA2+NhPfcjizdhoAsQqWUl17Qoy+hMnSrwg=)
                          15: sYn86kZKw4G3fFE4L_epfK7wXCA.roa (hash: fdCIDuHioT3v4CHhE018xXjPJRG+/QyggQzYrvRftpc=)
                          16: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (hash: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=)
                          17: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (hash: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:2b:fe:f9:0f:ea:56:68:83:7c:2a:54:07:ff:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Aug  5 19:01:29 2025 GMT
            Not After : Aug  6 19:01:29 2025 GMT
        Subject: CN=d6c4b12b62576980957dc896ec89f40dc98faf8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:cf:a6:88:87:6d:4d:1a:12:5c:7f:53:a7:a3:
                    cb:c3:1b:75:98:f2:07:f7:97:de:f5:5c:ac:f5:9c:
                    18:a6:54:e0:bc:da:b5:05:11:83:a2:46:c2:ab:88:
                    9e:21:cf:05:38:f9:5d:2f:00:f4:19:fb:60:1c:d0:
                    c2:76:2b:d7:28:e8:29:15:0d:8a:f7:42:26:70:8b:
                    54:a0:79:12:f9:21:92:06:4e:f8:bc:67:de:7a:40:
                    c2:ba:1d:46:b9:b6:1c:f9:2f:f0:25:f1:5f:5a:f5:
                    fa:87:d8:05:06:c4:d8:8b:bd:de:71:85:a0:ab:3b:
                    cc:af:03:ef:7d:71:8f:fd:0b:0e:b8:d2:1a:72:df:
                    4e:09:ea:63:1b:d3:0c:ed:6d:d1:24:77:7c:9c:2b:
                    bd:e3:b3:7d:a4:57:68:7c:4f:5e:be:62:e9:0f:91:
                    92:bc:e9:74:70:56:c6:cc:42:e5:e1:ae:6e:1b:ee:
                    ee:33:f3:75:44:45:f8:99:ff:5f:85:4a:e9:8a:a2:
                    6d:77:7b:5e:a3:06:40:b6:a3:64:a6:39:b9:c4:ae:
                    79:d6:76:c7:be:ea:8e:70:53:31:d7:41:14:0c:89:
                    af:9c:eb:07:67:1a:34:a5:c0:42:a6:b8:32:9d:e9:
                    3d:70:f4:68:15:97:37:ff:27:7f:50:08:da:f9:8f:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C4:B1:2B:62:57:69:80:95:7D:C8:96:EC:89:F4:0D:C9:8F:AF:8C
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:82:da:f0:a9:d9:3a:92:f0:fc:47:fb:00:33:1a:18:f7:fe:
         b4:36:91:ff:6c:86:87:0d:89:27:a4:f7:a3:fa:cb:71:68:77:
         2a:14:50:d5:4a:0e:50:ec:3d:37:f9:6c:92:f2:3d:b8:b5:12:
         d4:ee:5e:ad:e3:d5:f2:5c:8c:eb:3a:43:fc:97:27:e3:90:9d:
         cd:b6:cb:9f:25:21:f4:99:55:29:0a:7b:7a:23:29:d2:3f:57:
         16:11:89:f2:20:5e:4a:ee:45:21:27:0a:c3:4d:72:e5:d4:86:
         66:6d:0f:f0:e5:82:d0:6d:2b:a0:92:31:a9:e1:ed:77:05:45:
         b7:dd:ec:1f:0b:86:81:56:d7:dd:8e:ab:ce:8f:9f:b6:d0:45:
         75:fe:78:7f:c6:8e:c9:9a:d5:72:6d:4e:44:c8:c0:61:5d:24:
         20:98:f7:56:36:30:4a:ef:dd:e0:e7:a7:d1:05:5c:5b:3d:06:
         34:43:95:dd:5f:31:00:d5:62:97:c1:ec:64:02:20:aa:cf:9c:
         6b:4c:ee:8e:35:38:8b:65:a7:40:b5:12:ab:09:99:1e:af:ff:
         79:af:28:8b:ae:cb:51:df:70:55:5c:33:d1:65:51:8f:4e:24:
         7d:fa:06:40:a3:e4:c9:5b:e7:26:a9:57:20:71:c3:4b:86:ea:
         d0:fc:7f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:06:19 2025 by rpki-client