Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
File:                     B__SkDh900rAeQxrnX7pn-23gUk.mft (raw, json)
Hash identifier:          jAsuODNZIchLOlEDYWgZQEnwHuPk2MuIWMqIwS3P7Ts=
Subject key identifier:   7A:A8:81:CE:7E:2C:F9:45:A5:A8:71:9F:31:D1:01:F1:F2:B4:BF:42
Authority key identifier: 07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
Certificate issuer:       /CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Certificate serial:       01A0CA7E01FFBA72FF1052CFA463D5E4EF86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
Manifest number:          08C4
Signing time:             Tue 22 Sep 2026 19:00:50 +0000
Manifest this update:     Tue 22 Sep 2026 19:00:50 +0000
Manifest next update:     Wed 23 Sep 2026 19:00:50 +0000
Files and hashes:         1: B__SkDh900rAeQxrnX7pn-23gUk.crl (hash: HZ7hCT2jXZkbraRZPhgnKSby9AMUy0sIiOwJtOTwWNI=)
                          2: JMYckd3O4R94e0dIWCU9TcMBOwk.roa (hash: G3W5Mbj1PNpJeFm+I/0G1qoXk7VmJE2xhaUZNZtpyQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:7e:01:ff:ba:72:ff:10:52:cf:a4:63:d5:e4:ef:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
        Validity
            Not Before: Sep 22 19:00:50 2026 GMT
            Not After : Sep 23 19:00:50 2026 GMT
        Subject: CN=7aa881ce7e2cf945a5a8719f31d101f1f2b4bf42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:7a:2a:86:c1:1f:c0:49:4c:17:dc:60:57:
                    50:d4:70:c4:3a:5e:23:2b:55:3f:23:3b:f8:5e:66:
                    34:59:da:d1:78:19:e6:21:11:ba:53:17:7e:01:9d:
                    07:ef:94:66:2b:e0:07:4a:71:1a:eb:12:93:1e:e0:
                    18:0f:32:34:5c:13:59:21:7b:50:8e:38:b1:98:82:
                    b4:ca:90:51:5b:61:aa:d1:4c:44:fd:a5:63:3c:23:
                    a8:2b:59:86:86:6d:1d:07:50:39:51:e2:b7:af:94:
                    da:bb:9f:b4:f6:4e:eb:98:c8:ad:36:1b:d6:10:80:
                    aa:bf:9a:a5:c0:4e:e8:54:cd:d8:af:b0:ab:71:72:
                    13:d0:6f:f1:43:99:9b:85:d5:f8:ae:c6:f1:15:c8:
                    c0:f9:c1:46:0d:51:26:cc:af:e1:ab:2e:f4:44:fa:
                    a1:94:0d:58:6d:d7:7e:4d:d4:9e:30:1e:67:5b:4f:
                    eb:77:d6:be:dc:5e:c8:66:d3:7e:d3:a4:0a:7c:c2:
                    51:f3:b3:1f:21:7c:6e:a0:03:c0:94:62:ce:d1:fb:
                    d4:ef:b5:45:82:41:ec:36:c5:1f:07:ca:5b:21:d7:
                    21:01:5d:51:6e:40:29:f5:3f:4b:07:f9:23:07:13:
                    b1:8e:4b:7f:4e:7e:e9:a7:38:e9:10:81:8e:47:6c:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A8:81:CE:7E:2C:F9:45:A5:A8:71:9F:31:D1:01:F1:F2:B4:BF:42
            X509v3 Authority Key Identifier:
                keyid:07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b7:0f:ed:8d:88:3c:a5:ca:e7:e2:19:5f:d4:53:ed:b6:4a:
         45:5f:2e:fd:63:9d:6a:b2:3f:ec:41:a3:c7:d3:28:ac:d1:34:
         7f:6e:07:f8:bb:a3:a6:e4:7f:8d:0d:c9:b2:8d:21:d6:3f:a9:
         70:4a:ee:81:24:46:3f:b3:69:cb:0d:cc:6d:ba:32:e5:58:7d:
         5f:ba:2d:f4:b6:e4:85:be:75:eb:78:55:e1:01:a4:5f:12:37:
         c7:e4:e6:11:02:7e:0a:4e:4d:8d:34:cc:6b:45:a4:53:01:13:
         58:07:ca:c6:38:7f:cc:c7:90:98:93:de:79:e8:a6:42:be:41:
         3a:ba:eb:dd:e9:d3:f6:6d:f5:1a:18:91:3f:71:ed:09:3a:fc:
         7f:9c:69:97:e2:38:8d:d5:f2:ce:9e:ba:6e:f7:35:d9:e4:e9:
         d8:73:b4:2d:ba:ac:37:d0:e2:3d:84:3d:b2:b3:05:54:6c:29:
         cc:54:68:de:88:08:1f:10:84:65:ff:9e:c6:3e:1d:a1:7a:7d:
         2e:55:b9:ec:7a:02:53:6d:0f:cc:8d:f7:19:66:47:e5:bc:8a:
         12:5b:0c:ef:6c:1f:a4:14:d9:40:e0:f4:56:cc:fc:0d:00:47:
         20:63:39:d5:14:1e:46:78:f6:39:a9:30:99:77:58:da:36:14:
         5d:ba:bb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:57:13 2026 by rpki-client