Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
File:                     B__SkDh900rAeQxrnX7pn-23gUk.mft (raw, json)
Hash identifier:          ad/uCmuafZelUGVZ7xNE8B8vK372XX6FmK2zUoB1NRY=
Subject key identifier:   6B:7C:2A:F5:3A:C9:2A:FC:86:D1:FE:B2:E0:FE:33:A8:5B:8A:EE:BC
Authority key identifier: 07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
Certificate issuer:       /CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Certificate serial:       019FA8D012930F5EA36151C8A694FACA4689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
Manifest number:          082E
Signing time:             Tue 28 Jul 2026 13:00:36 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:36 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:36 +0000
Files and hashes:         1: B__SkDh900rAeQxrnX7pn-23gUk.crl (hash: DYm4BTdt5TP6kk3sLE/bwTp7rQElVciEiiZkZjAiSkc=)
                          2: JMYckd3O4R94e0dIWCU9TcMBOwk.roa (hash: G3W5Mbj1PNpJeFm+I/0G1qoXk7VmJE2xhaUZNZtpyQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:12:93:0f:5e:a3:61:51:c8:a6:94:fa:ca:46:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
        Validity
            Not Before: Jul 28 13:00:36 2026 GMT
            Not After : Jul 29 13:00:36 2026 GMT
        Subject: CN=6b7c2af53ac92afc86d1feb2e0fe33a85b8aeebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:4e:ca:e3:94:c5:61:ca:af:e7:4f:71:e4:
                    83:ae:e9:6b:d2:0a:6c:d1:22:5e:df:4b:f2:71:fa:
                    49:a1:5b:f3:ae:1d:6d:d5:72:4a:70:42:11:36:20:
                    3c:91:35:20:d9:67:56:d0:60:50:bd:f7:a6:11:d8:
                    12:68:db:cf:f7:16:5f:41:c6:e9:dd:79:91:4e:b0:
                    d4:ce:f5:cb:20:61:29:34:1c:83:98:4d:76:12:aa:
                    37:c9:7f:d2:32:04:92:5a:74:59:88:08:86:a3:0a:
                    6d:8a:f8:74:01:36:85:a7:31:cc:89:b9:c6:ad:44:
                    46:42:42:69:fb:fb:ae:83:98:79:e4:d0:88:54:02:
                    8b:5e:02:ba:6b:da:08:d2:74:af:a5:8f:48:09:00:
                    72:dd:c1:2f:aa:61:69:34:c0:f5:94:28:dd:5c:0a:
                    cd:14:be:8b:f6:14:08:6c:c8:8d:b0:80:5a:3a:1f:
                    f9:33:b2:ce:04:71:c6:30:c7:9d:98:74:78:a2:b5:
                    ba:31:9d:3b:fd:18:c0:fa:fb:0a:17:56:b5:5d:16:
                    77:87:fd:4c:06:c7:98:1a:1f:83:94:fa:7b:2c:94:
                    36:1b:7f:2d:97:12:9f:0c:f7:ae:37:53:63:d8:99:
                    29:78:39:ab:e3:7d:2b:46:00:3e:41:03:3f:de:f8:
                    a9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7C:2A:F5:3A:C9:2A:FC:86:D1:FE:B2:E0:FE:33:A8:5B:8A:EE:BC
            X509v3 Authority Key Identifier:
                keyid:07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:cd:da:fc:21:3a:f4:77:27:cd:5c:34:e2:71:be:e4:ec:bc:
         18:d2:54:3b:f2:29:c9:07:1e:da:b0:27:00:a8:46:29:d4:45:
         59:b1:90:81:76:59:41:b6:d0:5a:eb:c6:b0:19:b0:27:f3:c2:
         9a:11:25:ae:2b:51:10:0e:3c:d3:37:53:8b:74:d5:11:77:bf:
         af:2a:64:1b:8a:f6:6d:8f:71:9d:ec:51:27:c9:bd:6a:0d:49:
         3f:20:ff:47:ce:97:0e:22:95:67:87:8f:3d:6c:a6:ba:84:5e:
         d6:43:75:5c:c5:5d:30:7b:59:e3:99:ab:2d:4d:ce:92:2c:2f:
         6f:59:0d:d7:c1:13:99:48:89:7e:d9:47:6f:78:0b:fd:2a:4a:
         cf:05:1e:71:81:39:71:96:df:38:e6:80:a8:c6:3f:98:3c:42:
         99:bb:48:4f:70:0e:46:db:4b:82:67:47:fe:1b:45:4b:96:24:
         d6:27:aa:2d:f4:8c:47:03:3f:3e:ad:0d:95:68:a4:7a:a9:09:
         98:5c:4c:d5:3e:bd:3c:90:4d:91:98:e4:e3:bc:17:f6:d0:02:
         4c:5c:32:60:b0:bc:34:8b:f7:bc:94:e1:d6:0f:20:6a:fe:14:
         2a:fb:59:8b:2c:e3:a9:58:8c:19:6f:e8:08:df:27:01:72:f5:
         3b:a0:ff:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:02 2026 by rpki-client