Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File:                     SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier:          b4uywAo/II8IYM5X9PSmXRcrukRUC9j/LCrZMItOezE=
Subject key identifier:   93:E5:37:BE:F4:3F:61:5E:A8:AF:86:F4:0F:27:19:FD:90:37:53:C6
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer:       /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial:       019D97E1635546E032A2CE8D789D6E449425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number:          11BA
Signing time:             Thu 16 Apr 2026 20:00:23 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:23 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:23 +0000
Files and hashes:         1: NIVw741XEPPSN6oP0Msosmkxzog.roa (hash: 81sIUsuDOEVQ3nze8u1y0++GrZqpK3rQuE99u/xjAtI=)
                          2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: 7fWM3GJjDUWYD/rhmu6996EFtB7l5TklvxWCQT5s6fE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:63:55:46:e0:32:a2:ce:8d:78:9d:6e:44:94:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
        Validity
            Not Before: Apr 16 20:00:23 2026 GMT
            Not After : Apr 17 20:00:23 2026 GMT
        Subject: CN=93e537bef43f615ea8af86f40f2719fd903753c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:c7:67:09:ca:a2:24:88:03:8f:26:8a:f1:
                    97:a0:92:43:6e:4c:e2:b5:ce:6c:58:c0:a0:9d:77:
                    63:6c:be:eb:b8:09:68:85:46:82:da:cd:17:53:b6:
                    43:c0:51:91:a8:50:5d:98:d1:58:28:66:70:4c:b3:
                    b7:c0:38:d4:d4:a1:81:2e:74:f1:f7:f1:54:ee:a0:
                    58:10:b8:9a:35:b0:e9:5b:29:35:24:06:0e:22:9e:
                    89:ad:56:93:b0:f4:a4:14:cc:50:54:b2:36:eb:67:
                    da:39:66:a3:70:66:cf:a9:3f:2c:8f:ff:99:d0:12:
                    85:2f:52:95:a7:38:60:45:63:96:a3:29:e7:82:ff:
                    62:e8:b4:68:80:97:25:ca:36:82:56:42:05:2e:aa:
                    ae:59:89:2b:3b:f2:6b:66:c5:94:3d:ec:2c:8f:19:
                    26:25:93:6f:ac:4d:6b:f3:54:1d:5d:14:51:1b:16:
                    c1:90:c1:68:10:72:de:9d:0c:04:70:88:2c:cc:29:
                    17:ce:09:3c:33:d7:71:99:91:c5:6f:4e:e5:67:81:
                    44:3a:a3:73:db:6a:a8:6d:52:24:f0:c4:d0:0d:01:
                    1a:75:c3:34:e6:80:5e:3b:b9:61:55:2f:10:c3:a0:
                    de:10:a0:1e:93:29:84:8d:99:ad:7b:34:df:f0:2d:
                    8d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E5:37:BE:F4:3F:61:5E:A8:AF:86:F4:0F:27:19:FD:90:37:53:C6
            X509v3 Authority Key Identifier:
                keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e7:d9:b7:a4:a5:64:ae:b8:42:65:22:5b:9e:1f:00:37:34:
         1a:bd:08:ed:19:4d:83:27:06:4f:7e:e1:49:ba:1c:92:05:8c:
         3c:e0:56:9e:df:1a:a8:fd:45:11:ee:df:db:c6:31:36:be:b3:
         7e:c0:34:36:3f:e9:ab:b2:c2:1a:b5:d3:79:3c:7c:19:c5:c7:
         41:94:a9:cf:13:74:bb:38:38:cb:28:01:5d:82:42:eb:ae:6e:
         e8:f1:12:00:6c:e5:b5:b3:93:53:d5:22:7b:1a:0a:f8:2f:61:
         8c:ba:c7:54:32:e9:f6:0c:55:fa:46:b5:f8:bf:0b:51:73:19:
         10:be:75:dd:15:a0:10:d0:8f:89:43:31:f7:15:83:3b:20:4b:
         23:f5:d1:14:45:99:26:c7:4b:19:a1:e9:09:eb:3e:88:7b:35:
         49:d7:19:4f:99:99:a8:4f:e2:a8:6d:d0:11:41:b8:62:93:3b:
         3e:d7:c2:f4:eb:45:fd:f6:f9:85:0a:24:70:2f:6f:cf:ab:37:
         db:4f:1d:a8:15:1b:73:d5:1e:fc:ad:5c:7b:94:d2:10:03:bc:
         2b:6d:26:4b:68:ab:39:96:2d:8e:fd:4f:65:82:b8:a1:92:ef:
         dc:c9:d3:28:0c:55:b4:f9:91:48:12:62:6e:d5:72:e2:7b:fb:
         28:53:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:40 2026 by rpki-client