Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File:                     SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier:          5+DBTdyaLS3MWT0PY2Y/vYG7sweN+E4PD6HjrE3wQ6Y=
Subject key identifier:   EC:B5:93:3D:D6:FC:93:A0:33:17:CB:67:96:D8:B2:1B:85:D7:BB:C1
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer:       /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial:       01A0E9D2BEEC3ABDE59B631D32D3A20BEC2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number:          1376
Signing time:             Mon 28 Sep 2026 21:01:37 +0000
Manifest this update:     Mon 28 Sep 2026 21:01:37 +0000
Manifest next update:     Tue 29 Sep 2026 21:01:37 +0000
Files and hashes:         1: 3EeJh95vWlbqkBMJsY8WJvQJZSQ.roa (hash: HKt/H+HcjtF1ud6gYULu77Dwf2Spakt+G/k1RzaE2tU=)
                          2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: AodC0os5+k28a/QyMVDluOF5s1L+IGc2/WqK1OmdcCA=)
                          3: wvUTboW8ZBUP6kKOMK2PMJNwHKA.roa (hash: qmo6aS/eJTUU20epsF5LshfZ02w0I+n/dRPdKj8OTLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:d2:be:ec:3a:bd:e5:9b:63:1d:32:d3:a2:0b:ec:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
        Validity
            Not Before: Sep 28 21:01:37 2026 GMT
            Not After : Sep 29 21:01:37 2026 GMT
        Subject: CN=ecb5933dd6fc93a03317cb6796d8b21b85d7bbc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ec:81:cc:14:50:d6:d7:f0:fc:19:ab:8a:d3:
                    52:41:e7:6c:ea:16:2c:7e:6b:56:cf:c5:f7:19:ba:
                    cd:cb:9c:49:fa:30:d9:14:dc:1e:80:e3:67:55:bf:
                    96:53:2e:1f:70:1f:3a:d3:60:e4:2f:ed:6e:e9:92:
                    c3:c8:21:0d:96:4d:7f:26:4b:65:1a:c5:3c:a9:ac:
                    24:d9:19:04:47:10:40:b3:06:4f:93:47:76:19:35:
                    8d:b3:e1:e5:dd:a0:92:d2:05:77:19:05:86:26:98:
                    96:8d:50:4e:36:3f:47:f6:7f:46:17:2f:c6:f1:01:
                    15:a7:84:77:9e:ec:0c:24:01:27:d3:01:bd:2a:93:
                    b5:4f:65:04:02:87:6c:72:ae:e4:0c:fd:d3:aa:fb:
                    60:7a:9d:45:b2:16:e4:39:89:75:0f:4d:da:ce:7e:
                    89:10:09:45:a2:62:a5:c9:1a:98:b9:ae:24:65:9d:
                    4a:17:d7:78:96:99:43:b3:0f:fc:8e:1e:3e:20:d3:
                    a4:98:c6:21:c8:a3:83:5c:ca:a8:31:27:97:52:b2:
                    09:58:0f:72:f3:5d:19:6b:0c:9d:4d:04:83:24:00:
                    7e:db:1d:9e:1c:88:8b:be:5f:ac:02:c2:a3:f4:5f:
                    54:e7:44:c1:29:40:c4:c2:fc:8c:92:af:76:76:2f:
                    7c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B5:93:3D:D6:FC:93:A0:33:17:CB:67:96:D8:B2:1B:85:D7:BB:C1
            X509v3 Authority Key Identifier:
                keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:68:04:a7:fb:61:c0:fd:cf:86:72:c4:bf:c1:a2:a5:73:7c:
         20:93:30:12:12:c3:11:fe:17:b9:8c:bd:7f:bc:ee:c0:81:01:
         9d:b8:63:1a:ec:9b:99:c6:bc:c6:c0:6e:b2:24:a5:f8:aa:d2:
         d6:7f:87:3a:4a:f3:01:9f:9b:63:98:7b:8f:b1:0f:8f:5b:ca:
         e6:3f:23:c5:5b:b9:05:6d:ef:c0:94:3b:92:4d:1b:16:f3:ed:
         5f:52:ba:aa:63:2a:ca:c8:76:2e:a3:b7:98:6b:90:66:89:5a:
         40:5c:16:00:34:e4:e9:bc:b0:42:8c:9a:b3:d7:2a:be:5b:1c:
         ab:52:cb:fb:dd:c4:48:8a:47:39:c8:d5:11:ef:8a:d1:99:7c:
         26:0f:8c:53:cd:7a:36:c7:4e:c8:7d:de:c5:08:30:1b:d0:45:
         ee:93:61:7d:20:8b:37:18:47:af:b3:e5:5e:cd:0c:d9:53:75:
         1d:cf:97:56:89:36:4c:e4:18:7a:06:17:53:4b:42:0d:1a:4f:
         f0:37:97:6a:c8:7c:6c:e8:5b:e7:38:14:c7:23:ce:3f:a9:1f:
         c4:1b:e4:ad:13:f0:8e:5e:8e:85:a2:fd:a7:76:03:db:7b:99:
         23:f9:f8:00:af:8c:13:c4:43:f5:6f:0e:c3:9a:f2:dd:26:3c:
         8b:f6:76:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:36:22 2026 by rpki-client