Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File:                     SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier:          z2LP82iqYDBpOojLy6zAQP08ip4LkzPDtg/lsCMIzrg=
Subject key identifier:   05:DB:56:0A:00:A9:CC:10:5D:3C:BB:8B:5A:6A:17:23:3A:B3:5C:B8
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer:       /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial:       019CAA58B48CB12774F5369ECA1BBA3E0F7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number:          113F
Signing time:             Sun 01 Mar 2026 17:01:05 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:05 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:05 +0000
Files and hashes:         1: NIVw741XEPPSN6oP0Msosmkxzog.roa (hash: 81sIUsuDOEVQ3nze8u1y0++GrZqpK3rQuE99u/xjAtI=)
                          2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: GJmD1fufDHNSZC/JJVOgjqVEZtFqYo+3pSlld7h7QNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:b4:8c:b1:27:74:f5:36:9e:ca:1b:ba:3e:0f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
        Validity
            Not Before: Mar  1 17:01:05 2026 GMT
            Not After : Mar  2 17:01:05 2026 GMT
        Subject: CN=05db560a00a9cc105d3cbb8b5a6a17233ab35cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6e:c2:b9:18:de:45:2f:ea:c6:44:1a:c8:3d:
                    18:3c:38:79:aa:63:55:15:79:8f:43:05:43:f2:62:
                    ad:04:fe:9d:07:db:a8:c3:50:ce:60:d8:f8:a9:23:
                    d2:b7:8d:d4:97:5c:8f:d8:c3:9f:9d:90:d7:fc:5f:
                    31:5c:6b:a8:c5:27:41:a9:ed:f7:26:40:53:f0:a4:
                    c9:1d:93:07:23:78:ac:de:95:37:56:cd:a7:0a:2c:
                    13:76:dc:99:08:8b:08:37:84:98:fc:22:08:12:d8:
                    ba:b3:3b:1c:b0:09:5f:b9:e7:f3:54:f3:48:1f:eb:
                    ba:5f:30:96:a6:d6:89:f4:b6:ed:a7:18:8f:2e:5a:
                    dd:d5:5b:8c:91:b5:04:b4:75:17:90:9e:0d:1a:9f:
                    e8:e0:0b:9d:1b:f8:b2:f7:7e:e2:74:57:c8:3a:8a:
                    b0:02:5a:26:5d:46:4c:b7:e2:c3:e3:2d:5b:a2:b5:
                    b7:b2:10:3f:82:16:47:ca:d1:cf:6f:4d:97:ec:d3:
                    36:76:92:3c:11:2e:d1:f3:55:e0:44:80:ec:80:cf:
                    bc:bc:1c:df:5c:70:69:f5:59:d9:ca:e6:d9:bb:41:
                    07:cf:fa:d0:e7:af:2f:f8:de:4b:46:42:78:77:44:
                    02:39:8b:11:64:fa:06:c6:3a:73:2f:a1:e3:1a:93:
                    aa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DB:56:0A:00:A9:CC:10:5D:3C:BB:8B:5A:6A:17:23:3A:B3:5C:B8
            X509v3 Authority Key Identifier:
                keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:41:ef:cb:db:42:94:6f:aa:d9:bf:30:f1:62:e3:89:0e:4a:
         01:03:25:8e:1f:1c:32:56:f3:c6:b4:40:1e:f8:0c:06:78:7d:
         b8:53:d3:62:9f:d0:9c:a9:22:ca:c1:1c:b8:ae:ff:48:54:08:
         8b:4e:62:8e:f3:86:ea:00:f5:7a:f6:a4:b0:e5:d0:94:71:ff:
         ae:55:78:bf:46:e2:e5:86:db:cf:3c:96:7f:3c:ec:1e:f3:dc:
         e8:a6:3b:8d:0c:93:ff:c8:6e:3d:52:52:31:50:96:9c:36:68:
         2b:05:9e:e7:7a:77:cd:22:f0:7d:4d:90:33:23:07:cc:b6:33:
         30:b3:d3:0f:5c:19:b7:d4:8b:7f:16:16:78:af:40:b4:b4:00:
         e5:93:6d:26:7a:ee:20:8a:73:cf:c4:e3:98:ab:63:b3:6d:b3:
         59:7f:4d:f5:1a:ee:7f:59:22:75:15:7a:7e:03:1f:61:c5:70:
         4a:c4:ca:e0:92:09:6f:d9:c5:0d:3d:ac:18:66:a8:12:4d:ae:
         4c:60:2d:65:7c:96:f2:dc:c9:07:a7:31:f8:26:57:04:a0:57:
         e0:06:a4:a3:a7:cd:2c:22:25:3a:c9:ed:da:67:aa:91:23:26:
         41:7d:99:88:6a:61:99:66:8d:7a:64:98:a8:6c:e7:75:f4:bd:
         12:2b:b8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:42 2026 by rpki-client