Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
File:                     SMuUpENJ-Y1Am33bmgU99K7xrd8.mft (raw, json)
Hash identifier:          zqSWOQdXmDSdvvqxIxzLgp0C5+Iy7oDS0xZIbxIQVgQ=
Subject key identifier:   7C:A4:4F:B5:C8:C8:A6:0D:68:92:8F:67:FE:9F:D5:09:BD:E7:09:49
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Certificate issuer:       /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial:       019DCFE3E7D96336C70201F9A56A8E0249FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
Manifest number:          11CC
Signing time:             Mon 27 Apr 2026 17:01:52 +0000
Manifest this update:     Mon 27 Apr 2026 17:01:52 +0000
Manifest next update:     Tue 28 Apr 2026 17:01:52 +0000
Files and hashes:         1: SMuUpENJ-Y1Am33bmgU99K7xrd8.crl (hash: JMqzP/Rx4R/qi6WHcD2spNehlgk4q2N5B7m8Kuui3LA=)
                          2: dvvd8BFnizdhbvkzk4JTGk-vGGA.roa (hash: KB+M+z0sgcKeuNslZAle5MJmCWCAbOChFQfMcbOTgYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 14:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:e3:e7:d9:63:36:c7:02:01:f9:a5:6a:8e:02:49:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
        Validity
            Not Before: Apr 27 17:01:52 2026 GMT
            Not After : Apr 28 17:01:52 2026 GMT
        Subject: CN=7ca44fb5c8c8a60d68928f67fe9fd509bde70949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:42:42:3e:58:57:0b:5a:7f:d1:8e:c7:1e:e1:
                    10:38:b4:75:62:05:e6:af:d8:7f:f4:ab:cb:dc:9b:
                    7c:b0:8e:3c:d2:5b:4d:31:53:51:a4:a2:52:ae:e7:
                    f7:26:d7:95:02:d1:68:b3:c7:05:97:6f:d2:29:7c:
                    8b:63:3e:d8:74:fd:f1:0f:f1:42:34:27:ae:6c:78:
                    68:6e:1c:2b:fb:cb:25:0b:a3:1d:cd:25:42:ce:55:
                    54:67:6f:b6:f2:5f:99:b7:fe:58:75:9d:d1:c5:fc:
                    25:bc:62:f2:aa:23:07:84:30:2a:24:e7:90:50:b8:
                    40:15:7f:3f:48:61:dd:da:f2:66:90:94:62:02:4a:
                    74:d8:20:a9:7f:d2:a5:6f:4d:ad:73:a0:2d:3d:5a:
                    04:36:8f:01:22:c7:aa:a6:38:bf:70:e7:c3:00:e6:
                    aa:a5:bd:ff:af:a4:06:a6:80:9e:07:07:82:8f:37:
                    2b:b9:96:f8:16:fa:d4:e8:a5:7a:31:8b:ee:b1:1c:
                    36:e7:76:30:12:c4:a1:2e:51:80:36:c2:cd:15:04:
                    45:c2:8f:9f:9b:4b:ac:41:d9:f5:ed:b6:b8:dc:db:
                    11:49:8d:55:38:da:1c:0b:e2:37:d4:55:65:83:13:
                    4a:07:f5:ef:23:51:45:76:ae:6d:1a:da:45:cc:c0:
                    5e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A4:4F:B5:C8:C8:A6:0D:68:92:8F:67:FE:9F:D5:09:BD:E7:09:49
            X509v3 Authority Key Identifier:
                keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d6:8e:45:c5:89:c7:95:aa:73:f4:af:18:30:02:ad:a2:85:
         16:88:5d:a3:ae:58:ea:07:dd:2b:37:6a:54:b1:92:3d:4f:b3:
         0b:4b:58:99:cf:cc:51:41:bc:19:c0:3e:85:54:a3:b4:32:71:
         f1:dc:e6:cf:10:82:23:b2:4c:d9:cf:1c:fe:55:8e:eb:52:ff:
         74:ab:c8:5d:7f:93:3f:f8:32:6c:6d:72:ed:fe:98:30:b4:bb:
         9e:a9:8f:be:4a:98:b9:5b:aa:c5:da:2c:3e:72:5d:f8:8c:97:
         ac:a1:fa:f3:cf:74:3f:73:64:1a:a3:c6:e8:5e:21:69:60:08:
         7a:02:66:9c:a1:c0:21:08:51:f2:c2:f8:79:6d:4a:3a:d2:7a:
         da:20:8d:cc:ca:65:64:19:b0:2a:d1:d8:26:63:b4:20:a2:18:
         98:c8:23:92:fc:27:1e:eb:c7:33:f9:17:07:9e:6b:41:41:b6:
         9d:f6:43:6d:6e:fe:d7:00:cc:d5:ea:eb:73:c1:ea:15:54:57:
         b5:8b:62:38:56:8a:bd:7e:d9:9b:e7:0b:6f:3b:8c:f9:d6:fa:
         4f:b2:00:c2:9d:93:fa:80:4e:6f:fb:99:79:c8:9b:a3:5f:1f:
         85:7d:13:45:d8:2c:35:10:bd:0d:d3:28:8c:9a:07:e2:2c:57:
         9b:b0:4c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:23 2026 by rpki-client