Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
File:                     SMuUpENJ-Y1Am33bmgU99K7xrd8.mft (raw, json)
Hash identifier:          bI7gnLG8ApkCb0ulIp2McTQ6p1b4ii3nReO/QqmtsbI=
Subject key identifier:   2F:AD:54:77:48:A0:60:28:46:FA:48:3E:54:04:AE:B5:31:80:07:80
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Certificate issuer:       /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial:       019FA33BB9E56697B326C9871353186E9F38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
Manifest number:          12BE
Signing time:             Mon 27 Jul 2026 11:00:28 +0000
Manifest this update:     Mon 27 Jul 2026 11:00:28 +0000
Manifest next update:     Tue 28 Jul 2026 11:00:28 +0000
Files and hashes:         1: SMuUpENJ-Y1Am33bmgU99K7xrd8.crl (hash: DgwQwJYHKmHxA3Z3sUi7/ZsxluUMxiZXnxHGlHpuq/I=)
                          2: dvvd8BFnizdhbvkzk4JTGk-vGGA.roa (hash: KB+M+z0sgcKeuNslZAle5MJmCWCAbOChFQfMcbOTgYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:3b:b9:e5:66:97:b3:26:c9:87:13:53:18:6e:9f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
        Validity
            Not Before: Jul 27 11:00:28 2026 GMT
            Not After : Jul 28 11:00:28 2026 GMT
        Subject: CN=2fad547748a0602846fa483e5404aeb531800780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6c:d4:9f:b4:3f:23:e8:c6:94:fe:b2:53:06:
                    06:5c:b8:d6:f1:d9:c5:20:0c:30:54:42:38:ea:e3:
                    38:cd:60:58:65:b2:ce:78:11:d4:23:18:90:9e:59:
                    b3:f0:ba:f5:e0:a4:67:12:84:dd:7a:8e:8e:f2:81:
                    3b:6d:7e:2f:77:fd:6a:52:f4:78:4a:25:37:94:d7:
                    03:3e:4d:12:d0:71:dd:81:d6:40:a8:18:3e:9e:16:
                    dd:da:c3:da:f1:d8:9b:5d:3a:c6:03:86:3b:66:30:
                    f5:dd:29:1a:c2:42:41:37:24:a5:0e:73:7e:37:0d:
                    f8:a1:5d:73:49:36:b4:16:e8:4e:a7:51:8e:6d:f1:
                    b9:b9:cd:aa:a4:0d:56:ef:82:75:0d:46:12:d7:5b:
                    f2:55:39:e6:d2:31:63:2d:1a:f5:a5:a5:95:5c:db:
                    7a:54:69:b8:62:b0:62:c5:e0:60:83:ba:a4:87:28:
                    1d:b3:61:f6:b3:33:9a:2d:51:5f:a3:1b:19:61:15:
                    54:28:d8:d7:32:49:8b:3b:cf:a3:9f:b6:23:a9:23:
                    60:c6:0b:57:49:6a:37:af:d8:44:de:76:5d:34:55:
                    5c:d6:dc:35:8c:78:cb:b7:42:78:de:1d:8a:ca:38:
                    9a:39:c7:80:53:ca:36:1d:0f:7f:41:19:86:89:77:
                    05:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AD:54:77:48:A0:60:28:46:FA:48:3E:54:04:AE:B5:31:80:07:80
            X509v3 Authority Key Identifier:
                keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:28:78:c9:59:d2:ba:b2:92:5e:ec:ce:8e:57:04:34:09:5a:
         c9:a0:0a:9f:5a:e2:af:47:b3:22:f9:6c:23:f9:ed:c7:71:17:
         3a:c1:1e:6b:48:34:97:d8:30:fc:79:19:e3:a2:8b:1b:47:bd:
         df:4a:68:04:49:95:77:13:b4:89:79:3b:f9:13:09:7c:af:fe:
         07:58:0b:a3:95:fa:21:b5:ee:d1:6f:14:f2:e9:9d:df:fc:02:
         18:89:eb:5f:71:7e:e5:92:d0:9c:fa:1e:58:9c:ce:af:4a:1e:
         96:0a:e7:55:3f:b3:8f:5d:73:7c:a3:84:de:95:23:b2:7b:3f:
         91:89:e1:8c:90:8e:a8:76:4e:61:69:b5:45:77:81:75:03:de:
         88:fa:c4:a3:36:8f:fb:a2:e2:38:f0:2e:11:d1:6f:10:a5:0c:
         1f:85:24:80:bf:e4:75:a7:b8:3e:78:ab:f2:0e:0a:ff:8b:08:
         58:44:90:e8:b5:22:cd:b6:3c:a5:83:fa:4e:f4:12:54:12:94:
         fe:8b:b2:d5:8f:c8:0b:24:05:76:16:0d:bb:98:6b:f5:1a:01:
         df:ee:59:46:a9:b7:e5:9a:ee:57:95:a7:54:73:fa:e8:7e:b4:
         b5:a5:b4:c9:f3:0b:48:66:34:2e:e4:39:be:b9:df:29:a3:b4:
         ab:60:3d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:08:14 2026 by rpki-client