Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
File:                     smK_Id5ROFhZQWxMYIAB4gJaXSU.mft (raw, json)
Hash identifier:          yBFPaAUclFVmJJRkixMCoSms3l2HaWNFNOH7M+9RbMI=
Subject key identifier:   59:1B:0F:84:C8:71:6B:9D:E6:6B:57:88:69:92:5E:A5:C8:C1:FD:CC
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Certificate issuer:       /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial:       019EB8EACEB7B83F9157EB4EC71F9676F1A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
Manifest number:          11DF
Signing time:             Thu 11 Jun 2026 23:00:56 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:56 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:56 +0000
Files and hashes:         1: M11IJB8bYM5VLQpWuhTkLA-eqRU.roa (hash: GtfV5Jjc55Jz3csYoC7sGKLnKM4ruYz/290unnf4a14=)
                          2: YC9W-iVv9dOJhfbZw9HftS1KxPY.roa (hash: XcqcrEVWbFX4rVC3SqcfN+w6BqsgeWQjFifYF0iAu7k=)
                          3: smK_Id5ROFhZQWxMYIAB4gJaXSU.crl (hash: WT75dfc4bhjFUOY9Pf+gTxxepi4yrGZcxPOO3cgJZPo=)
                          4: vsB6EtIWBfXBSbWf1xHu_yS7HEM.roa (hash: m2D7wmr7MD2TyhQqE1y7M06AEP4itUhMqaGbuUx+bSE=)
                          5: zME1WFoRh6GqaPzADmS07nwFUXE.roa (hash: MBO6edszyU/3LqNcGj8Wt6ppE17UZEnfTFiAe2dy7Go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:ce:b7:b8:3f:91:57:eb:4e:c7:1f:96:76:f1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
        Validity
            Not Before: Jun 11 23:00:56 2026 GMT
            Not After : Jun 12 23:00:56 2026 GMT
        Subject: CN=591b0f84c8716b9de66b578869925ea5c8c1fdcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:8a:e3:56:5b:d7:c0:52:77:18:7f:15:f0:
                    95:76:1c:40:1f:93:41:58:de:fd:76:39:6e:32:bb:
                    70:aa:a4:0e:c9:81:a9:c7:b1:71:9b:db:53:31:3e:
                    32:2d:24:1a:ff:da:9e:61:4f:87:60:e7:58:70:10:
                    8f:13:59:8b:70:f4:67:9d:e1:fe:ea:75:1f:ec:0f:
                    2a:d5:13:59:aa:40:ce:ca:f4:44:0c:9e:b4:3b:d5:
                    c5:23:f8:6e:9e:0c:ba:ed:40:a4:05:b2:ce:75:32:
                    db:56:02:de:08:95:ee:18:c9:d0:60:13:a5:ae:a8:
                    13:05:ef:7c:13:bb:fd:ef:81:6f:57:34:77:6e:d8:
                    4c:6e:cd:7a:b4:91:94:d3:9d:fa:79:54:b3:cd:e5:
                    f9:8a:21:ec:53:cf:26:75:33:68:b8:34:31:53:05:
                    2c:90:be:40:08:b8:65:fc:4c:fc:42:f5:14:7c:4f:
                    59:bc:5a:7e:d9:20:de:da:11:f0:0d:54:e7:73:37:
                    d5:ef:41:9d:7f:93:92:a7:6e:01:71:c9:9a:0a:fc:
                    44:9d:aa:0d:bf:9b:d8:00:4c:ef:a7:2d:66:cb:0e:
                    4f:17:79:47:48:f4:9f:bf:e6:12:e0:86:45:ea:0b:
                    e9:42:3e:ed:af:58:c3:a5:b4:73:b9:ee:bc:49:2c:
                    b3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1B:0F:84:C8:71:6B:9D:E6:6B:57:88:69:92:5E:A5:C8:C1:FD:CC
            X509v3 Authority Key Identifier:
                keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:85:0f:86:29:fc:95:aa:2d:a8:5d:c4:42:fa:c2:e7:15:e0:
         7d:94:86:bd:7d:fb:d9:c6:ae:06:aa:b8:a7:00:52:37:89:98:
         c6:74:ab:ab:ac:1f:89:94:f6:38:81:43:a2:9c:1e:b3:04:81:
         0d:5d:4f:67:ef:1e:68:6f:1e:d7:63:0c:0f:41:bc:27:a6:86:
         dd:9f:24:73:7b:63:82:43:23:7e:88:51:8b:de:ad:c9:96:ac:
         95:4b:89:89:e5:13:85:a1:eb:f7:92:01:12:cb:9e:2d:74:22:
         6e:f9:8c:4a:14:5c:ee:7c:8e:94:26:6f:b5:a6:54:09:b1:49:
         29:a0:f4:3b:5e:89:1e:53:4e:81:1e:16:f3:92:af:5c:f0:8a:
         a0:af:82:b1:ad:f1:94:c6:ab:90:d5:8f:3f:9d:0d:6d:b0:b6:
         24:be:55:88:11:19:3e:ce:29:28:74:07:41:f8:7f:85:23:33:
         b8:41:2e:db:9c:e2:68:0c:8e:67:29:dd:1a:3b:a5:cb:e0:16:
         28:a7:ff:78:99:49:95:11:d1:c0:19:20:c0:e5:22:83:6c:9e:
         2f:e2:ec:dc:22:e8:68:5c:93:28:93:67:5c:c3:03:c5:31:84:
         30:e1:4a:6a:f3:51:b6:e9:f1:68:e6:a6:68:19:d1:0e:35:24:
         1b:b9:a6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:45:19 2026 by rpki-client