Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
File:                     smK_Id5ROFhZQWxMYIAB4gJaXSU.mft (raw, json)
Hash identifier:          CB5/zXuExLmrKc3F1ifGEK/sVdp25IzHz9Cv6oc3h94=
Subject key identifier:   A2:20:F5:5B:82:28:F3:B5:9D:17:9B:E3:3A:BF:43:A1:FB:9B:2D:3A
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Certificate issuer:       /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial:       019FA29713248C864C78C680ABD817DD977F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
Manifest number:          1258
Signing time:             Mon 27 Jul 2026 08:00:37 +0000
Manifest this update:     Mon 27 Jul 2026 08:00:37 +0000
Manifest next update:     Tue 28 Jul 2026 08:00:37 +0000
Files and hashes:         1: M11IJB8bYM5VLQpWuhTkLA-eqRU.roa (hash: GtfV5Jjc55Jz3csYoC7sGKLnKM4ruYz/290unnf4a14=)
                          2: YC9W-iVv9dOJhfbZw9HftS1KxPY.roa (hash: XcqcrEVWbFX4rVC3SqcfN+w6BqsgeWQjFifYF0iAu7k=)
                          3: smK_Id5ROFhZQWxMYIAB4gJaXSU.crl (hash: rKXozfoNLdZZZXnvwrj6DgZZ8YWdYg63u1rf/D0Vtw0=)
                          4: vsB6EtIWBfXBSbWf1xHu_yS7HEM.roa (hash: m2D7wmr7MD2TyhQqE1y7M06AEP4itUhMqaGbuUx+bSE=)
                          5: zME1WFoRh6GqaPzADmS07nwFUXE.roa (hash: MBO6edszyU/3LqNcGj8Wt6ppE17UZEnfTFiAe2dy7Go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:97:13:24:8c:86:4c:78:c6:80:ab:d8:17:dd:97:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
        Validity
            Not Before: Jul 27 08:00:37 2026 GMT
            Not After : Jul 28 08:00:37 2026 GMT
        Subject: CN=a220f55b8228f3b59d179be33abf43a1fb9b2d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d5:d5:c4:82:17:7a:a0:80:97:b8:18:c4:f6:
                    96:db:58:97:7c:f6:cd:bf:9f:07:83:c7:24:4f:90:
                    ea:46:7a:e2:f4:07:ea:a8:9a:09:02:e3:a9:a9:32:
                    b5:36:10:f1:61:f8:6f:5e:e6:b1:06:63:c6:14:f4:
                    56:ae:92:c2:0f:4b:d5:8f:2f:2a:e0:fc:18:2a:16:
                    af:f4:5b:49:8f:4d:e6:40:e2:5d:38:d6:27:03:01:
                    54:67:88:27:5a:7f:4c:91:20:8e:37:24:65:56:2a:
                    45:18:b7:75:07:fb:23:ef:3a:d1:d3:57:b7:52:9f:
                    de:9c:5f:2d:2f:02:c6:70:76:13:64:90:a7:3b:dd:
                    1c:11:92:aa:20:8c:08:6e:1f:cc:26:72:bd:70:dd:
                    23:b1:3b:0b:ff:b5:cc:16:44:35:9d:a4:d5:51:cd:
                    97:2a:6a:d3:53:ed:63:4c:a2:51:08:68:56:b6:64:
                    44:1b:a7:55:18:66:33:04:8a:01:13:17:0a:fa:ce:
                    49:9c:c2:4c:fa:eb:83:1c:55:d8:e6:25:ce:87:93:
                    ee:1a:38:7a:9d:72:6e:ed:41:e8:50:19:89:13:90:
                    5b:0e:c1:c7:2f:46:f2:9d:b8:54:bf:68:7e:f8:93:
                    0e:86:40:46:18:fb:dd:34:bd:f7:d2:e1:2c:8b:2e:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:20:F5:5B:82:28:F3:B5:9D:17:9B:E3:3A:BF:43:A1:FB:9B:2D:3A
            X509v3 Authority Key Identifier:
                keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:dc:ab:7b:7d:ba:36:6e:92:ec:de:10:32:af:3c:1e:57:c1:
         73:22:d4:99:5f:19:31:13:ac:94:c4:f2:27:90:9c:5c:5b:d8:
         03:4e:71:82:0d:01:c5:69:9a:d1:6c:84:9e:63:48:a4:55:5e:
         50:3e:ba:b9:90:0d:f3:20:82:76:5f:75:38:00:68:00:4b:b0:
         ea:a2:a3:34:b9:59:57:fe:da:d1:b9:8a:7f:d0:ea:4b:e3:47:
         10:bf:1d:9c:86:88:49:7e:7a:7b:61:68:8f:38:3d:ad:7d:c1:
         99:39:ac:87:12:3b:58:a0:dd:27:93:d3:a1:0c:78:a2:f0:1c:
         2b:39:01:81:18:25:da:9c:ce:95:7b:73:38:4a:25:07:46:b8:
         79:83:48:2d:30:ee:cc:83:16:1f:32:c1:0b:35:d6:57:b1:9e:
         21:e7:0f:5e:d5:38:1e:1a:60:7e:51:1e:ae:d6:3f:66:1e:44:
         61:18:67:a7:16:d3:bd:93:31:77:06:70:f7:67:1a:f9:e0:b6:
         23:f9:d2:e5:54:b0:b1:29:29:f6:ad:53:d2:01:d7:1c:d4:0a:
         eb:6d:59:a2:a6:e6:59:52:d7:ab:8e:24:94:5f:b3:af:cb:85:
         eb:5e:1c:12:30:25:a6:4b:ed:fa:57:97:8b:35:70:ec:0f:23:
         aa:c2:09:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:53 2026 by rpki-client