Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
File:                     smK_Id5ROFhZQWxMYIAB4gJaXSU.mft (raw, json)
Hash identifier:          Q0ZVXXCKPSP5KnGXwCeAc7aPgSfTMttZAhmhNQDzX4w=
Subject key identifier:   65:5D:E3:EF:6C:60:79:37:37:90:83:79:B5:3A:D1:1C:63:1C:E7:1A
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Certificate issuer:       /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial:       019CD9FB61D64920B26A1589CC84513BF4C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
Manifest number:          10E7
Signing time:             Tue 10 Mar 2026 23:00:56 +0000
Manifest this update:     Tue 10 Mar 2026 23:00:56 +0000
Manifest next update:     Wed 11 Mar 2026 23:00:56 +0000
Files and hashes:         1: M11IJB8bYM5VLQpWuhTkLA-eqRU.roa (hash: GtfV5Jjc55Jz3csYoC7sGKLnKM4ruYz/290unnf4a14=)
                          2: YC9W-iVv9dOJhfbZw9HftS1KxPY.roa (hash: XcqcrEVWbFX4rVC3SqcfN+w6BqsgeWQjFifYF0iAu7k=)
                          3: smK_Id5ROFhZQWxMYIAB4gJaXSU.crl (hash: L+WQ3JvZ8GXXnXPdZfekYx5pdUV0wcNEGW02zzWv9O8=)
                          4: vsB6EtIWBfXBSbWf1xHu_yS7HEM.roa (hash: m2D7wmr7MD2TyhQqE1y7M06AEP4itUhMqaGbuUx+bSE=)
                          5: zME1WFoRh6GqaPzADmS07nwFUXE.roa (hash: MBO6edszyU/3LqNcGj8Wt6ppE17UZEnfTFiAe2dy7Go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Mar 2026 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d9:fb:61:d6:49:20:b2:6a:15:89:cc:84:51:3b:f4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
        Validity
            Not Before: Mar 10 23:00:56 2026 GMT
            Not After : Mar 11 23:00:56 2026 GMT
        Subject: CN=655de3ef6c60793737908379b53ad11c631ce71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:6e:a3:7f:6f:6c:d9:c8:09:94:1a:69:68:
                    19:82:cc:b3:cd:fb:a0:eb:ae:65:02:56:d1:7d:52:
                    f3:87:72:5c:ee:b5:85:20:57:d0:24:61:0d:d7:f9:
                    09:e8:9a:40:98:09:f9:f3:5a:bc:2c:a0:5b:0b:51:
                    19:20:fa:76:b5:f4:fd:a9:a8:6e:61:be:ae:c6:76:
                    ec:02:3a:9d:23:13:42:72:ad:c5:14:98:f7:09:3f:
                    95:9f:8c:f6:2a:f6:4c:4a:b2:07:f6:84:2a:fb:54:
                    9a:0e:4e:d5:40:dc:8e:e1:13:b4:97:da:20:4b:39:
                    36:c1:9b:c9:fa:39:03:6d:70:9a:0c:74:eb:d7:48:
                    e1:b2:5c:29:50:d6:1b:a4:29:0c:37:10:17:cd:47:
                    15:fb:09:21:9d:a1:62:30:03:de:da:27:7a:0f:99:
                    73:05:c2:80:23:56:6c:a3:89:15:4d:2f:11:cf:b5:
                    39:a2:af:e8:7d:5a:a8:90:ba:77:08:43:4d:64:ee:
                    11:51:78:46:a5:ca:be:e2:31:d1:8a:a9:7d:42:9a:
                    c7:d1:a0:2a:61:7d:2b:50:19:23:0e:b1:8d:5b:14:
                    d4:c7:bf:ea:3b:df:f7:c6:51:b8:3a:79:96:5c:5b:
                    34:34:91:97:cf:36:24:44:67:a2:f8:7b:e7:08:21:
                    d2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5D:E3:EF:6C:60:79:37:37:90:83:79:B5:3A:D1:1C:63:1C:E7:1A
            X509v3 Authority Key Identifier:
                keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:32:cc:f9:49:d1:86:97:3c:76:e7:c6:9a:e8:34:45:c2:aa:
         41:7a:94:d9:fd:72:5b:2b:ab:e9:d4:5e:34:bd:7b:c5:82:14:
         47:9c:58:ec:73:f8:31:e7:a4:85:51:c9:2a:8a:ef:bf:1d:81:
         4a:4e:45:53:47:66:5b:e8:b2:94:56:19:81:08:1b:bd:cd:2f:
         20:bf:19:62:82:53:85:2d:31:30:de:70:21:ba:05:21:f4:52:
         ad:8b:28:95:8f:46:18:bd:ef:a7:8d:a4:17:52:08:a7:c9:a5:
         e7:90:50:4d:a7:1f:df:4f:6c:9d:68:13:5f:80:c8:19:95:ba:
         83:f1:e0:24:c2:45:5f:70:34:00:ce:03:13:2f:8d:c4:3c:ae:
         5b:28:dc:b5:ae:30:44:fc:70:71:3d:65:20:e1:1e:04:00:38:
         ca:ce:23:69:38:86:7f:14:2d:8f:17:88:57:7e:42:79:7a:18:
         f3:a3:56:ac:70:08:7a:ac:4e:de:13:4f:76:f2:87:8d:e1:00:
         49:1b:d0:86:d8:11:30:37:35:bd:66:51:e5:31:c4:64:fd:d7:
         34:bb:2b:16:46:4b:b1:7e:17:71:db:4c:92:07:5d:a8:7e:7e:
         93:10:d5:ac:ad:02:6d:8a:d1:5a:60:93:ea:1c:35:c1:c5:a2:
         92:87:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 05:55:54 2026 by rpki-client