Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
File:                     smK_Id5ROFhZQWxMYIAB4gJaXSU.mft (raw, json)
Hash identifier:          AI3vAmHTeLS08PknSpnq8Ne529lHEXnzjasbAd4GECY=
Subject key identifier:   4E:C6:DF:61:4F:97:FC:F5:FD:A9:7E:F8:C9:14:CF:01:91:66:13:2D
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Certificate issuer:       /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial:       019DCF3E5C79221ECB378E9A6187DF84F47B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
Manifest number:          1166
Signing time:             Mon 27 Apr 2026 14:01:03 +0000
Manifest this update:     Mon 27 Apr 2026 14:01:03 +0000
Manifest next update:     Tue 28 Apr 2026 14:01:03 +0000
Files and hashes:         1: M11IJB8bYM5VLQpWuhTkLA-eqRU.roa (hash: GtfV5Jjc55Jz3csYoC7sGKLnKM4ruYz/290unnf4a14=)
                          2: YC9W-iVv9dOJhfbZw9HftS1KxPY.roa (hash: XcqcrEVWbFX4rVC3SqcfN+w6BqsgeWQjFifYF0iAu7k=)
                          3: smK_Id5ROFhZQWxMYIAB4gJaXSU.crl (hash: T3dVXSMh+QCAfrni5J+qm7K9+lVrIXfVWZrMwWO2qm8=)
                          4: vsB6EtIWBfXBSbWf1xHu_yS7HEM.roa (hash: m2D7wmr7MD2TyhQqE1y7M06AEP4itUhMqaGbuUx+bSE=)
                          5: zME1WFoRh6GqaPzADmS07nwFUXE.roa (hash: MBO6edszyU/3LqNcGj8Wt6ppE17UZEnfTFiAe2dy7Go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:3e:5c:79:22:1e:cb:37:8e:9a:61:87:df:84:f4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
        Validity
            Not Before: Apr 27 14:01:03 2026 GMT
            Not After : Apr 28 14:01:03 2026 GMT
        Subject: CN=4ec6df614f97fcf5fda97ef8c914cf019166132d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:42:3d:55:3e:6f:10:a4:e4:19:d6:86:c5:
                    f3:19:e9:b8:f0:2d:10:93:71:b7:94:48:70:ef:92:
                    d0:e2:62:6f:b6:47:f1:fa:cd:a8:89:34:fc:b5:4d:
                    27:68:2a:e7:41:38:28:31:cc:ac:29:20:52:e5:8b:
                    49:3b:55:35:60:1c:9f:3a:ce:8b:7a:7f:c9:d6:77:
                    dd:0b:73:b1:1d:c7:67:a5:a3:e1:ee:08:04:6a:18:
                    90:03:0e:7b:db:c4:c0:f0:61:ee:3c:25:a8:f2:ce:
                    34:68:25:61:f9:a2:dc:82:ad:0a:5b:94:72:54:9e:
                    0b:16:7d:0e:b0:65:23:5e:b8:fd:18:b0:19:ef:2a:
                    ba:62:de:33:38:9f:d0:9d:03:fe:4a:98:ee:83:8f:
                    44:99:c6:4e:f8:5b:9c:52:e1:49:e2:6c:fe:d7:f4:
                    3a:39:f1:3d:d7:d4:15:8b:84:31:96:9a:20:53:2a:
                    b2:4a:91:7a:d3:cd:ae:f0:9a:a5:ee:c0:17:c7:bd:
                    c7:3a:e0:96:66:4a:df:36:01:64:95:1f:b3:b0:a6:
                    53:65:d2:06:b0:78:c5:d7:66:d6:e2:61:8a:62:d5:
                    9a:ad:14:9b:65:c3:59:a9:c3:88:65:0c:3b:f3:fc:
                    e8:15:20:ec:e7:27:74:66:b5:75:6c:51:28:96:f4:
                    85:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C6:DF:61:4F:97:FC:F5:FD:A9:7E:F8:C9:14:CF:01:91:66:13:2D
            X509v3 Authority Key Identifier:
                keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:1e:d1:59:e8:eb:84:71:68:31:71:d0:6e:48:d5:26:dd:50:
         f5:97:e1:17:50:28:57:f5:2d:6f:ae:2d:1b:af:c9:ae:35:72:
         74:ec:77:64:36:67:38:40:f1:f3:b3:17:31:e2:4e:3f:3e:b3:
         3d:a2:ca:68:d1:75:1c:94:bb:04:96:bf:ba:99:e4:80:57:d3:
         b5:d7:03:b6:40:46:8c:5b:7c:30:37:e2:22:6f:ca:b4:60:e0:
         dd:c6:91:10:46:6a:46:ee:8e:48:c2:bf:cd:1b:e4:9d:46:a0:
         97:49:07:d3:ba:35:95:31:f0:e9:90:47:e2:95:1c:ee:c9:29:
         61:0c:7a:29:c8:5d:3b:89:ae:80:5e:d9:30:98:45:7e:62:07:
         54:d9:06:08:3a:8a:d8:bf:3d:de:30:6a:47:12:d8:01:3f:eb:
         1d:29:77:aa:18:26:61:50:82:f1:c7:6f:1a:f4:87:e8:c2:3d:
         87:92:5f:bf:de:5f:d6:cf:45:be:c3:2f:e9:e1:38:86:43:6b:
         e7:9a:e8:18:72:b8:10:15:10:1b:64:90:97:45:3c:65:e6:c4:
         2b:b2:42:e6:1b:96:dd:3b:ac:c3:0a:10:c4:d0:16:54:8d:99:
         d7:49:dc:d3:2d:6b:0e:a9:b4:55:76:ad:a7:dd:d9:32:57:ae:
         74:0b:3a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:34:38 2026 by rpki-client