Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File:                     SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier:          PvKONE4uOSQxsd8LGYPBKuchowAZJYjQq/GCzyyvzRI=
Subject key identifier:   1E:8B:AF:62:DE:A5:2E:0E:1C:01:35:0B:B9:94:35:66:EE:0E:B3:8E
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer:       /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial:       019E2B82BC220D7D39DDD9A404748E5AA8E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number:          18A6
Signing time:             Fri 15 May 2026 12:00:48 +0000
Manifest this update:     Fri 15 May 2026 12:00:48 +0000
Manifest next update:     Sat 16 May 2026 12:00:48 +0000
Files and hashes:         1: JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa (hash: SZmqmdymrljO2hpbQb1uMliK1C8iABzhCOgMWLG7xTw=)
                          2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: LF8CEzCzQfdjkIMtlIIu6xDCtWFh1Gs7lV2Q6RThzlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:82:bc:22:0d:7d:39:dd:d9:a4:04:74:8e:5a:a8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
        Validity
            Not Before: May 15 12:00:48 2026 GMT
            Not After : May 16 12:00:48 2026 GMT
        Subject: CN=1e8baf62dea52e0e1c01350bb9943566ee0eb38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:f2:21:22:dd:dd:6e:ff:da:47:66:9d:b2:
                    56:81:bf:e4:5f:23:f6:0a:68:9d:96:2d:f0:82:09:
                    ec:01:27:2b:e9:55:73:23:65:c2:6e:1a:20:89:89:
                    5b:a4:7c:f2:09:c5:5c:83:a9:88:16:9f:2f:72:fb:
                    25:6e:d5:c0:58:d5:7a:7b:61:d6:b0:a4:8c:05:05:
                    6c:c3:9c:a1:96:6d:37:b0:7e:de:af:74:34:cd:be:
                    e0:79:24:41:8e:62:5e:3b:ef:f5:fc:f6:b0:c8:29:
                    6b:bd:0e:46:8b:ed:e7:5c:94:e2:86:6e:68:a2:2d:
                    0f:8e:03:f3:3a:a8:04:74:c3:06:a6:fe:34:27:65:
                    83:c5:15:90:47:7d:74:87:a3:e2:b3:9b:49:25:4c:
                    e8:09:80:55:33:3b:eb:d0:4c:55:ea:2f:71:c5:98:
                    08:0d:6a:89:82:4c:ab:b0:b7:4f:a5:c4:0a:4e:9f:
                    72:59:30:45:f8:1f:d5:2b:3e:35:66:f8:bc:fc:b2:
                    c6:10:63:e5:8d:00:10:ad:f8:cc:90:24:f8:9f:bb:
                    d3:b1:52:e8:2c:37:f8:74:6b:39:3e:e8:59:bf:10:
                    e5:ac:e1:5c:be:95:ad:94:3a:4a:ae:4b:8a:25:7f:
                    c1:1f:e2:ee:75:f1:8b:23:7f:6e:4b:f4:97:7f:9d:
                    93:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8B:AF:62:DE:A5:2E:0E:1C:01:35:0B:B9:94:35:66:EE:0E:B3:8E
            X509v3 Authority Key Identifier:
                keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c8:fc:3c:b5:e7:30:61:91:55:45:e5:58:eb:2f:ac:b9:0a:
         12:9a:d4:d2:c5:26:b4:c9:36:1e:77:86:f5:50:1f:9c:47:e8:
         17:91:ea:6f:73:76:00:95:3d:99:b6:b8:07:53:6f:97:bc:81:
         9b:04:16:95:b4:c9:b6:40:44:61:ad:c6:66:c7:6a:1d:99:ed:
         3e:68:a1:e9:cb:5f:35:52:7e:1e:18:9b:73:f7:54:6b:05:7b:
         29:3f:bb:14:80:bc:86:ea:d9:bc:9d:6b:75:d0:63:19:17:a9:
         31:43:da:27:ff:e2:e2:77:0b:60:37:57:e8:de:4e:dd:cf:11:
         e7:a2:07:2f:6c:2f:c4:90:8e:92:69:dd:88:22:b6:bc:da:03:
         65:b8:29:7d:40:da:1c:7f:ce:b6:04:ce:6f:ff:79:49:f5:c3:
         04:d2:34:0b:e4:97:2d:5b:c2:d2:95:5a:4b:19:4c:cb:42:07:
         81:6e:83:5b:58:4f:20:d3:05:61:df:c6:12:23:ae:4f:a6:dc:
         17:a7:5d:ca:15:a7:c4:74:78:6a:7c:af:72:ec:9c:40:18:f2:
         ff:50:4d:93:34:fa:6a:cc:7d:5b:a3:be:5a:bc:47:d2:73:3f:
         b4:f9:10:3e:b9:24:9c:a6:24:15:14:b2:b2:e1:82:e7:39:2a:
         22:71:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 15:19:30 2026 by rpki-client