Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File:                     SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier:          ON96KRSX8qWp0UOVkYfontDocmjgLqQ6vQBo1ewZPm4=
Subject key identifier:   93:EE:7D:19:EC:71:81:32:FD:60:3F:38:D3:22:99:2C:4D:31:DA:CD
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer:       /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial:       01A116E15CEDDCA890E6D7259BE98947ADDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number:          1A29
Signing time:             Wed 07 Oct 2026 15:00:30 +0000
Manifest this update:     Wed 07 Oct 2026 15:00:30 +0000
Manifest next update:     Thu 08 Oct 2026 15:00:30 +0000
Files and hashes:         1: JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa (hash: SZmqmdymrljO2hpbQb1uMliK1C8iABzhCOgMWLG7xTw=)
                          2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: kSbTBB1lr72j47xQCw4kPasu/7j1EtFqo0+z6wxWS3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:e1:5c:ed:dc:a8:90:e6:d7:25:9b:e9:89:47:ad:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
        Validity
            Not Before: Oct  7 15:00:30 2026 GMT
            Not After : Oct  8 15:00:30 2026 GMT
        Subject: CN=93ee7d19ec718132fd603f38d322992c4d31dacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:aa:4f:b9:32:02:39:40:66:44:fc:bf:5e:7a:
                    77:e2:f8:f6:69:3f:67:18:27:ff:fa:1d:77:16:8e:
                    f7:24:ea:97:f0:df:3d:80:0e:6f:c1:a1:fb:81:c0:
                    b4:f0:94:96:8b:c9:18:3c:a9:c8:89:f2:4a:b4:27:
                    30:a0:31:93:4f:35:3e:9d:34:2a:41:fb:4e:7e:24:
                    31:bb:1f:38:7f:60:ea:f9:11:95:67:98:c8:38:19:
                    57:eb:9a:9b:e2:b6:5f:f5:03:c8:a3:2b:2f:97:ae:
                    71:c9:02:92:7d:ac:9e:0a:a8:f0:d2:ac:1e:e5:90:
                    74:07:39:9f:33:4a:45:71:03:f1:5e:21:dd:49:6e:
                    93:4f:98:13:4d:08:7b:66:f9:c4:e9:10:35:62:f3:
                    7b:1b:85:bd:5b:61:3a:40:bf:23:ab:00:79:4f:6e:
                    b7:c8:e5:4d:a7:4b:ee:98:3e:79:9a:9b:88:2f:48:
                    bc:6d:dd:d7:65:8c:e3:b2:08:cd:0c:81:c5:e1:89:
                    3a:ab:6d:6a:f8:cb:81:95:df:2b:68:c6:40:9b:5e:
                    60:ff:d3:c6:e7:4e:06:05:d7:a1:84:87:dc:41:4e:
                    ee:14:07:49:8f:06:b4:ff:69:d6:d1:c2:9c:fe:eb:
                    61:c1:57:36:5b:b2:1e:ab:a7:f1:6d:1b:5c:89:5f:
                    50:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EE:7D:19:EC:71:81:32:FD:60:3F:38:D3:22:99:2C:4D:31:DA:CD
            X509v3 Authority Key Identifier:
                keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:07:50:b9:07:50:79:d8:f4:eb:16:df:e2:90:f5:76:8d:af:
         7b:db:e2:02:45:22:bc:08:0b:29:22:eb:8c:ee:ca:09:1d:84:
         05:d8:63:20:5d:56:69:96:02:31:f0:75:ec:89:d3:17:1f:6c:
         4f:0a:14:2f:fa:be:9a:09:f7:71:80:92:7a:35:50:f1:2c:f9:
         fb:04:3d:43:59:36:12:4a:7f:88:34:d7:8a:a0:cd:34:04:b0:
         5a:c5:d5:1f:33:d8:7f:45:ea:21:23:b6:b4:6c:fc:af:f0:69:
         19:0b:d5:04:6b:a1:4e:f5:46:d3:cc:69:44:25:c9:3f:09:14:
         67:17:05:9a:79:79:9a:87:78:60:59:cf:85:74:96:f5:de:47:
         2e:05:80:73:7c:a8:f3:6c:3c:b2:92:90:04:54:7a:c4:a1:85:
         bc:78:c9:17:37:0a:97:52:5a:a5:41:90:d6:72:1d:4d:92:4d:
         a1:27:da:9d:71:00:55:2c:0a:59:ff:c5:61:e0:2a:ec:f1:03:
         36:42:93:9b:a5:05:4a:37:f3:b7:72:72:60:68:c2:8a:a2:e8:
         82:1f:d2:30:81:db:ed:b7:63:7d:f2:04:89:85:3c:e4:a5:31:
         f2:d1:3a:92:b1:c6:42:53:bf:69:f1:65:6e:92:f0:65:7d:29:
         7a:33:04:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:59:24 2026 by rpki-client