Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
File:                     smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json)
Hash identifier:          RaWpArrHTO9OVFoAKnc2Z6UU7kHUCT14oS5kk5wZ5H8=
Subject key identifier:   E7:DA:1A:3D:D3:91:9C:4E:12:8A:B7:76:66:97:8A:F4:FF:1B:27:86
Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
Certificate issuer:       /CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Certificate serial:       01A08E69EBA20D6B61EE321C463ED5B68088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
Manifest number:          04DC
Signing time:             Fri 11 Sep 2026 03:01:41 +0000
Manifest this update:     Fri 11 Sep 2026 03:01:41 +0000
Manifest next update:     Sat 12 Sep 2026 03:01:41 +0000
Files and hashes:         1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: M3ZnHKHccWK5kxHIaxXzfConRWGoimnb/NRRne+kaMQ=)
                          2: us0cCXgOVilyc_-btAWVQ_9HSm0.roa (hash: FpuhhqsWI6lqjf12zy/aTBMSr3k50lCdEcAaN9Dak/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:69:eb:a2:0d:6b:61:ee:32:1c:46:3e:d5:b6:80:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b
        Validity
            Not Before: Sep 11 03:01:41 2026 GMT
            Not After : Sep 12 03:01:41 2026 GMT
        Subject: CN=e7da1a3dd3919c4e128ab77666978af4ff1b2786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:43:b3:2f:60:c2:86:dd:80:b3:ef:b3:7c:43:
                    44:34:47:2c:b7:ad:cd:6d:3e:5e:9f:cb:bd:94:e0:
                    d5:d5:ca:5b:00:70:3c:d1:90:81:9b:66:5b:5b:6d:
                    ba:d2:c8:ef:5e:06:d4:16:04:41:78:49:5f:d2:cc:
                    c4:7f:00:7b:92:49:27:1b:13:99:28:b0:e5:b1:e9:
                    38:13:8b:b8:b2:b9:86:24:73:c8:38:2d:e3:fc:85:
                    1c:ca:a2:71:d2:c0:59:e1:d7:6e:80:cf:50:82:d4:
                    5e:f1:87:07:f0:19:bd:b1:91:c5:18:fd:cc:63:73:
                    8b:00:49:98:f0:7b:11:d2:e6:a5:32:81:8a:e2:08:
                    60:a4:31:2c:ce:77:1e:0b:86:72:70:c8:79:a9:2f:
                    83:84:0b:d0:19:8f:93:cf:92:82:bd:09:58:e4:71:
                    01:ae:42:87:89:6b:da:e4:be:78:e7:ab:cf:37:8b:
                    70:67:0d:b0:3f:7a:31:e6:84:71:d0:3c:c0:1a:81:
                    c4:55:54:e8:b7:4d:41:6a:4b:8f:3e:50:a5:9f:26:
                    8c:de:77:a3:8e:29:ef:7a:c1:2d:8f:ae:b2:cd:7b:
                    18:b0:1a:90:bf:b5:d8:43:73:16:aa:f9:d6:c9:fd:
                    d8:7a:85:49:26:e1:98:a7:a0:fd:20:b6:28:63:2e:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DA:1A:3D:D3:91:9C:4E:12:8A:B7:76:66:97:8A:F4:FF:1B:27:86
            X509v3 Authority Key Identifier:
                keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:21:e7:d3:00:92:c5:0e:37:23:45:88:bc:9b:86:7b:c2:c4:
         5e:2f:4c:a8:0d:7d:e8:7f:6b:3c:dc:1a:13:e9:f0:f2:13:10:
         73:20:9c:8e:51:31:2c:fb:2a:14:cf:0b:83:ca:a2:ad:c9:88:
         43:df:48:ff:3e:11:c6:52:a4:78:3a:bb:bb:0e:c2:ef:5d:f5:
         10:28:82:2b:3f:d7:87:8f:1f:76:ef:e6:aa:77:b5:c7:16:a7:
         d7:19:6c:55:e3:e3:a9:ad:f1:df:2f:f4:d4:26:a4:ae:99:d9:
         7e:f6:9c:83:a5:b0:08:59:02:8d:58:9d:b3:0f:09:5a:43:4c:
         81:b4:bf:08:8d:93:73:ec:8d:ac:16:44:ce:78:2c:da:6a:8f:
         ef:61:c5:1e:94:80:d5:87:38:f2:4c:75:c6:5d:54:9d:25:8c:
         0f:e8:74:78:92:60:8d:3d:d2:d3:f8:de:3b:b8:44:50:f6:ef:
         9f:d2:6b:47:08:8b:97:64:e3:44:17:0e:f4:42:e9:38:aa:c8:
         9a:d2:ff:90:c4:8e:59:e7:7c:4d:18:1c:27:7c:8f:ab:73:3c:
         a7:59:1b:f8:62:63:4f:d8:82:ca:ba:8d:a7:cc:23:63:cd:b9:
         5e:c5:51:8f:9a:9b:75:80:94:87:09:b7:fa:6d:9b:6f:c8:3e:
         4f:b3:9e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:53:35 2026 by rpki-client