Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
File:                     smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json)
Hash identifier:          cJQTNAN5lkM7Jcw59a1AePbVeFMLJQAg7iE2/3bIHXc=
Subject key identifier:   80:7E:9E:8A:51:1E:18:64:CB:33:DF:5D:D5:A8:A6:B6:4A:B4:84:D8
Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
Certificate issuer:       /CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Certificate serial:       019CE5C8BD4F05B9AAB5674ACD2CB6320221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
Manifest number:          02F7
Signing time:             Fri 13 Mar 2026 06:01:03 +0000
Manifest this update:     Fri 13 Mar 2026 06:01:03 +0000
Manifest next update:     Sat 14 Mar 2026 06:01:03 +0000
Files and hashes:         1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: XKqln2C9e8nBWpF50NjugSneA/056KbBNi/pu5NssrY=)
                          2: us0cCXgOVilyc_-btAWVQ_9HSm0.roa (hash: FpuhhqsWI6lqjf12zy/aTBMSr3k50lCdEcAaN9Dak/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c8:bd:4f:05:b9:aa:b5:67:4a:cd:2c:b6:32:02:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b
        Validity
            Not Before: Mar 13 06:01:03 2026 GMT
            Not After : Mar 14 06:01:03 2026 GMT
        Subject: CN=807e9e8a511e1864cb33df5dd5a8a6b64ab484d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:63:58:fc:5d:dd:62:e4:ff:91:2b:7e:2f:
                    1a:66:1d:94:30:fb:1a:f7:4c:79:b6:d9:6e:3a:5a:
                    ed:1c:36:f9:dc:a2:33:cf:a2:0b:5a:cf:c1:93:03:
                    5c:df:3a:eb:77:33:ab:bd:4a:4f:3e:b4:78:d3:d9:
                    0d:a9:f9:5e:d6:85:c4:d8:a1:26:df:f3:9d:4a:37:
                    41:37:ff:b9:92:cb:07:1e:e0:d9:cf:f3:36:aa:fa:
                    5e:9c:cf:39:6a:aa:ab:45:40:0e:76:a1:61:e5:be:
                    f3:19:74:44:9c:87:46:4c:eb:c3:6e:b7:a4:bb:93:
                    b5:8a:49:32:94:d1:cc:d3:e2:15:ab:99:41:a8:fb:
                    da:b3:39:0b:74:b2:27:1e:d5:02:a5:98:c8:d4:35:
                    cb:81:25:e9:ce:be:d4:83:ef:01:b6:45:cc:05:25:
                    63:73:63:4b:26:5f:f1:d4:17:38:0d:79:ca:89:73:
                    54:d6:a0:16:4e:5d:66:3b:96:ba:cb:3c:52:98:3f:
                    d2:af:27:00:2f:cb:0e:a9:21:a0:83:1d:c2:46:32:
                    71:12:7a:9c:0b:2d:27:e5:f0:8e:95:83:66:e6:69:
                    99:cc:b7:ca:37:48:d9:bc:51:67:08:d5:ff:79:f5:
                    1f:86:cb:9c:7c:4d:d0:4f:8e:c5:a9:29:89:f3:0c:
                    35:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7E:9E:8A:51:1E:18:64:CB:33:DF:5D:D5:A8:A6:B6:4A:B4:84:D8
            X509v3 Authority Key Identifier:
                keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c3:b5:0d:af:02:17:5b:9a:ae:8e:60:bc:85:27:95:ad:1c:
         b5:6a:ac:5a:29:33:e8:b9:a9:7d:b5:2b:af:ae:a8:41:3b:f0:
         19:c1:2e:57:b6:e5:e2:5c:6d:e0:92:97:33:ee:54:c3:c2:45:
         ae:66:7c:04:85:06:e1:80:81:ec:da:1f:d1:d4:92:5a:31:b9:
         d1:1a:ab:a6:0c:cf:97:e3:72:e3:fa:ee:03:67:65:bf:d8:ec:
         43:64:24:61:dc:c8:3c:68:57:9c:3c:43:c5:c5:c7:43:9d:2a:
         17:f0:27:4f:e5:0d:f9:c5:ca:1b:ef:73:af:cf:6b:2b:00:1d:
         16:70:9e:41:af:fe:28:e8:23:21:1b:60:6c:14:cb:6d:b5:6c:
         39:4f:fd:b7:76:fb:19:5b:fe:cb:b1:ad:87:76:74:f5:f8:42:
         79:02:67:77:45:f9:d1:c9:7a:92:8d:2c:01:8d:be:4e:d7:0c:
         e3:be:c1:1d:fc:5b:c3:f7:b3:42:49:e3:54:e3:0e:a8:c0:14:
         6d:13:ad:70:5f:14:38:fb:53:bf:e3:d7:f3:b6:21:8a:12:17:
         ea:b3:82:9b:bf:3c:6d:89:d9:97:7c:78:98:98:4b:9a:f2:df:
         b4:cf:08:5a:4c:25:c0:42:b4:38:7e:ab:ea:2f:ea:d4:1b:ec:
         ef:58:40:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:10:19 2026 by rpki-client