Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
File:                     SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft (raw, json)
Hash identifier:          b2nc0Qntt7y6ei/Ud4708/1v7cmB5tv50YLgXgcCGwQ=
Subject key identifier:   D5:6C:F0:2E:CE:1E:71:06:81:98:42:C2:BF:C9:37:AD:E7:1B:65:1F
Authority key identifier: 48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89
Certificate issuer:       /CN=48cf96aa5eb0774f0d7b426b327435a8788eb189
Certificate serial:       019D38661F3F07529899AE0C946B10EB845B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 07:01:49 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:49 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:49 +0000
Files and hashes:         1: SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl (hash: 8hAln+uljwOWbMI83jWsDkqr1eoN2o0yM+4E9Xqdppw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:1f:3f:07:52:98:99:ae:0c:94:6b:10:eb:84:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cf96aa5eb0774f0d7b426b327435a8788eb189
        Validity
            Not Before: Mar 29 07:01:49 2026 GMT
            Not After : Mar 30 07:01:49 2026 GMT
        Subject: CN=d56cf02ece1e7106819842c2bfc937ade71b651f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:b1:19:5e:1a:49:11:da:54:31:2e:f7:2a:
                    c3:64:ad:58:43:88:62:b7:c2:3d:ed:72:0b:6b:df:
                    31:08:17:68:85:0b:36:59:73:e5:c0:17:16:76:18:
                    74:8f:d5:a6:9b:81:46:7a:c8:06:ef:d3:4b:e8:ee:
                    cd:2e:95:47:19:c4:8d:14:26:45:98:28:e7:be:ea:
                    4d:63:f8:be:be:a5:58:55:77:58:c4:18:43:d3:b4:
                    f8:b6:bc:1d:1b:dd:fc:0e:3d:d8:a2:5b:58:e4:bd:
                    7b:8e:2e:51:a6:30:8e:b7:2f:26:05:02:76:24:96:
                    c4:7c:29:e1:c4:d4:26:42:19:7e:21:fa:86:eb:c5:
                    d0:9e:50:4f:8e:4c:23:45:19:dc:0d:ee:11:0a:03:
                    a7:b0:a6:43:0a:dc:a7:69:f2:2b:db:2a:76:6b:e7:
                    cb:61:75:ae:48:08:c9:34:af:5c:d3:94:76:27:14:
                    72:35:ff:81:bb:83:30:ec:6e:94:12:6d:46:73:a6:
                    a3:71:81:5b:21:1c:57:ea:b0:30:f4:41:43:59:d4:
                    b6:41:06:a2:4a:f3:e4:98:95:9c:4d:84:1f:1f:3e:
                    bd:ac:13:3a:91:e1:32:8e:b4:82:c8:11:46:67:16:
                    10:0a:94:93:4e:b7:e5:8c:4a:b1:f1:a4:b2:d8:ea:
                    33:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6C:F0:2E:CE:1E:71:06:81:98:42:C2:BF:C9:37:AD:E7:1B:65:1F
            X509v3 Authority Key Identifier:
                keyid:48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:46:c4:1d:5f:f7:db:67:24:03:89:6d:a1:f0:f6:e9:a4:0c:
         1d:20:8e:ca:1e:02:95:3a:fb:fe:92:d4:29:fa:b3:9f:ce:0d:
         a8:f0:92:dc:3e:2f:ea:2b:7b:b6:39:33:9b:51:d7:a0:d8:6b:
         6d:5c:bc:06:56:e1:0d:c8:82:2b:0c:a4:69:3e:ee:fd:2d:54:
         cf:cd:59:86:06:87:12:bb:6e:55:5c:cf:dc:a9:e8:cf:59:95:
         b2:de:05:4e:c6:8c:6f:d0:ef:b9:36:64:de:25:47:e4:05:43:
         91:58:d0:30:f8:e1:bd:18:bf:98:36:0f:d4:d1:71:e4:61:b7:
         50:8a:b7:d5:fb:58:0c:77:79:a5:43:65:24:a9:b5:ab:a9:8c:
         8e:e0:4a:bd:e5:f4:c7:02:e3:8a:e0:2b:ef:49:bb:7c:80:b1:
         5d:24:ed:0a:55:50:e0:66:5d:cc:01:6d:79:2b:aa:64:88:76:
         85:03:c2:77:e6:99:0c:bc:7d:0d:4d:9f:dd:20:59:8c:22:72:
         ba:18:b3:48:7d:32:d9:92:37:90:54:bf:73:30:cd:1a:fa:98:
         28:46:d4:0c:37:79:c9:a0:c6:bf:1b:2f:67:ca:5f:21:aa:f8:
         16:f5:a3:38:32:f3:e6:1d:54:aa:be:e2:08:a6:c1:e7:06:7f:
         7b:a6:a2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:40 2026 by rpki-client