Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
File:                     SMuUpENJ-Y1Am33bmgU99K7xrd8.mft (raw, json)
Hash identifier:          n9dvydqe9OHlLgAPjIdZxHsr1Y2IyZjVuAanBn3My1o=
Subject key identifier:   26:A3:81:C3:4A:99:7C:55:67:D4:1D:C5:27:96:6C:F0:2C:75:C5:9C
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Certificate issuer:       /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial:       019D99D07C9328B542FFA4D37600A47F97A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
Manifest number:          11B0
Signing time:             Fri 17 Apr 2026 05:01:10 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:10 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:10 +0000
Files and hashes:         1: SMuUpENJ-Y1Am33bmgU99K7xrd8.crl (hash: DtnZ83yBblMvkHdk/z4NAYthoJ67Cvm1zHoS3ASL3nU=)
                          2: dvvd8BFnizdhbvkzk4JTGk-vGGA.roa (hash: KB+M+z0sgcKeuNslZAle5MJmCWCAbOChFQfMcbOTgYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:7c:93:28:b5:42:ff:a4:d3:76:00:a4:7f:97:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
        Validity
            Not Before: Apr 17 05:01:10 2026 GMT
            Not After : Apr 18 05:01:10 2026 GMT
        Subject: CN=26a381c34a997c5567d41dc527966cf02c75c59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:87:47:49:9d:44:dc:89:93:8c:de:aa:6b:
                    35:e5:09:1e:34:62:4f:87:52:fa:72:e7:95:b9:d1:
                    d0:8f:23:5e:fa:90:94:f1:1d:cd:90:1a:ef:bf:e6:
                    35:e5:90:1c:10:1b:e4:f4:24:fb:c3:40:3b:d2:7f:
                    f5:e0:0a:82:16:c2:b1:50:ca:90:0e:31:af:7c:f8:
                    87:96:ae:43:cb:f8:98:25:81:62:f0:e4:88:ee:bb:
                    d9:94:80:2b:b8:00:01:62:75:cf:f1:63:f4:8e:49:
                    45:d3:37:70:97:8c:8f:fa:05:20:74:a5:91:10:cd:
                    ac:d7:ef:04:54:0c:d9:d8:97:61:58:ad:f9:bd:6e:
                    5b:e6:22:a0:00:db:c2:7a:bd:ba:d1:2a:05:f3:a7:
                    17:b7:11:fc:27:4c:16:0a:3b:63:49:26:01:76:a6:
                    c6:6c:ae:9a:52:c1:fb:8b:db:e6:68:69:85:2a:ad:
                    f5:a2:b3:c3:4e:37:1f:5a:d2:17:5c:0d:53:97:af:
                    b8:44:88:3b:76:20:23:26:3c:92:53:f9:29:10:2b:
                    2c:13:80:2e:51:2e:81:93:d3:c3:7b:90:86:c3:3f:
                    f5:2e:7d:a1:4a:f2:70:4b:bd:d3:f5:a8:4f:d6:6c:
                    13:c3:15:b2:94:2b:8d:5c:9b:7f:ed:a6:d6:e0:07:
                    fd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A3:81:C3:4A:99:7C:55:67:D4:1D:C5:27:96:6C:F0:2C:75:C5:9C
            X509v3 Authority Key Identifier:
                keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f8:70:1c:39:e7:f3:10:dc:78:8b:dc:3b:32:df:ae:79:e5:
         ad:65:ca:e3:e8:5a:1d:3b:c2:89:d4:e5:22:21:11:6e:9c:f5:
         8a:9f:73:f5:1b:5c:b4:4d:08:ad:69:ea:16:3d:99:84:e5:92:
         62:9b:3c:86:1e:52:6b:87:89:f2:1c:f7:b4:92:39:69:90:fa:
         eb:5f:8b:c0:5c:69:6a:c8:6a:96:49:06:14:95:c7:c3:4f:19:
         b4:48:df:5f:91:1d:5b:05:36:46:37:c0:34:8a:50:e3:2e:b0:
         73:76:38:37:e8:2b:16:0f:4f:de:33:96:cf:d8:9b:cf:d9:ef:
         96:67:62:7b:d0:28:0c:a4:4e:71:7a:23:07:36:6c:53:01:eb:
         44:de:21:f1:83:de:7c:5e:c4:91:fc:cc:d8:51:7c:fc:28:15:
         23:55:0d:f7:8d:4f:e4:39:93:7e:f2:3c:a1:bc:69:b6:fc:4c:
         cf:cd:da:7a:35:49:0c:4e:8a:6a:cb:1f:d8:eb:50:06:c5:cf:
         b0:1d:1f:b8:69:6a:55:19:3b:82:cb:66:3c:08:ec:a8:6e:9b:
         68:3b:75:33:6a:2b:2d:29:e0:2d:21:3f:1a:c3:0c:f7:b7:e8:
         77:d9:7f:4e:ee:20:46:85:c0:15:af:1b:90:01:48:42:22:0a:
         dd:eb:ff:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:04 2026 by rpki-client