Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
File:                     SMuUpENJ-Y1Am33bmgU99K7xrd8.mft (raw, json)
Hash identifier:          jRvVguUmEKt0VL8q5Lvd9xQGPm9haHNPEJi0qErsaxs=
Subject key identifier:   FD:66:1B:4F:69:10:31:2E:6D:77:CB:C3:C8:D0:B8:45:49:0B:07:5B
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Certificate issuer:       /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial:       019EC1494D1E785046AABCF47625EF82280B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
Manifest number:          1249
Signing time:             Sat 13 Jun 2026 14:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:07 +0000
Files and hashes:         1: SMuUpENJ-Y1Am33bmgU99K7xrd8.crl (hash: ysJVKphkQWyAI5H3FSgFCnddTdK4+63Gsjj/GhqKOhw=)
                          2: dvvd8BFnizdhbvkzk4JTGk-vGGA.roa (hash: KB+M+z0sgcKeuNslZAle5MJmCWCAbOChFQfMcbOTgYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:4d:1e:78:50:46:aa:bc:f4:76:25:ef:82:28:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
        Validity
            Not Before: Jun 13 14:01:07 2026 GMT
            Not After : Jun 14 14:01:07 2026 GMT
        Subject: CN=fd661b4f6910312e6d77cbc3c8d0b845490b075b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d7:87:68:7e:38:f5:91:95:c3:10:02:58:c9:
                    b0:60:ce:64:54:e1:2d:c2:b9:83:58:f8:9e:34:e4:
                    ce:b5:64:b8:eb:6b:c8:f5:34:ae:a1:5d:c0:b3:e8:
                    eb:f8:e5:82:5f:cc:f3:07:d3:e1:cc:7b:c1:1e:92:
                    84:b9:a2:a7:b7:70:ba:23:e3:34:95:68:40:2c:93:
                    11:03:f1:4e:01:c7:8b:a2:42:2a:1f:4d:69:ab:b9:
                    2d:dd:df:40:63:2b:50:3d:53:e1:a9:2b:2a:e4:29:
                    4d:2b:3d:7f:95:fb:a8:01:89:4a:1a:a7:b2:15:7d:
                    85:5a:c6:7c:35:4d:13:4d:d0:48:b7:08:c6:cc:fc:
                    6a:96:ba:23:3b:97:0d:f7:1a:dd:27:e2:f6:2e:f5:
                    56:27:63:2f:5d:28:ed:4a:60:4f:4e:8e:51:b1:c6:
                    df:9b:34:a1:de:1b:32:77:6c:61:cc:7d:1a:0e:8f:
                    ff:e7:68:42:83:42:e5:e8:a3:dc:b5:26:93:3d:2f:
                    50:3f:a1:f3:52:b2:fb:64:2f:7c:6a:35:85:33:e7:
                    df:59:fb:11:4d:58:92:c3:3b:c3:6e:14:19:f9:d0:
                    d7:e8:08:e5:fd:2e:84:ac:a8:83:3c:a8:71:a8:75:
                    89:a7:69:6e:6e:a8:64:2b:2a:f3:ae:23:f6:ff:dd:
                    c8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:66:1B:4F:69:10:31:2E:6D:77:CB:C3:C8:D0:B8:45:49:0B:07:5B
            X509v3 Authority Key Identifier:
                keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:17:c0:bf:24:9b:15:0b:bf:fc:eb:ea:12:5f:3f:93:e8:76:
         36:32:b0:d3:5e:8a:44:1c:78:bd:43:98:b5:4a:eb:4d:5c:eb:
         34:b9:78:d0:7c:bc:cf:cf:80:14:0a:01:da:0c:b8:df:89:e7:
         26:18:17:16:be:f2:d1:65:3b:25:ea:2f:b2:6d:79:c7:63:74:
         11:f4:c1:2f:9a:6d:cd:58:ab:56:e4:87:47:72:e1:47:67:fc:
         e2:d3:17:fb:52:ff:be:c7:6f:46:9e:94:08:3d:40:12:11:4f:
         1b:cb:ac:a5:ed:9a:74:d4:15:a2:b6:57:a0:3b:61:d6:71:a5:
         49:9d:28:7e:17:f9:dc:9c:2e:50:a9:bc:17:d7:8a:06:e0:24:
         37:3a:5b:e3:51:5e:20:b3:dc:6d:36:c7:f4:f2:89:7b:7b:01:
         49:36:41:ea:92:c4:31:67:c9:f1:62:b6:ec:11:76:f4:c0:c6:
         df:cf:5d:c7:c5:a1:42:4b:74:8b:88:b4:46:2e:3f:c1:72:11:
         bd:91:ee:e5:8c:6b:09:0a:60:85:88:58:e3:b2:d3:b5:37:1d:
         3d:28:b0:0d:e7:5a:f0:82:02:2a:39:70:04:c1:67:f3:6d:18:
         3f:e1:fc:d2:ff:2e:08:ec:8c:8a:a1:3e:b5:a5:2b:30:3a:68:
         a1:84:1e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:53 2026 by rpki-client