Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
File:                     SMuUpENJ-Y1Am33bmgU99K7xrd8.mft (raw, json)
Hash identifier:          T8dVOBn89ERcT1n5Zk0jDXS2WSkAMkP2FpIWWGBc+Ag=
Subject key identifier:   A5:13:0E:23:85:67:E7:DD:E6:BA:F9:91:58:49:60:C2:06:91:39:F3
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Certificate issuer:       /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial:       019CAA58D76EDA422D1BE5449E2C91BAE7EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
Manifest number:          1134
Signing time:             Sun 01 Mar 2026 17:01:14 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:14 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:14 +0000
Files and hashes:         1: SMuUpENJ-Y1Am33bmgU99K7xrd8.crl (hash: ESOAS7YSOR4GeiB1XF1rQi+GKsUlrfgBtNCHDikoEj0=)
                          2: dvvd8BFnizdhbvkzk4JTGk-vGGA.roa (hash: KB+M+z0sgcKeuNslZAle5MJmCWCAbOChFQfMcbOTgYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:d7:6e:da:42:2d:1b:e5:44:9e:2c:91:ba:e7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
        Validity
            Not Before: Mar  1 17:01:14 2026 GMT
            Not After : Mar  2 17:01:14 2026 GMT
        Subject: CN=a5130e238567e7dde6baf991584960c2069139f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:1e:00:e7:d9:59:2b:3a:7c:d3:cd:41:61:
                    47:51:a1:e7:2f:1a:c6:33:e1:a9:84:d6:36:ca:ee:
                    86:87:9f:d4:af:34:e3:e8:91:34:4e:2d:ff:3e:5a:
                    7d:89:24:98:50:75:f5:a0:5a:fd:5d:ca:9d:0e:7c:
                    59:83:69:2d:b0:ab:31:4a:f0:08:1b:4b:ae:11:13:
                    20:4b:c6:1a:a1:f8:11:36:a8:2f:2b:ef:76:26:f9:
                    93:f1:0a:2e:48:05:9a:7b:d5:3b:16:50:1b:17:14:
                    24:23:06:69:07:ac:91:6c:44:1a:ed:d2:1f:9d:97:
                    86:20:c3:2a:0c:43:4d:03:a0:12:89:85:69:8a:70:
                    6b:f8:59:7e:f0:d9:18:7d:ab:a4:c8:8e:47:50:40:
                    f6:fd:7a:9c:72:e9:58:57:1f:b0:90:7b:fb:70:c7:
                    4b:5d:a9:8c:60:6f:72:f8:6d:43:ca:62:9d:d8:33:
                    77:f2:82:ca:40:3e:3f:d0:a6:f2:11:59:f7:84:ed:
                    ad:b1:1a:bd:de:eb:a1:91:60:5b:dd:11:a4:70:06:
                    79:d5:4d:de:70:5b:9f:68:65:6e:2d:ea:54:38:17:
                    75:01:bd:24:0a:f0:4b:c3:0b:32:df:c9:a9:1d:9f:
                    6a:28:44:63:6c:6f:be:89:66:22:b0:53:3c:34:dd:
                    eb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:13:0E:23:85:67:E7:DD:E6:BA:F9:91:58:49:60:C2:06:91:39:F3
            X509v3 Authority Key Identifier:
                keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a4:85:10:b1:ac:c7:41:37:2b:95:98:84:c8:cb:73:ba:be:
         1b:22:ab:64:9e:e4:b2:2f:45:64:f9:21:53:6a:86:7f:c3:81:
         6d:01:ca:5f:9c:58:6b:b6:e9:28:62:a2:5a:d9:f6:b6:40:ea:
         bd:51:61:ae:b9:7c:e3:db:1a:a1:9c:db:ad:d5:79:16:4b:76:
         74:df:7c:55:5c:25:43:cb:85:25:4b:26:04:09:50:9f:b2:bf:
         87:49:a8:be:33:06:9b:68:19:21:00:40:6d:d7:68:2e:67:7a:
         a9:47:42:a0:f5:0c:d3:0d:56:79:e5:21:3c:a2:57:19:06:e1:
         04:d4:d1:5f:59:51:18:39:01:0d:45:27:c5:bb:46:58:62:54:
         c1:07:a0:de:f5:d8:99:b8:70:08:ea:fc:b3:c0:b3:c1:25:be:
         1a:06:dd:78:e6:9a:7a:3f:94:a9:86:b9:60:bf:14:9d:7a:4c:
         01:b2:d0:16:55:a8:2b:91:49:3a:06:e9:c3:da:08:70:37:73:
         0e:81:10:4b:9a:27:7c:f2:cd:e0:df:6e:69:9a:4a:ff:6c:f2:
         9a:c0:4f:d9:d2:5d:d1:ad:46:b6:8d:29:e8:90:d6:51:49:05:
         56:7e:7d:eb:e4:7f:eb:bd:6b:71:30:c5:15:a7:70:6b:d4:4c:
         c7:17:77:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:58 2026 by rpki-client