Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File:                     SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier:          XPjwyAAxesFrEvr4W579nSYn7Kcg7GdH2hCibQktz6I=
Subject key identifier:   D7:DC:D8:B4:D1:88:3A:4C:F2:90:8C:44:BB:8D:3A:89:B6:B6:82:99
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer:       /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial:       019CABD8E1A15F2078549F114BA96A4620DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number:          0930
Signing time:             Mon 02 Mar 2026 00:00:43 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:43 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:43 +0000
Files and hashes:         1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: rhlzC697RBVikgrub9pJxeRky80We3UOAvdEfGJuWyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:e1:a1:5f:20:78:54:9f:11:4b:a9:6a:46:20:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
        Validity
            Not Before: Mar  2 00:00:43 2026 GMT
            Not After : Mar  3 00:00:43 2026 GMT
        Subject: CN=d7dcd8b4d1883a4cf2908c44bb8d3a89b6b68299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d1:85:18:a8:66:22:75:af:f3:a9:cd:85:0c:
                    4e:fe:29:fb:9f:0a:ec:b1:37:5c:c1:3c:1c:75:cf:
                    1e:fd:4e:32:d1:28:b9:4e:aa:fe:83:f4:b6:21:5e:
                    8a:46:0c:2e:17:e9:aa:5a:31:42:07:82:20:94:7a:
                    36:22:10:d2:82:39:1b:56:ed:69:ee:10:5f:fb:b6:
                    04:75:7f:2d:c1:aa:f0:9e:ef:45:35:37:de:78:83:
                    72:6f:80:d7:23:10:74:f1:a1:33:4e:98:df:55:5b:
                    58:10:6f:d3:64:83:81:cf:d3:9b:54:47:a9:bb:ba:
                    bd:f9:dc:78:20:2a:fe:6a:63:99:fb:10:5d:73:00:
                    45:0c:a6:14:40:a3:99:40:fb:f7:00:e5:32:d9:ba:
                    1d:43:e2:fd:3c:f5:dd:10:ec:ab:c2:1f:3e:73:55:
                    fa:c4:e8:c2:37:32:56:a0:50:04:ba:82:af:1f:36:
                    ec:fd:30:17:2d:a5:25:f5:65:2f:5a:76:9a:2f:52:
                    e2:25:fc:91:d3:12:8a:f9:4b:8c:8e:65:15:1f:64:
                    8c:c0:c1:ae:e2:08:7f:44:0b:55:82:df:83:5a:a5:
                    41:f0:42:f3:cb:57:5a:cf:b6:ee:fa:fe:f7:3c:7e:
                    4b:f4:e0:1b:b6:d0:e3:67:36:6a:ac:8b:7e:6d:8c:
                    e8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DC:D8:B4:D1:88:3A:4C:F2:90:8C:44:BB:8D:3A:89:B6:B6:82:99
            X509v3 Authority Key Identifier:
                keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9d:23:1f:2d:1a:9b:d1:7d:ec:46:10:92:6c:65:c9:a6:02:
         ae:60:3f:63:d2:5b:1b:75:ea:85:e4:cc:a3:c3:60:c5:f7:8e:
         15:b3:fa:9a:71:4b:25:0b:7e:cb:14:5e:30:e8:90:1a:02:32:
         02:10:89:48:06:bb:72:0f:82:e1:e2:d6:1d:a8:09:5b:c5:97:
         46:e1:c3:18:55:8f:7f:5f:02:9d:e3:70:4c:9a:15:57:cb:2b:
         21:fc:f3:6c:b8:5b:7c:78:02:b1:4a:90:c8:1d:e1:6a:12:f1:
         47:d6:a7:87:89:e4:43:36:db:83:72:60:f0:14:2b:3d:21:4d:
         b8:70:91:fd:ef:50:ca:48:e7:23:20:3b:b5:7d:4f:85:2e:09:
         9a:36:ce:53:e2:48:a1:ff:cd:0f:64:72:ea:ca:40:0e:f6:b6:
         c5:f9:6d:08:77:fd:d9:92:c1:0f:50:11:54:22:be:b0:bc:86:
         bf:bc:a9:60:0b:76:19:a9:2a:ab:a6:55:89:e2:fa:31:18:01:
         8d:68:81:0c:84:ba:66:4e:b3:b8:98:15:8a:df:21:b2:6a:a1:
         46:b9:1f:d2:91:14:98:33:be:da:2c:ea:2a:68:c8:dc:71:4b:
         6e:86:46:b2:87:85:a3:3f:28:dc:4e:62:62:70:3a:72:6a:77:
         bb:48:9e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:11 2026 by rpki-client