Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File:                     SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier:          UGyo4ENNQYdrySImgXTvlxxDTgSfZBeyk5xJGeS4Qoo=
Subject key identifier:   F1:F2:54:00:68:3C:54:0D:4C:87:43:06:26:79:79:C1:FD:95:28:5D
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer:       /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial:       019FABD11BDD13FB9EF306F25012019773E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number:          196D
Signing time:             Wed 29 Jul 2026 03:00:35 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:35 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:35 +0000
Files and hashes:         1: JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa (hash: SZmqmdymrljO2hpbQb1uMliK1C8iABzhCOgMWLG7xTw=)
                          2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: XtE4avyKtz+JiD81uBPLTIXRZmdwcZbjjI4x/x637ZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:1b:dd:13:fb:9e:f3:06:f2:50:12:01:97:73:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
        Validity
            Not Before: Jul 29 03:00:35 2026 GMT
            Not After : Jul 30 03:00:35 2026 GMT
        Subject: CN=f1f25400683c540d4c874306267979c1fd95285d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:6c:c3:b6:15:ac:7d:1f:3f:69:55:32:30:
                    fe:75:db:0a:49:ca:31:03:45:e6:e2:7a:5f:88:63:
                    9a:78:19:22:a2:6f:0a:c8:a5:2c:d3:1f:ae:64:ea:
                    6f:d5:76:68:e9:e2:bd:76:21:52:d7:33:bf:f0:4c:
                    8f:a5:2c:48:d0:4b:76:bc:87:d6:84:ee:8e:46:2a:
                    65:2e:b5:a7:53:b1:b8:50:72:7f:fd:5c:89:d4:d8:
                    cc:3c:7d:fd:a1:7c:40:93:34:2a:83:63:fd:58:c4:
                    c3:ed:36:5c:e5:a6:67:f8:d0:e3:7d:e0:fc:b6:4b:
                    6c:81:a9:c4:40:70:ad:65:50:b6:16:c1:23:a4:6d:
                    b4:94:05:fe:31:39:c3:65:75:46:78:e7:2b:a2:84:
                    36:2e:d2:2b:08:c9:39:45:39:6b:84:be:12:02:35:
                    83:2d:b2:10:c7:c4:4a:fc:2f:07:0b:fb:88:8c:ba:
                    5f:50:7f:19:f9:39:7f:90:eb:15:d1:a8:50:a8:fb:
                    88:cf:86:48:be:df:87:6f:24:ba:bf:5d:95:94:ac:
                    55:60:a7:ab:5c:52:57:96:c6:02:37:4d:d5:d9:6e:
                    5b:5a:3c:6a:2b:4d:22:f2:66:e5:6c:e5:40:63:f9:
                    e4:8d:a9:89:fc:c9:5f:a0:5d:bf:36:27:c3:69:04:
                    6a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F2:54:00:68:3C:54:0D:4C:87:43:06:26:79:79:C1:FD:95:28:5D
            X509v3 Authority Key Identifier:
                keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:05:0a:de:ff:8b:a1:42:7e:6a:30:a7:bf:47:a9:11:af:17:
         2c:bc:5f:37:8a:60:8b:af:22:eb:f8:33:48:54:9b:5d:76:79:
         af:62:06:94:cb:6e:9a:34:5a:84:16:6a:1b:3d:8c:e7:4c:18:
         26:87:65:f3:3a:32:c4:2d:59:b7:0b:7f:a5:92:c7:5d:7c:14:
         70:e7:53:bd:46:88:c6:4b:92:ef:be:ca:1d:3b:19:ec:dc:71:
         04:be:5c:73:7b:b5:73:41:43:1d:01:ff:ba:8a:07:b4:e1:57:
         bc:d5:3d:fc:68:23:de:55:0b:7e:c8:89:09:7e:58:f8:c7:e7:
         93:bd:24:51:63:91:1b:87:45:39:3b:71:27:04:4c:28:d9:e4:
         59:bb:66:a9:8c:d3:60:24:07:69:59:1f:30:3b:dd:5e:f9:9b:
         27:b6:57:69:ad:7f:15:6d:42:9b:42:65:c3:94:39:60:a5:74:
         a1:bc:c8:84:1c:75:40:78:b8:b1:7e:62:b8:47:e3:39:b0:24:
         e7:9a:65:18:13:ac:d1:80:86:f3:bf:64:0c:cc:e2:f6:74:8e:
         ca:fc:b5:5d:7d:04:ca:5a:56:e2:57:dd:5c:80:0d:c6:da:b4:
         8d:6b:ac:c3:62:82:5f:9f:ee:84:26:e8:79:40:e5:8f:1b:05:
         37:87:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:16 2026 by rpki-client