Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File:                     SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier:          rgry7g6kytLzYVfTlX+AlavX1l712v/cBVwsUxmWWVU=
Subject key identifier:   92:62:B0:85:5C:25:6B:20:17:CC:A8:13:1F:03:80:91:30:26:D5:F9
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer:       /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial:       019EC2250EF790800866169B3560057D9691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number:          18F4
Signing time:             Sat 13 Jun 2026 18:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 18:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 18:01:08 +0000
Files and hashes:         1: JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa (hash: SZmqmdymrljO2hpbQb1uMliK1C8iABzhCOgMWLG7xTw=)
                          2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: BzQas8lk7wYhnHnVfXd/ojOSo1tmkgP2oN7hVBLU0xU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:25:0e:f7:90:80:08:66:16:9b:35:60:05:7d:96:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
        Validity
            Not Before: Jun 13 18:01:08 2026 GMT
            Not After : Jun 14 18:01:08 2026 GMT
        Subject: CN=9262b0855c256b2017cca8131f0380913026d5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:84:1f:4f:21:0f:ba:85:6a:d4:dd:6b:24:
                    29:06:1c:b4:2d:d1:30:e2:ae:db:d4:02:81:d6:59:
                    51:66:26:32:2b:88:79:47:d0:34:63:bc:8a:26:37:
                    86:e9:93:10:97:c0:e4:ec:a5:e4:37:67:8b:ad:4b:
                    36:f7:99:04:09:6a:e8:27:90:3d:f1:e0:71:55:86:
                    25:35:0a:04:af:cc:65:22:a4:ac:06:fe:c8:92:7d:
                    3d:3d:47:2d:86:4c:f7:a1:02:d1:c2:1f:cb:0a:25:
                    7c:4e:18:2f:21:3e:1a:0e:ed:19:bc:68:60:74:12:
                    91:6a:b7:fe:3c:47:a5:9e:68:cd:c7:a8:fe:d6:e7:
                    3c:58:67:03:5b:28:2e:30:2f:66:0f:1f:0f:d4:b1:
                    7f:78:2f:fd:e4:bc:0d:05:77:82:74:1f:7b:c3:c3:
                    9d:c8:7f:95:ab:59:74:95:52:fd:1a:16:1e:b1:6f:
                    57:5e:da:02:76:59:b6:8f:f0:7e:85:84:3d:45:4b:
                    3b:6e:2f:20:4e:68:8f:f0:a7:22:fe:17:68:8b:aa:
                    8a:2b:a6:a3:e0:10:f7:17:47:f2:81:fe:2b:50:0b:
                    be:a5:89:1d:8c:ac:57:5a:0b:40:75:61:d0:22:60:
                    7c:5f:4f:96:eb:c5:f7:4c:69:16:03:7b:21:d4:37:
                    76:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:62:B0:85:5C:25:6B:20:17:CC:A8:13:1F:03:80:91:30:26:D5:F9
            X509v3 Authority Key Identifier:
                keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:70:68:60:a7:82:a2:17:ba:c8:22:1c:45:67:f4:38:d6:c3:
         5e:d0:bd:a4:d1:bd:93:72:ec:4c:95:27:57:c9:95:04:ee:1a:
         64:9f:c2:f2:03:ac:16:82:5a:27:3c:f1:e7:3c:04:90:cd:3a:
         01:0b:13:a7:e1:a9:ed:83:84:03:a1:37:90:19:14:c9:e1:e1:
         d9:d7:f4:a6:96:6a:53:82:b0:a5:f6:14:38:8d:e4:3d:84:1c:
         f7:4f:6b:10:0c:c2:43:d4:08:47:bf:0c:f7:ec:73:9e:c2:28:
         2e:b6:9b:ec:d0:f5:ee:84:35:66:4d:11:cb:e4:41:5c:ad:a5:
         ac:63:29:43:bb:a8:84:36:8e:08:8f:cf:10:07:9e:9b:6a:9f:
         c0:9e:d3:b8:75:f8:e4:25:c8:79:cc:3d:d0:28:0f:40:33:6c:
         69:80:e3:cd:f5:a4:da:6f:68:4f:d7:75:18:cb:76:62:88:ed:
         e1:4a:89:b3:2a:45:7e:bf:8f:d1:d6:04:3c:36:6a:5d:d0:36:
         41:49:50:45:61:38:e7:07:81:7f:a3:fa:df:7b:88:0e:71:a2:
         b8:ce:ca:d7:51:2a:96:19:18:77:91:80:5b:29:fe:5b:12:ee:
         3c:2e:3d:3a:e5:16:07:ea:2b:eb:df:a6:ab:04:37:6e:4a:3c:
         2e:04:19:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:19 2026 by rpki-client