Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
File:                     smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json)
Hash identifier:          86faklxNJSGk9oSJhjQDTySzJ1smDD9guiKXx40Jl5s=
Subject key identifier:   3B:8C:9F:97:73:49:80:73:83:27:23:EC:1E:B2:F0:F5:95:6A:48:9D
Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
Certificate issuer:       /CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Certificate serial:       019FAC7681B1254DB86230CD3DB37C3C63DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
Manifest number:          0467
Signing time:             Wed 29 Jul 2026 06:01:15 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:15 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:15 +0000
Files and hashes:         1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: LkiGZwzeYFrulg74ofMwPtVMDG9zjfoXXkRDa5aY5ko=)
                          2: us0cCXgOVilyc_-btAWVQ_9HSm0.roa (hash: FpuhhqsWI6lqjf12zy/aTBMSr3k50lCdEcAaN9Dak/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:81:b1:25:4d:b8:62:30:cd:3d:b3:7c:3c:63:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b
        Validity
            Not Before: Jul 29 06:01:15 2026 GMT
            Not After : Jul 30 06:01:15 2026 GMT
        Subject: CN=3b8c9f9773498073832723ec1eb2f0f5956a489d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0f:bd:9d:9f:9e:2b:78:26:c0:bb:cd:41:7b:
                    e7:a6:5d:ba:13:9c:71:63:be:07:83:43:7a:0c:bd:
                    86:f4:03:62:5d:5c:b5:c0:fc:3f:ed:9b:2f:15:f3:
                    a3:70:5a:0f:ba:ba:ca:0a:32:52:98:4c:e4:d8:d4:
                    8f:57:20:3a:61:c1:59:a5:ff:55:65:f7:c9:16:2e:
                    68:61:f1:a0:57:73:f1:5d:39:0f:c0:29:4c:65:94:
                    23:ce:c7:08:ba:98:79:7c:20:99:14:63:79:58:0f:
                    cd:7b:16:da:ef:18:15:5e:39:00:bf:d3:e7:1d:0e:
                    ce:58:28:8d:38:d3:a3:c5:18:0d:87:96:db:7e:0d:
                    b9:88:05:c2:b9:07:1b:ad:56:a8:a9:62:a7:b7:c3:
                    cc:79:a1:4b:93:ce:7b:60:1e:d5:2e:b2:9b:18:71:
                    25:b6:2a:5d:af:23:32:69:52:ee:4a:e5:f3:cc:8d:
                    1b:62:42:7b:85:a2:d5:6b:12:ce:bf:6f:25:1a:77:
                    d5:99:1d:0e:f3:9d:9a:70:b4:c7:44:3e:db:ac:a8:
                    d6:c5:fd:e7:ed:71:30:68:72:15:d7:4a:74:56:00:
                    5b:23:82:e3:6b:87:bf:f7:2e:72:6f:65:99:7e:4e:
                    c5:06:62:c4:2b:10:84:a8:a7:27:63:77:c3:9d:65:
                    92:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8C:9F:97:73:49:80:73:83:27:23:EC:1E:B2:F0:F5:95:6A:48:9D
            X509v3 Authority Key Identifier:
                keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ca:7a:9f:5b:73:52:75:27:ba:a8:5f:e4:70:7e:1a:8c:30:
         27:32:03:8b:a3:e4:8c:45:64:36:72:ff:a9:88:2c:c0:0c:df:
         f9:c1:a1:32:aa:77:93:1e:3c:5c:07:57:4e:48:d1:18:f7:25:
         b0:9d:8d:5c:ce:14:a2:7e:00:3c:a0:ef:27:bb:31:68:f5:8c:
         a2:61:08:00:c5:0c:b9:81:62:38:6f:40:1b:13:ef:85:85:62:
         37:66:9b:50:a7:93:8c:b2:5d:a1:94:e8:af:88:95:92:0f:ed:
         f1:e8:97:24:aa:28:45:08:65:35:0f:54:01:f0:80:ea:7e:03:
         f4:52:1c:7b:bf:d9:74:e2:fa:d9:2e:e4:f7:be:d8:48:85:3e:
         13:2e:9f:0d:c4:85:1d:5d:53:3f:85:d1:c9:68:5d:83:94:50:
         02:3e:90:f7:04:d2:7f:3b:24:db:16:51:3e:ec:c3:c0:9a:dd:
         9f:61:d2:6e:61:2c:8b:e4:77:07:91:dc:dc:2b:87:36:4d:29:
         dc:ac:cf:62:d1:fc:d2:1c:ba:a0:9f:57:4c:e9:22:7a:29:8b:
         0e:1c:b4:d6:bf:96:94:6f:be:72:e9:84:29:aa:14:fc:c1:a5:
         2d:06:63:95:bd:1a:ef:12:7e:9b:bf:60:02:bd:b4:d0:22:4e:
         ff:db:76:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:01:11 2026 by rpki-client