Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
File:                     smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json)
Hash identifier:          yrggxTEvcYKCpE2CgXl0A5DADjE0b8a4CjGOkUAbnSo=
Subject key identifier:   5E:CA:96:63:A2:21:38:78:1F:42:35:E8:B5:3F:E6:95:CA:79:F9:B9
Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
Certificate issuer:       /CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Certificate serial:       019EC2C9C8B7A1AABD81B4B82011FF9D9DD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
Manifest number:          03EE
Signing time:             Sat 13 Jun 2026 21:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:04 +0000
Files and hashes:         1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: aTh5idY8LLcWun6vNxanQWhV4H8/DLu9S/E6iEgmyfA=)
                          2: us0cCXgOVilyc_-btAWVQ_9HSm0.roa (hash: FpuhhqsWI6lqjf12zy/aTBMSr3k50lCdEcAaN9Dak/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:c8:b7:a1:aa:bd:81:b4:b8:20:11:ff:9d:9d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b
        Validity
            Not Before: Jun 13 21:01:04 2026 GMT
            Not After : Jun 14 21:01:04 2026 GMT
        Subject: CN=5eca9663a22138781f4235e8b53fe695ca79f9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:c5:e6:9b:54:ea:db:c5:d6:7c:de:f1:a6:
                    47:e9:31:e3:1d:a1:0a:ac:06:cc:7d:22:76:54:9f:
                    64:50:ae:12:6f:b6:ea:0f:a0:17:76:6e:4b:2f:4d:
                    43:27:10:a0:bc:ed:33:20:ec:54:10:ff:32:a7:b0:
                    6d:84:e3:bd:21:e6:76:67:a7:81:ab:da:b3:e9:13:
                    77:a4:26:ea:69:e3:c7:90:e5:c3:65:85:23:2a:03:
                    61:42:24:9b:5e:ae:50:df:c3:64:2f:63:44:1b:7b:
                    77:18:93:1e:8f:29:2e:2b:2c:12:db:b5:8c:b7:39:
                    30:c6:ce:53:2c:82:62:a9:17:0b:9c:0c:42:62:8b:
                    15:65:45:9a:82:4b:c9:c0:dd:4d:29:7f:fd:77:0b:
                    13:61:25:6b:72:4d:d4:b7:b9:6c:a1:69:63:4c:0b:
                    c0:65:1f:b5:8f:cc:15:f2:8d:54:ce:67:ee:6c:b9:
                    f7:71:3a:d3:d7:12:8a:e4:c6:09:f7:1a:ee:fc:b8:
                    52:42:43:fe:a4:c9:32:5b:80:b9:07:dc:a2:90:3b:
                    1d:77:76:1e:cb:3e:2f:1b:dc:1c:58:71:1b:9b:38:
                    c2:0d:96:68:ce:46:1b:d7:88:8e:26:9e:f1:2c:89:
                    30:4e:66:19:aa:9f:02:e3:2b:49:5c:f7:c1:94:2c:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CA:96:63:A2:21:38:78:1F:42:35:E8:B5:3F:E6:95:CA:79:F9:B9
            X509v3 Authority Key Identifier:
                keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:29:33:df:b1:b4:7a:4c:67:21:d4:8a:23:87:0c:aa:6f:61:
         96:ec:8f:28:6f:35:05:75:66:2f:ba:84:60:2d:af:e4:78:92:
         0d:e3:6f:20:4a:f8:16:08:21:e3:0c:11:7b:21:60:1c:f9:d7:
         bc:e1:7f:70:2a:d1:69:26:88:17:ba:78:16:a7:2f:75:30:1f:
         fd:36:6a:3c:e3:cd:51:7a:43:9b:b1:e9:cd:85:f7:70:b2:0d:
         83:f0:78:4a:90:4d:f3:90:22:90:9d:c9:62:0b:14:f8:3e:75:
         c7:02:0c:ea:64:55:cb:34:02:50:b5:ed:3a:5d:83:20:19:0a:
         5a:25:9d:3f:5f:2f:59:ab:86:36:57:36:4a:73:62:a6:d1:3a:
         02:fe:e4:23:c6:f5:27:78:58:b1:25:d7:6f:5f:9a:a7:cd:d1:
         28:5c:7f:98:69:97:0a:7d:bb:d5:3d:62:d6:6f:d8:08:12:e1:
         b4:f9:49:33:8a:ce:ec:49:65:b8:d9:92:8e:33:79:88:c2:36:
         18:e7:d8:3c:7e:cc:ec:16:d6:22:5a:83:f1:aa:83:79:1c:47:
         08:f0:07:3b:71:71:1a:dc:74:5c:cc:c8:0a:fb:81:22:a6:cd:
         fd:55:09:98:58:3f:02:03:76:52:64:1d:7d:50:b9:47:19:02:
         8b:72:e4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:17:47 2026 by rpki-client