Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
File:                     SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft (raw, json)
Hash identifier:          PFI3qblLqG/3oFmJcYYkO6zhQA+ayqXHuzMJijXadDQ=
Subject key identifier:   05:65:F3:29:A4:64:17:46:E4:B7:A6:DE:7D:01:99:81:C3:C0:B8:87
Authority key identifier: 48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89
Certificate issuer:       /CN=48cf96aa5eb0774f0d7b426b327435a8788eb189
Certificate serial:       019CAF47E4944C15ACCD9E00E78A3E340119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 16:00:50 +0000
Manifest this update:     Mon 02 Mar 2026 16:00:50 +0000
Manifest next update:     Tue 03 Mar 2026 16:00:50 +0000
Files and hashes:         1: SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl (hash: bKgWzv01+1lWy6Qx7O7OJZT0jorZ4KJ5rTOW1aVynf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:47:e4:94:4c:15:ac:cd:9e:00:e7:8a:3e:34:01:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cf96aa5eb0774f0d7b426b327435a8788eb189
        Validity
            Not Before: Mar  2 16:00:50 2026 GMT
            Not After : Mar  3 16:00:50 2026 GMT
        Subject: CN=0565f329a4641746e4b7a6de7d019981c3c0b887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:80:da:bc:36:bc:af:c8:94:28:66:66:d9:
                    50:06:9f:7b:f5:4c:0b:53:b3:ca:11:26:a3:79:5b:
                    76:73:2a:4b:30:e1:e5:18:01:d2:e0:40:54:a9:98:
                    23:2f:8b:e1:fd:a9:a2:45:24:b3:ea:8b:a7:3a:f3:
                    81:f7:5e:88:26:88:2d:4e:b6:5f:0d:1e:9a:7f:29:
                    14:a0:a0:40:01:cd:6a:e0:3a:cd:45:b7:f7:db:5c:
                    3b:ed:11:c8:7b:8e:14:b7:56:30:f2:58:b4:25:6c:
                    47:a5:47:34:52:dc:66:74:05:6c:fc:36:ae:7f:69:
                    e0:b4:69:74:39:24:26:66:dd:53:f3:2a:03:3b:32:
                    97:13:90:34:2c:95:ef:b8:70:53:f4:09:0f:38:37:
                    ea:ca:78:c0:24:27:7c:da:df:c5:03:f2:9a:91:e8:
                    78:f2:94:9e:28:f6:c2:85:40:34:3d:82:92:2c:85:
                    a1:40:f5:2f:1a:f6:e7:61:e1:66:ce:d7:39:bb:a8:
                    ba:62:d6:62:b6:ad:67:27:e7:29:4a:c6:c1:19:20:
                    ba:87:5d:58:29:f2:34:40:b6:63:21:3e:1a:cf:24:
                    38:c3:8f:b1:09:b9:27:03:60:03:29:4d:29:e7:7b:
                    9a:e6:3c:f8:b8:5a:9c:32:2d:dd:b8:f4:6e:ea:e0:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:65:F3:29:A4:64:17:46:E4:B7:A6:DE:7D:01:99:81:C3:C0:B8:87
            X509v3 Authority Key Identifier:
                keyid:48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:44:e4:df:60:e6:19:d2:ed:d7:41:b8:72:16:db:31:e7:59:
         f8:17:3e:71:8c:5a:e5:30:68:a4:23:5c:d1:db:a0:38:7a:28:
         75:fc:6b:97:a9:5a:16:d8:ec:92:01:dd:81:2d:80:9b:8a:1b:
         1a:b1:df:39:26:9e:b4:b5:8e:09:49:da:f6:b4:25:3e:9d:1d:
         ce:7a:16:f3:c2:1d:e1:97:82:3f:65:4e:9d:ac:fe:e0:17:5c:
         14:67:4c:bb:bd:69:43:fc:af:87:d0:83:3d:b9:c8:4c:59:9b:
         9e:ed:29:e1:1d:bd:29:d9:36:3b:34:ef:33:5b:be:b2:96:20:
         6f:2e:1a:5c:59:35:c8:fb:34:b8:69:ad:f0:fc:2b:c6:b0:45:
         c3:0b:95:7f:54:21:b4:da:cd:a9:f0:f9:72:7c:c3:b4:05:d0:
         2e:93:e6:2e:12:16:22:51:21:8d:e4:c4:f6:14:4f:a5:e7:32:
         98:24:f7:ef:b6:aa:9f:2f:f1:e4:7c:59:90:7d:b1:1d:1c:ab:
         7d:ea:8f:b3:87:84:91:e4:21:77:d0:d4:93:ac:aa:4c:0c:09:
         67:63:c0:85:4d:20:86:63:87:e9:f0:d3:ae:33:51:b8:1e:e0:
         7b:b5:34:2a:c1:d2:64:89:6a:39:c5:24:2c:5a:8e:bc:ed:e0:
         b3:cb:ac:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvR+SUTBWszZ4A54o+NAEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Y2Y5NmFhNWViMDc3NGYwZDdiNDI2YjMyNzQzNWE4Nzg4
ZWIxODkwHhcNMjYwMzAyMTYwMDUwWhcNMjYwMzAzMTYwMDUwWjAzMTEwLwYDVQQD
EygwNTY1ZjMyOWE0NjQxNzQ2ZTRiN2E2ZGU3ZDAxOTk4MWMzYzBiODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm++A2rw2vK/IlChmZtlQBp979UwL
U7PKESajeVt2cypLMOHlGAHS4EBUqZgjL4vh/amiRSSz6ounOvOB916IJogtTrZf
DR6afykUoKBAAc1q4DrNRbf321w77RHIe44Ut1Yw8li0JWxHpUc0UtxmdAVs/Dau
f2ngtGl0OSQmZt1T8yoDOzKXE5A0LJXvuHBT9AkPODfqynjAJCd82t/FA/Kakeh4
8pSeKPbChUA0PYKSLIWhQPUvGvbnYeFmztc5u6i6YtZitq1nJ+cpSsbBGSC6h11Y
KfI0QLZjIT4azyQ4w4+xCbknA2ADKU0p53ua5jz4uFqcMi3duPRu6uBMeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVl8ymkZBdG5Lem3n0BmYHDwLiHMB8GA1UdIwQY
MBaAFEjPlqpesHdPDXtCazJ0Nah4jrGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU00tV3FsNndkMDhOZTBKck1uUTFxSGlPc1lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hNjJmMDYtZDE2ZC00ZWI5LWI1Y2Yt
NDBhNGNmYzk2MjJjLzEvU00tV3FsNndkMDhOZTBKck1uUTFxSGlPc1lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hNjJmMDYtZDE2ZC00ZWI5LWI1Y2YtNDBhNGNmYzk2MjJj
LzEvU00tV3FsNndkMDhOZTBKck1uUTFxSGlPc1lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkTk32Dm
GdLt10G4chbbMedZ+Bc+cYxa5TBopCNc0dugOHoodfxrl6laFtjskgHdgS2Am4ob
GrHfOSaetLWOCUna9rQlPp0dznoW88Id4ZeCP2VOnaz+4BdcFGdMu71pQ/yvh9CD
PbnITFmbnu0p4R29Kdk2OzTvM1u+spYgby4aXFk1yPs0uGmt8PwrxrBFwwuVf1Qh
tNrNqfD5cnzDtAXQLpPmLhIWIlEhjeTE9hRPpecymCT377aqny/x5HxZkH2xHRyr
feqPs4eEkeQhd9DUk6yqTAwJZ2PAhU0ghmOH6fDTrjNRuB7ge7U0KsHSZIlqOcUk
LFqOvO3gs8usvw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:08:39 2026 by rpki-client