Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
File:                     SmyWV_fDBZWx2hfELhdtdSygVLg.mft (raw, json)
Hash identifier:          FWFwlhq1YB4NTdpweX0nvASRB5KNavIakKr1we6kaEM=
Subject key identifier:   D7:21:2B:AD:91:11:89:95:CC:40:A0:AF:84:66:32:CA:09:50:37:BF
Authority key identifier: 4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8
Certificate issuer:       /CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
Certificate serial:       019CA78E93836CA67C6DC1BB7111294D231C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
Manifest number:          0AFD
Signing time:             Sun 01 Mar 2026 04:01:04 +0000
Manifest this update:     Sun 01 Mar 2026 04:01:04 +0000
Manifest next update:     Mon 02 Mar 2026 04:01:04 +0000
Files and hashes:         1: FqtY-pXqBbYdmvWJFd9hm2R1554.asa (hash: qKyi+MjDfEKrQMXB3k9THtt/iSw21UVzmfAd3cDChqE=)
                          2: SmyWV_fDBZWx2hfELhdtdSygVLg.crl (hash: j3Z8jdiFowIr6ZHQ3hjfJLquoFfWwh/hK2ZYSb2zjLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a7:8e:93:83:6c:a6:7c:6d:c1:bb:71:11:29:4d:23:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
        Validity
            Not Before: Mar  1 04:01:04 2026 GMT
            Not After : Mar  2 04:01:04 2026 GMT
        Subject: CN=d7212bad91118995cc40a0af846632ca095037bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:fc:92:33:4a:ad:d4:a6:9f:e9:b3:a3:9b:
                    34:fa:ac:cc:ff:d5:c1:9c:35:31:11:cb:86:d5:56:
                    3e:dd:c1:6d:cb:00:c4:4e:e4:71:28:44:54:dd:a1:
                    0e:96:22:24:fe:ab:98:bd:22:b3:d1:02:65:1c:b3:
                    50:58:b2:c0:cf:1d:f1:4e:5f:88:6b:71:70:a5:0d:
                    bc:2b:e4:1e:ce:11:50:11:b9:51:b5:40:5e:e2:37:
                    e8:bc:d2:89:c7:53:9a:db:e1:75:c3:f1:f1:84:85:
                    13:38:d1:9d:42:87:2f:5e:4b:e4:d5:72:10:bc:59:
                    2b:43:d7:f5:d5:02:24:7b:5a:93:19:f4:68:63:19:
                    0e:a6:61:02:19:af:dd:b7:1e:23:16:d6:72:33:97:
                    a9:93:47:4c:b7:21:e4:bb:aa:bd:75:ef:25:d6:c0:
                    2d:57:da:1e:71:95:b3:18:14:32:71:4b:a9:3e:54:
                    6c:dc:86:11:09:76:5d:7c:be:cc:f5:5c:77:e6:5a:
                    d2:e0:e7:18:95:39:f9:66:0d:95:3b:c2:39:11:16:
                    4d:84:1b:2b:30:b5:49:34:0e:97:b3:94:ad:6e:e1:
                    13:e6:13:cb:dd:37:3c:6c:e9:34:ad:cc:86:b4:f8:
                    f7:36:99:97:b1:75:83:cf:9c:a0:3e:0b:31:21:da:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:21:2B:AD:91:11:89:95:CC:40:A0:AF:84:66:32:CA:09:50:37:BF
            X509v3 Authority Key Identifier:
                keyid:4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1f:ba:a3:9d:1c:74:79:8a:0b:8f:79:05:f0:b7:e6:30:b7:
         26:ba:9c:0e:aa:5c:e1:33:d8:af:55:a8:b6:83:d9:0e:c8:e1:
         6c:1d:4b:85:f4:ee:65:b0:11:67:a6:31:ba:05:1f:1c:e5:0b:
         66:81:cc:57:53:2b:17:8e:44:23:12:39:7f:41:c8:4d:bd:ed:
         20:ae:ba:6f:32:8c:cc:51:10:cd:96:15:3f:05:47:21:7f:7a:
         a0:d2:2f:58:52:43:e5:5a:d5:e0:5a:e4:6e:42:c8:b2:1f:33:
         08:69:95:14:70:49:92:98:a4:d0:df:57:94:13:2f:f0:8e:2d:
         c4:57:b9:eb:ad:97:32:7d:8c:85:86:bf:92:1f:71:f3:7b:1d:
         db:a2:3a:6d:ce:1f:fc:61:d0:79:f7:7e:a9:5c:2c:a9:b5:4c:
         0d:b5:bc:9c:32:95:20:80:b4:13:d0:12:59:aa:61:4a:f7:9b:
         b8:9c:a8:4c:1c:a0:7b:20:bc:52:e7:d4:40:5d:6a:0c:40:66:
         83:8c:f1:2d:e1:82:d4:8e:7f:53:1b:fc:5f:48:be:4a:8e:b3:
         42:b1:c5:62:a3:7b:04:0e:df:80:9d:ff:29:4c:7b:5d:d8:07:
         99:c8:de:3e:52:b5:28:e3:80:b3:af:07:43:fa:a1:81:9c:ac:
         3f:58:cf:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZynjpODbKZ8bcG7cREpTSMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmM5NjU3ZjdjMzA1OTViMWRhMTdjNDJlMTc2ZDc1MmNh
MDU0YjgwHhcNMjYwMzAxMDQwMTA0WhcNMjYwMzAyMDQwMTA0WjAzMTEwLwYDVQQD
EyhkNzIxMmJhZDkxMTE4OTk1Y2M0MGEwYWY4NDY2MzJjYTA5NTAzN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMn8kjNKrdSmn+mzo5s0+qzM/9XB
nDUxEcuG1VY+3cFtywDETuRxKERU3aEOliIk/quYvSKz0QJlHLNQWLLAzx3xTl+I
a3FwpQ28K+QezhFQEblRtUBe4jfovNKJx1Oa2+F1w/HxhIUTONGdQocvXkvk1XIQ
vFkrQ9f11QIke1qTGfRoYxkOpmECGa/dtx4jFtZyM5epk0dMtyHku6q9de8l1sAt
V9oecZWzGBQycUupPlRs3IYRCXZdfL7M9Vx35lrS4OcYlTn5Zg2VO8I5ERZNhBsr
MLVJNA6Xs5StbuET5hPL3Tc8bOk0rcyGtPj3NpmXsXWDz5ygPgsxIdratwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNchK62REYmVzECgr4RmMsoJUDe/MB8GA1UdIwQY
MBaAFEpsllf3wwWVsdoXxC4XbXUsoFS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU215V1ZfZkRCWld4MmhmRUxoZHRkU3lnVkxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hODM5Y2MtMjkyZC00NzJmLThhMzkt
NWY2NzYwODE4NjU1LzEvU215V1ZfZkRCWld4MmhmRUxoZHRkU3lnVkxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hODM5Y2MtMjkyZC00NzJmLThhMzktNWY2NzYwODE4NjU1
LzEvU215V1ZfZkRCWld4MmhmRUxoZHRkU3lnVkxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFB+6o50c
dHmKC495BfC35jC3JrqcDqpc4TPYr1WotoPZDsjhbB1LhfTuZbARZ6YxugUfHOUL
ZoHMV1MrF45EIxI5f0HITb3tIK66bzKMzFEQzZYVPwVHIX96oNIvWFJD5VrV4Frk
bkLIsh8zCGmVFHBJkpik0N9XlBMv8I4txFe5662XMn2MhYa/kh9x83sd26I6bc4f
/GHQefd+qVwsqbVMDbW8nDKVIIC0E9ASWaphSvebuJyoTBygeyC8UufUQF1qDEBm
g4zxLeGC1I5/Uxv8X0i+So6zQrHFYqN7BA7fgJ3/KUx7XdgHmcjePlK1KOOAs68H
Q/qhgZysP1jP5g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:25 2026 by rpki-client