Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
File:                     SmyWV_fDBZWx2hfELhdtdSygVLg.mft (raw, json)
Hash identifier:          XIz6XOgIIUJHGFojfgQj4d/GEXQJuSspKLLkaFVj9j4=
Subject key identifier:   BA:A0:5A:1D:24:57:28:E5:C6:1C:8A:0D:75:5F:0B:45:F0:79:3D:2D
Authority key identifier: 4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8
Certificate issuer:       /CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
Certificate serial:       01A0C0D5D99F42925CADEE0FECD75F77029B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
Manifest number:          0D1D
Signing time:             Sun 20 Sep 2026 22:00:35 +0000
Manifest this update:     Sun 20 Sep 2026 22:00:35 +0000
Manifest next update:     Mon 21 Sep 2026 22:00:35 +0000
Files and hashes:         1: 7dwMWzxrYLKUyz9OMFwsm3A1O5Y.asa (hash: ywvJHVR3B4vawxtuFjj3XJUi3rb3QhowkNq1qP6BNhk=)
                          2: SmyWV_fDBZWx2hfELhdtdSygVLg.crl (hash: 4ShGLtLCYiMfn7W9gE+KVzdDCc7d8B42LDhSVWXvp6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:d5:d9:9f:42:92:5c:ad:ee:0f:ec:d7:5f:77:02:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
        Validity
            Not Before: Sep 20 22:00:35 2026 GMT
            Not After : Sep 21 22:00:35 2026 GMT
        Subject: CN=baa05a1d245728e5c61c8a0d755f0b45f0793d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:07:2f:e5:a7:e1:dd:ff:1a:cd:67:61:7f:
                    5b:1d:fc:5e:5e:f9:ae:47:05:8a:b9:3b:f5:39:7e:
                    7b:11:2a:b6:a1:fe:5c:45:ed:d3:f5:0e:5b:55:b0:
                    f6:56:c6:1c:3d:23:fb:5e:af:6d:9a:80:7c:b6:40:
                    9e:8a:df:c4:d1:03:c0:66:6a:1a:ae:d2:7a:7e:16:
                    df:d5:17:6a:b8:5c:75:36:85:50:6b:c3:7c:85:01:
                    83:e1:89:c5:5f:89:66:bc:c8:f3:0e:e1:dc:0a:5a:
                    fb:80:f2:e9:0c:3c:b0:45:72:63:37:ca:51:19:55:
                    63:29:ab:9f:04:fc:53:36:ee:cc:44:84:dc:73:96:
                    79:e6:fd:f0:ff:34:81:d6:ef:4c:41:3b:ec:ed:e8:
                    85:b2:70:2b:21:13:10:90:c0:dc:6f:7e:d1:ff:a8:
                    f9:b0:40:2b:dd:7f:1c:97:bc:3f:c8:9d:5b:44:ef:
                    0c:69:9b:60:c8:3b:38:ce:6f:bb:1a:06:da:be:18:
                    aa:f1:18:02:3e:6e:a8:ca:5c:dc:c2:76:0b:28:4b:
                    94:16:b3:0b:7e:5f:71:43:89:6e:64:4d:a4:49:10:
                    96:03:f5:d1:d9:64:8a:fb:55:92:74:bf:79:a1:50:
                    cd:09:1c:20:14:bc:81:6f:93:73:5e:5e:3a:0d:e1:
                    1c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A0:5A:1D:24:57:28:E5:C6:1C:8A:0D:75:5F:0B:45:F0:79:3D:2D
            X509v3 Authority Key Identifier:
                keyid:4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:73:63:ce:8c:4c:e9:35:4b:e9:76:5d:a0:04:64:3f:3e:f9:
         b8:a2:13:94:f6:a2:94:cd:9a:e5:32:2c:1b:86:67:ae:e8:30:
         db:a6:3b:1d:47:4a:93:7e:83:e8:b2:58:2b:7c:fb:93:35:6b:
         c0:78:ff:97:6f:7b:95:ec:c3:d8:73:1e:9f:e7:eb:f9:04:37:
         d9:77:14:5d:9a:66:6f:1f:11:e9:86:4a:31:54:95:cb:52:59:
         d5:f1:ab:5e:2a:5c:bf:fa:68:c3:b6:94:6e:e4:91:cb:a5:63:
         1e:fd:60:ba:3d:04:b9:8d:97:bd:ff:1f:c1:4d:30:b2:7c:24:
         2b:31:97:13:de:12:7e:74:33:26:14:9f:8c:00:7e:8f:bf:14:
         04:33:57:50:8f:7c:86:9b:d1:b6:95:3b:c3:ce:79:e5:1d:73:
         8c:15:fd:85:f2:64:d3:44:b1:7e:e5:3c:25:af:0f:70:a5:5e:
         c5:30:37:26:a0:d6:45:12:ba:05:69:fb:a1:85:ff:6d:e9:80:
         cd:bd:94:0e:30:ab:f3:88:b5:b2:e0:ba:86:63:5b:f3:d1:04:
         6d:f2:57:d2:79:53:aa:12:ac:18:0f:24:6c:e3:9a:22:69:a3:
         e0:ca:7e:d2:23:df:d1:e5:97:8f:47:b3:de:82:73:af:16:fc:
         ff:dd:7d:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDA1dmfQpJcre4P7NdfdwKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmM5NjU3ZjdjMzA1OTViMWRhMTdjNDJlMTc2ZDc1MmNh
MDU0YjgwHhcNMjYwOTIwMjIwMDM1WhcNMjYwOTIxMjIwMDM1WjAzMTEwLwYDVQQD
EyhiYWEwNWExZDI0NTcyOGU1YzYxYzhhMGQ3NTVmMGI0NWYwNzkzZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1oHL+Wn4d3/Gs1nYX9bHfxeXvmu
RwWKuTv1OX57ESq2of5cRe3T9Q5bVbD2VsYcPSP7Xq9tmoB8tkCeit/E0QPAZmoa
rtJ6fhbf1RdquFx1NoVQa8N8hQGD4YnFX4lmvMjzDuHcClr7gPLpDDywRXJjN8pR
GVVjKaufBPxTNu7MRITcc5Z55v3w/zSB1u9MQTvs7eiFsnArIRMQkMDcb37R/6j5
sEAr3X8cl7w/yJ1bRO8MaZtgyDs4zm+7Ggbavhiq8RgCPm6oylzcwnYLKEuUFrML
fl9xQ4luZE2kSRCWA/XR2WSK+1WSdL95oVDNCRwgFLyBb5NzXl46DeEc7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqgWh0kVyjlxhyKDXVfC0XweT0tMB8GA1UdIwQY
MBaAFEpsllf3wwWVsdoXxC4XbXUsoFS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU215V1ZfZkRCWld4MmhmRUxoZHRkU3lnVkxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hODM5Y2MtMjkyZC00NzJmLThhMzkt
NWY2NzYwODE4NjU1LzEvU215V1ZfZkRCWld4MmhmRUxoZHRkU3lnVkxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hODM5Y2MtMjkyZC00NzJmLThhMzktNWY2NzYwODE4NjU1
LzEvU215V1ZfZkRCWld4MmhmRUxoZHRkU3lnVkxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXNjzoxM
6TVL6XZdoARkPz75uKITlPailM2a5TIsG4Znrugw26Y7HUdKk36D6LJYK3z7kzVr
wHj/l297lezD2HMen+fr+QQ32XcUXZpmbx8R6YZKMVSVy1JZ1fGrXipcv/pow7aU
buSRy6VjHv1guj0EuY2Xvf8fwU0wsnwkKzGXE94SfnQzJhSfjAB+j78UBDNXUI98
hpvRtpU7w8555R1zjBX9hfJk00SxfuU8Ja8PcKVexTA3JqDWRRK6BWn7oYX/bemA
zb2UDjCr84i1suC6hmNb89EEbfJX0nlTqhKsGA8kbOOaImmj4Mp+0iPf0eWXj0ez
3oJzrxb8/9198w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:35:39 2026 by rpki-client