Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
File:                     SMuUpENJ-Y1Am33bmgU99K7xrd8.mft (raw, json)
Hash identifier:          +CBN/op99ADMzxJ2oAXRQgvMn840rkUkj0Y7EaYC23E=
Subject key identifier:   CE:41:89:69:E9:F0:10:79:14:1A:B6:F4:04:3E:EF:93:46:BD:63:3D
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Certificate issuer:       /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial:       019D27E01C4A897992494D6BC97455384270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
Manifest number:          1175
Signing time:             Thu 26 Mar 2026 02:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:31 +0000
Files and hashes:         1: SMuUpENJ-Y1Am33bmgU99K7xrd8.crl (hash: A9seaQFUtuMndnuvOMpHiF13tUl4blSgUmtAOZcKoAk=)
                          2: dvvd8BFnizdhbvkzk4JTGk-vGGA.roa (hash: KB+M+z0sgcKeuNslZAle5MJmCWCAbOChFQfMcbOTgYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:1c:4a:89:79:92:49:4d:6b:c9:74:55:38:42:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
        Validity
            Not Before: Mar 26 02:01:31 2026 GMT
            Not After : Mar 27 02:01:31 2026 GMT
        Subject: CN=ce418969e9f01079141ab6f4043eef9346bd633d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3a:63:98:44:94:41:ec:17:e6:ab:09:3b:f1:
                    e0:f0:9d:67:cf:27:c0:6b:54:99:59:47:ef:e4:3d:
                    53:a0:8e:6c:91:d0:c0:18:13:9d:fe:d5:f9:c6:8a:
                    e9:e0:34:e5:81:46:b6:e7:77:d9:c7:24:a7:bb:b4:
                    61:46:2e:1b:7e:7f:58:b6:87:6a:ba:e2:2d:80:b3:
                    51:16:39:da:bb:84:f5:5a:38:ef:86:b2:fb:9d:d1:
                    e3:b8:e2:4e:db:e2:0b:cc:6f:7a:b9:97:3d:09:71:
                    f7:37:d6:db:58:53:c4:84:ae:64:17:37:ab:34:f2:
                    95:db:c2:72:fa:cb:56:bc:e1:a2:ae:93:1f:27:57:
                    98:06:17:94:03:45:f4:2d:ca:ff:ce:6c:23:3b:93:
                    9a:02:0f:1a:70:ba:a5:91:32:1d:69:d2:38:b9:9b:
                    1b:78:fc:0a:04:4d:b1:8c:8b:ec:3c:ec:f2:8f:85:
                    78:db:d8:7e:e2:b9:23:05:95:22:45:87:d3:d8:2d:
                    a4:7a:3c:8c:a7:3a:34:b3:a8:b7:6d:a0:21:4c:a4:
                    e8:22:1f:ec:20:b8:c2:c5:ba:b8:d0:a1:14:cd:b2:
                    b8:d3:cd:3c:a0:96:71:9a:97:8a:df:71:26:da:3e:
                    95:63:38:a2:00:38:ae:ed:4b:46:51:e8:e5:44:c6:
                    36:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:41:89:69:E9:F0:10:79:14:1A:B6:F4:04:3E:EF:93:46:BD:63:3D
            X509v3 Authority Key Identifier:
                keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:b3:3d:b4:4f:94:92:45:39:39:3f:1e:f9:12:1e:de:3f:
         63:20:34:a9:1e:17:1e:aa:32:63:43:7f:03:97:f9:c6:6a:1b:
         ae:6f:a4:90:34:b2:c3:45:f9:b7:e4:0d:4f:d7:5c:2f:51:8c:
         af:c0:0b:4e:1b:7c:23:65:ff:89:b1:c2:20:f3:e3:c1:15:36:
         0c:a1:4b:83:d5:c1:8b:5c:7d:fa:2c:be:f7:4b:d1:8e:66:2e:
         51:28:a2:08:31:28:73:42:f2:12:35:b1:67:c0:1b:32:1a:3c:
         b0:ec:bb:d2:e6:d7:dd:16:ee:85:b1:9b:b2:04:ab:ba:95:48:
         73:8a:cd:14:e8:c8:9f:c9:03:78:f3:67:09:10:47:49:3d:94:
         cc:82:64:a7:4f:65:67:9b:61:95:f4:2d:88:fe:f7:d7:61:1c:
         6e:7b:14:6c:ff:f1:b1:57:31:51:21:10:ae:f9:a1:88:da:6d:
         d4:12:f3:b8:23:46:d0:81:d9:79:29:e1:a2:1c:55:79:50:8b:
         95:a8:3b:88:20:0c:bc:59:09:2c:1b:60:8b:fc:7e:40:0e:24:
         5d:d2:b5:47:ff:19:c4:ed:25:95:ef:29:ce:59:57:ae:2b:de:
         23:3f:cd:72:2f:53:6e:80:49:02:fa:e5:cb:d1:bf:3f:14:d2:
         79:5a:95:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:08 2026 by rpki-client