Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File:                     SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier:          t25zbxKpBvUcOHKQvMeA2VIUKBVssWocYNgHHze2i4w=
Subject key identifier:   72:F7:29:1D:57:6C:8E:9A:3D:74:97:28:DD:34:8D:53:97:FA:AB:6F
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer:       /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial:       019E1D2296FB543C451E90943B85C8D9DC0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 17:01:06 +0000
Manifest this update:     Tue 12 May 2026 17:01:06 +0000
Manifest next update:     Wed 13 May 2026 17:01:06 +0000
Files and hashes:         1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: Bpa8wZ6wPZjJTK08Gv1CHuPRrglSF5wYSOJS2OqJKYo=)
                          2: b6GatGiUFxM_87xt_5qHFxZqZQ0.roa (hash: aB8H9RSypH5EK63/M5cIx7z9EJKV2WitqNTM48KwyXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:96:fb:54:3c:45:1e:90:94:3b:85:c8:d9:dc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
        Validity
            Not Before: May 12 17:01:06 2026 GMT
            Not After : May 13 17:01:06 2026 GMT
        Subject: CN=72f7291d576c8e9a3d749728dd348d5397faab6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:2e:90:12:6d:f3:92:54:18:c6:59:3c:26:
                    93:d3:ed:e7:55:ae:17:1c:60:11:7b:99:71:7d:38:
                    6e:44:47:ec:98:4e:2a:1c:8f:fe:a4:2a:af:d5:17:
                    e0:c7:3f:d9:aa:98:89:01:72:84:cc:14:18:70:da:
                    17:e0:d9:ae:f0:23:4b:3e:83:34:6f:95:7e:55:0f:
                    b6:75:ad:4e:5f:39:b6:2b:00:4d:8b:f7:c4:9f:3a:
                    9d:60:7e:76:e0:73:72:a3:a8:35:91:b4:a1:0b:be:
                    59:c0:aa:69:f0:9f:3a:ba:dd:8b:af:45:97:4c:65:
                    40:96:8e:cf:d4:7e:58:7d:c9:ed:51:ab:64:40:39:
                    93:7b:8f:fb:5e:69:19:1c:b5:67:ac:dd:62:b1:2d:
                    bc:08:ce:20:bb:46:2a:4e:4a:d1:9a:94:42:14:cc:
                    39:4c:8f:a8:2c:28:38:8c:d1:42:47:9d:ee:08:d2:
                    ae:8b:61:58:24:a1:44:01:42:fc:28:49:78:3b:5f:
                    d3:30:b0:b0:92:cf:fe:5e:e3:1e:09:58:c9:62:70:
                    e6:42:0b:92:3a:d8:26:78:7a:3b:a9:35:d8:dd:14:
                    ea:7c:68:21:2f:a8:35:b0:9a:74:c8:1c:fe:9a:27:
                    3e:24:50:cc:27:8c:39:d9:4e:fe:17:77:92:34:82:
                    f2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F7:29:1D:57:6C:8E:9A:3D:74:97:28:DD:34:8D:53:97:FA:AB:6F
            X509v3 Authority Key Identifier:
                keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a0:47:eb:67:70:2b:c4:69:42:ea:96:69:48:56:ce:70:b4:
         6e:55:5d:f6:bd:0b:65:ae:b7:d2:52:89:43:65:c1:a9:e4:35:
         49:d1:fc:9d:bf:59:07:51:f4:64:c2:72:fe:59:23:c8:5b:8b:
         b2:e9:ad:32:b1:fa:3d:d6:13:45:5b:7f:3d:2e:d5:66:56:42:
         43:fc:04:45:87:67:88:5c:55:c8:96:70:ba:0b:a3:03:1b:76:
         b2:87:36:de:c7:3e:bf:6d:8d:0a:43:37:77:f3:32:c0:82:df:
         54:75:18:80:e7:17:d7:5b:9e:e9:bf:b7:25:af:54:8c:18:f2:
         87:3f:ba:6a:14:c1:38:e8:e1:64:99:29:a9:46:cd:05:a6:73:
         7d:f6:16:3b:77:69:93:da:51:5d:46:82:39:59:d0:07:6d:4d:
         09:cc:67:8d:18:e6:39:19:02:cd:b4:a4:63:28:f7:b5:60:f4:
         84:ee:f6:41:0d:83:3e:1d:52:2a:2c:7b:ca:66:a4:50:bf:34:
         65:5a:0e:2e:21:e6:da:49:7a:52:e6:23:ee:d3:e2:99:7b:58:
         26:a4:90:50:90:ad:25:32:8a:38:0c:66:ad:a6:2b:6b:f7:04:
         40:5c:65:a7:40:24:f3:cd:e7:61:e9:4e:60:d6:53:8a:bd:41:
         63:0d:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:22:38 2026 by rpki-client