Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
File:                     smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json)
Hash identifier:          SBQSg++fytyTNG1aHrnzQ5oPov9NlhaYBp6NIqyUPcQ=
Subject key identifier:   19:E9:FB:7A:19:65:62:FE:69:22:47:1D:31:45:F0:F1:B9:11:21:C7
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Certificate issuer:       /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial:       019F95129A08B236FCC2B848121D186BFF9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
Manifest number:          1481
Signing time:             Fri 24 Jul 2026 17:00:52 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:52 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:52 +0000
Files and hashes:         1: K3--tSHrK6jHY5tkxG0drJwKCRw.roa (hash: FEwiaAI6iVYZhO3Y0U4cLdmpsBfhF+ZTk9nAW/Qd0gc=)
                          2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: Tb+Rav1zBwsoUhSP5c0FuT2fiR8M7i3fyfb2UFBgf3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:9a:08:b2:36:fc:c2:b8:48:12:1d:18:6b:ff:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
        Validity
            Not Before: Jul 24 17:00:52 2026 GMT
            Not After : Jul 25 17:00:52 2026 GMT
        Subject: CN=19e9fb7a196562fe6922471d3145f0f1b91121c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:c8:5a:5c:62:05:53:81:c5:20:9c:59:b2:
                    b6:3e:7e:97:ac:20:16:7b:e7:a4:e5:75:50:48:3f:
                    2c:5f:a3:58:c2:de:a5:c1:5e:87:8a:ac:b0:78:07:
                    be:fb:4b:8b:ad:12:93:c4:38:60:01:d1:50:63:4a:
                    26:29:d1:fb:9f:f0:8c:64:f6:88:89:46:42:52:74:
                    60:fa:48:2a:d8:b0:e0:9b:22:17:37:6c:ce:47:5e:
                    1a:92:51:4f:06:ef:63:9b:c1:1f:5d:d9:8f:14:be:
                    d9:71:1b:b8:dc:69:47:7f:27:d9:80:2d:e7:6f:e8:
                    29:8c:ab:53:26:30:16:41:70:74:38:20:4a:9c:ff:
                    1f:3a:87:d1:2b:f7:37:1b:1a:eb:bb:99:e8:37:cd:
                    9c:d8:50:dd:4c:7a:40:56:02:42:65:11:60:95:df:
                    ce:fb:d4:85:7c:70:29:a6:92:ab:48:39:52:30:a3:
                    18:01:6a:a9:53:8b:54:f4:31:04:ba:c0:21:73:fc:
                    0d:03:c1:67:c0:1e:aa:3a:81:56:84:33:7c:3b:13:
                    9b:34:83:fc:53:2d:7f:7d:93:c6:d6:2d:b1:66:13:
                    94:cf:52:a0:56:41:29:5e:71:0b:2d:a9:a5:be:b2:
                    05:64:b5:ae:9e:0f:fa:b1:46:7f:61:c7:15:e1:1c:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E9:FB:7A:19:65:62:FE:69:22:47:1D:31:45:F0:F1:B9:11:21:C7
            X509v3 Authority Key Identifier:
                keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3a:35:26:2e:61:8b:3c:06:41:96:60:19:ed:3c:86:09:9c:
         ab:74:46:e4:08:94:13:37:16:08:a3:08:34:2d:ca:9c:08:cb:
         dc:a5:07:91:59:cf:13:69:2b:db:d8:18:73:c4:c2:b2:c2:4a:
         18:ee:ca:8d:3f:d8:a6:3f:60:06:b9:1e:da:0c:a6:0b:76:28:
         d8:ea:ec:51:94:c8:9c:8a:4e:e6:50:20:98:4c:ef:1f:74:f6:
         11:eb:88:ad:96:b8:4e:f5:27:b2:e8:d0:81:24:64:ac:80:af:
         55:09:f7:78:41:d9:48:bb:4c:45:ef:a0:81:f6:50:92:1e:65:
         85:72:10:8f:cf:9d:d1:29:b5:a9:ae:1f:08:eb:f6:94:ec:ef:
         a0:db:19:2d:d1:ad:1d:5a:73:06:d7:c3:19:28:17:43:1c:a8:
         db:c9:ed:ea:37:e3:fb:6b:09:29:07:87:e1:14:e1:52:f8:64:
         c8:b5:f1:38:89:ed:f7:6b:1a:11:d8:f7:3e:5c:68:b1:35:01:
         41:b2:26:60:d6:4b:da:13:fd:f1:99:19:8b:d9:f1:8a:88:9b:
         e6:2c:3d:40:22:2d:0b:6f:66:95:c5:7d:e5:e4:14:28:c7:fc:
         1e:15:8c:f3:81:ba:15:e5:7f:43:be:32:c5:47:e7:12:1c:91:
         af:6d:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:52:32 2026 by rpki-client