Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
File:                     Sm8eAa8k15JJfXftH3mQrjphKQ0.mft (raw, json)
Hash identifier:          iphjagGJfu9Xy5cWTSTKaJHWeayRtrG1B3VGurj5kD0=
Subject key identifier:   2F:C3:FB:61:3A:D0:EB:84:6E:9F:20:9F:1D:3D:FD:96:32:70:FB:11
Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
Certificate issuer:       /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Certificate serial:       019E1E3575F506FE1C63C88AA100F2B44B4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 22:01:20 +0000
Manifest this update:     Tue 12 May 2026 22:01:20 +0000
Manifest next update:     Wed 13 May 2026 22:01:20 +0000
Files and hashes:         1: Sm8eAa8k15JJfXftH3mQrjphKQ0.crl (hash: By5LeVwhaqyg4hNS0QFGJNxmxNJqwBe/XwhAPwepUIc=)
                          2: yxxhUC74SIbRktXGpRFDG2q_WYY.roa (hash: td7+f7LbCoSoHd1AQOFqrxF0PL/qRZNlsL9bZXllNto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:75:f5:06:fe:1c:63:c8:8a:a1:00:f2:b4:4b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
        Validity
            Not Before: May 12 22:01:20 2026 GMT
            Not After : May 13 22:01:20 2026 GMT
        Subject: CN=2fc3fb613ad0eb846e9f209f1d3dfd963270fb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6b:7d:f1:35:d6:c2:19:ce:b0:09:cc:4d:59:
                    1b:bf:8e:74:87:6b:f4:81:4c:dc:b9:fe:20:49:2b:
                    1d:cd:80:18:71:aa:10:16:6b:9c:e9:5f:14:1b:c8:
                    40:0d:2d:1f:a3:5b:08:5d:33:6b:ba:21:a8:25:64:
                    56:3a:23:cf:35:83:3a:22:53:ff:81:13:ef:26:0b:
                    b9:92:9a:50:f7:86:89:ec:ae:d1:d9:14:58:df:ce:
                    f9:b6:cf:2e:32:b8:77:8c:3c:bc:c4:65:73:68:de:
                    8f:af:62:d4:69:b0:90:e2:46:b9:5a:1e:28:2f:13:
                    9f:38:ba:d6:39:75:83:47:db:43:9c:fd:25:ec:9f:
                    e6:e8:f7:36:66:b7:08:41:05:26:cf:af:a1:55:ef:
                    ec:73:29:66:cd:bd:af:64:40:af:95:62:fc:df:e2:
                    ad:5d:6f:7a:36:67:dc:e7:58:3c:00:96:0b:08:73:
                    fa:35:21:07:f1:d2:2e:7f:69:18:71:61:b2:d9:ba:
                    68:74:78:48:33:28:0b:6b:6e:63:74:ac:5c:43:6c:
                    7d:a9:9d:30:23:06:be:6a:8c:80:b7:c7:ce:bd:ba:
                    79:0c:1d:33:47:21:02:60:82:d3:f3:c2:99:48:f0:
                    a3:1e:f7:26:c0:ad:2b:08:4e:51:eb:43:d3:fa:27:
                    7e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C3:FB:61:3A:D0:EB:84:6E:9F:20:9F:1D:3D:FD:96:32:70:FB:11
            X509v3 Authority Key Identifier:
                keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:93:d4:26:33:58:22:fb:aa:77:07:b7:01:3e:33:bc:67:1c:
         45:33:a9:6f:14:3e:b4:31:f1:d3:73:ad:10:9f:c1:e9:b8:10:
         fc:5f:4c:47:af:68:e4:6f:7d:c9:39:cf:7f:19:9e:70:31:66:
         34:c7:97:51:5c:d1:12:e5:e5:92:d7:0d:d5:b6:45:96:ad:d4:
         d9:e0:28:a0:a7:a5:99:e7:c4:90:1c:f2:13:c6:0e:c5:cb:4d:
         d7:37:3c:d2:9e:59:5a:a8:6f:b2:d4:e4:f9:e7:a3:b9:2b:a2:
         39:3d:49:53:c5:cf:83:6f:91:cc:2c:66:ac:86:e3:fb:5c:e7:
         1c:d8:38:9b:fd:82:aa:2e:da:17:91:3d:7b:01:70:11:d6:1f:
         4a:58:d5:73:4e:4b:1b:41:db:f3:29:dd:e8:10:00:c8:83:86:
         99:7f:b1:c0:22:f0:14:f1:77:5e:1d:44:60:d2:8b:51:e7:72:
         ae:12:dd:40:ad:17:5c:1d:58:2d:3f:a9:d3:62:6d:b1:4e:f6:
         b2:1d:b1:4c:60:1c:1d:84:92:10:7a:f7:e6:b6:ad:00:0a:eb:
         da:7b:99:3e:d8:e6:6a:92:d2:c2:52:80:74:e7:47:38:2a:54:
         2a:87:2b:3e:38:86:cf:10:e7:41:22:9b:63:b7:97:f9:c7:50:
         e6:5e:f8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:11 2026 by rpki-client