Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File:                     SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier:          UhDVX3NzPl5rPi4EKvEwp1BuS61tXbFgvH4acLhIpME=
Subject key identifier:   91:4F:51:9E:49:43:60:55:DE:3B:10:BC:59:0C:3D:3D:CC:BB:6C:B5
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer:       /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial:       019D26CD388FE8CCED4145306D0A313D4D68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number:          181F
Signing time:             Wed 25 Mar 2026 21:01:16 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:16 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:16 +0000
Files and hashes:         1: JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa (hash: SZmqmdymrljO2hpbQb1uMliK1C8iABzhCOgMWLG7xTw=)
                          2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: qEKao21ziu/wpgsEyB6FvCu3FtLTgbSiOhdY51lqe/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:38:8f:e8:cc:ed:41:45:30:6d:0a:31:3d:4d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
        Validity
            Not Before: Mar 25 21:01:16 2026 GMT
            Not After : Mar 26 21:01:16 2026 GMT
        Subject: CN=914f519e49436055de3b10bc590c3d3dccbb6cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f7:37:60:65:32:20:f1:63:fe:f8:04:38:12:
                    97:19:b1:63:1b:20:76:35:40:04:2b:c5:34:42:e6:
                    63:33:37:0d:76:65:87:b4:d9:5d:4c:be:b1:37:74:
                    5f:c5:dc:60:fd:7d:1a:0b:83:4a:7d:9c:80:6b:a1:
                    7d:87:6e:77:6a:f5:ae:9d:31:d1:9f:2d:91:20:e9:
                    60:23:75:94:37:02:1f:6b:b3:d8:32:c8:e5:1a:8b:
                    c1:d8:d7:8d:81:74:2d:f7:c5:9c:12:41:00:ce:3d:
                    e1:3f:95:50:c6:a5:0e:81:0e:b0:88:ec:9b:07:1c:
                    6d:ef:40:c0:f6:39:ce:58:ad:47:53:13:15:a0:15:
                    8f:24:45:40:e8:c9:c1:40:2a:70:4f:25:d9:32:f5:
                    b4:46:28:7e:83:c8:d5:e9:42:8e:1f:b9:68:fb:12:
                    8e:72:ef:6a:81:34:e9:e7:20:63:47:dc:c7:1b:22:
                    7a:16:97:4e:6b:ab:89:4d:f2:4f:71:f5:c4:ab:24:
                    34:e6:13:ac:54:c0:2e:21:ab:5b:0d:66:41:90:38:
                    a0:9b:f4:46:75:ed:3b:c4:bb:13:f6:b4:cd:2f:b7:
                    1e:e6:06:6b:48:03:c4:97:a7:18:23:81:d4:8e:ea:
                    9c:ac:e1:47:31:e4:13:81:cf:52:8e:a8:f3:1d:a4:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4F:51:9E:49:43:60:55:DE:3B:10:BC:59:0C:3D:3D:CC:BB:6C:B5
            X509v3 Authority Key Identifier:
                keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8e:41:45:e7:a5:c4:2b:74:38:da:43:67:da:af:a6:2c:f7:
         be:87:ce:62:07:2f:59:eb:56:45:52:7c:d6:40:85:29:46:a2:
         90:9f:52:bc:5c:51:8f:20:bd:a6:61:c2:18:5b:08:a5:72:c9:
         e9:a6:86:84:c0:fa:d1:15:88:3d:95:c9:87:73:a3:d2:7f:0b:
         93:81:2f:1b:f5:9f:75:c3:d2:18:5a:16:7a:8d:ed:87:66:df:
         b6:e4:b1:9c:76:e1:52:54:7f:bf:a7:a5:39:e1:28:33:dc:40:
         b3:d6:95:7e:5a:45:46:30:ec:d4:ad:3a:86:87:5b:98:94:ed:
         c4:85:ed:db:9e:1e:90:19:58:5f:ff:3e:36:82:93:25:47:7a:
         da:b5:a8:49:69:45:43:1d:2f:3c:7a:58:92:76:e3:eb:d6:b6:
         ce:1a:0f:07:a7:8a:b0:ac:c7:ef:56:e3:c4:21:fe:2c:01:00:
         3a:51:70:56:1f:fd:41:99:3e:b7:0e:4c:ad:6c:af:1b:c9:cb:
         d6:8b:5e:06:13:ba:5e:bc:92:86:80:dd:1d:c6:ca:ef:0a:e9:
         a7:c1:e4:79:a6:bf:82:be:ef:c0:ab:54:07:6b:71:13:f5:05:
         89:02:8b:15:7a:c7:2a:70:c0:7e:66:f6:b6:4d:5f:b9:8d:c6:
         2f:f5:cb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:59 2026 by rpki-client