Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
File:                     smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json)
Hash identifier:          WJgiUX4EQd3G8R/pdk7/pwfNybvXqxt052pfYBT5ppk=
Subject key identifier:   15:85:C0:0B:06:CB:AA:00:92:F8:1C:B6:3B:4C:18:9F:9F:1C:5D:91
Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
Certificate issuer:       /CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Certificate serial:       019F935AEA910AAA9915A6E4646E6474B413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
Manifest number:          045A
Signing time:             Fri 24 Jul 2026 09:00:36 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:36 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:36 +0000
Files and hashes:         1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: bzV1FcZZVsg+n8fbG1sb68ivUOkLoiXYhRbhBIYyvxw=)
                          2: us0cCXgOVilyc_-btAWVQ_9HSm0.roa (hash: FpuhhqsWI6lqjf12zy/aTBMSr3k50lCdEcAaN9Dak/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:ea:91:0a:aa:99:15:a6:e4:64:6e:64:74:b4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b
        Validity
            Not Before: Jul 24 09:00:36 2026 GMT
            Not After : Jul 25 09:00:36 2026 GMT
        Subject: CN=1585c00b06cbaa0092f81cb63b4c189f9f1c5d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a5:51:61:d3:97:04:f6:85:33:5e:b6:5e:30:
                    d2:05:7c:31:f9:c7:4d:35:41:c2:ba:de:e9:89:08:
                    d8:52:8a:11:d4:79:8d:50:25:1f:fb:23:41:24:f8:
                    b7:41:e3:9f:c2:3a:47:48:77:39:ba:f8:36:cd:7c:
                    03:2e:e3:1e:6a:b6:1d:1c:bf:7f:89:0b:cd:c2:58:
                    06:3e:ed:e0:89:7f:0c:de:e7:17:0d:a6:71:92:fe:
                    73:c2:4d:d8:86:64:d2:d0:5a:ab:96:84:6f:18:bf:
                    82:f2:07:46:f0:9e:84:42:c5:5f:7a:ee:bf:62:76:
                    f6:f0:52:15:e6:b7:c7:4c:f2:2b:a7:49:ca:a9:fe:
                    30:1c:f7:cb:9c:7f:2a:a1:e9:96:e3:a1:38:d0:a8:
                    c0:bd:fd:dd:7f:63:ad:67:75:1c:99:73:60:79:26:
                    c8:5e:df:c7:43:30:aa:b5:57:9d:57:1f:87:db:9a:
                    d1:1b:32:ed:b1:f8:11:96:c6:36:06:6b:5d:87:77:
                    a0:e9:3a:f1:78:10:fd:f9:4b:f4:35:09:72:e2:68:
                    45:45:1e:6a:55:42:79:d3:13:7d:bb:ed:f5:7c:8e:
                    59:74:eb:be:06:5f:19:8a:7b:4d:df:0b:60:55:ee:
                    8b:36:a4:64:7f:c9:17:16:5c:47:53:20:0c:e5:c0:
                    11:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:85:C0:0B:06:CB:AA:00:92:F8:1C:B6:3B:4C:18:9F:9F:1C:5D:91
            X509v3 Authority Key Identifier:
                keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:6e:db:df:ea:be:2b:f1:2f:63:5c:30:a4:7d:87:9c:14:58:
         09:87:1a:82:16:64:8e:73:90:54:89:89:0c:83:df:94:26:98:
         34:ad:cc:eb:8c:61:23:47:0c:ea:ad:28:33:37:03:7c:f8:b0:
         cf:ae:43:ee:0e:0b:00:60:e3:6f:f9:2b:e3:ec:63:98:31:8d:
         71:e4:2d:ac:d0:6a:0e:ef:3a:b4:f1:75:e5:24:75:8b:d7:e0:
         84:5f:d1:01:ae:92:87:37:b1:18:25:77:d6:12:87:c4:7e:fa:
         22:a2:d8:ae:72:f8:e5:6c:b3:e0:71:bf:58:ab:65:da:de:2c:
         de:7d:44:f3:a3:c1:1d:de:2c:6e:b1:bb:a2:3e:df:3b:e5:cb:
         9f:11:19:88:d1:56:28:d9:f7:02:f9:81:ea:0a:71:81:7e:b4:
         bd:4f:4b:7c:34:33:b3:46:f3:e8:d2:5b:27:4c:03:ce:94:98:
         54:2d:be:5d:27:b7:42:cf:8c:5f:f3:f5:97:a6:21:fa:32:b8:
         89:2e:43:bf:80:c9:c4:49:71:31:7f:cd:d0:4d:6a:bc:5a:eb:
         8c:1b:9f:8a:49:0b:51:04:22:aa:a3:fe:57:4f:b4:21:fb:63:
         f5:b0:9d:75:67:92:2c:6a:68:d5:c9:02:7a:96:cf:67:ee:4c:
         b7:61:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:16:04 2026 by rpki-client