Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
File:                     smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json)
Hash identifier:          u6aN9QAEnXrnHAt1y0MRBEg6OBI9GwUPZBjpebivi2A=
Subject key identifier:   37:79:5B:B8:81:A0:9D:B8:9E:A8:2C:99:74:17:84:A1:B7:10:14:4D
Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
Certificate issuer:       /CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Certificate serial:       019D258317AA55319E4C061F378741F1E6A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
Manifest number:          0318
Signing time:             Wed 25 Mar 2026 15:00:41 +0000
Manifest this update:     Wed 25 Mar 2026 15:00:41 +0000
Manifest next update:     Thu 26 Mar 2026 15:00:41 +0000
Files and hashes:         1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: lNkwTKCEjLA0to9jUhknSVMSPTIXUNMY43CsrDYfE28=)
                          2: us0cCXgOVilyc_-btAWVQ_9HSm0.roa (hash: FpuhhqsWI6lqjf12zy/aTBMSr3k50lCdEcAaN9Dak/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:17:aa:55:31:9e:4c:06:1f:37:87:41:f1:e6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b
        Validity
            Not Before: Mar 25 15:00:41 2026 GMT
            Not After : Mar 26 15:00:41 2026 GMT
        Subject: CN=37795bb881a09db89ea82c99741784a1b710144d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:6f:36:0d:c9:64:a3:7d:28:23:d6:c2:0a:
                    1b:f4:3b:7e:0e:b8:17:6f:78:05:cf:56:fd:85:2f:
                    c4:3b:f6:43:33:9e:17:2f:01:aa:56:34:6d:05:45:
                    32:1c:aa:b7:45:11:44:b2:8a:a3:05:53:d2:f2:c4:
                    2c:f5:c2:9d:83:90:16:60:42:c3:a9:41:92:53:19:
                    4f:30:8b:f9:f6:ab:70:f5:c9:6d:c6:b2:cf:67:f6:
                    45:80:82:e9:e2:8b:94:10:5b:9b:22:17:8e:1a:0b:
                    f3:bf:9d:e0:db:f1:c2:0a:a0:6c:ab:01:f6:47:e9:
                    87:ce:ec:fe:ac:75:5b:06:e8:f5:5a:31:88:b1:c8:
                    a5:26:c1:04:9b:68:d4:85:21:84:4e:38:d4:4d:53:
                    ef:c4:f3:46:72:06:09:c7:53:96:e3:64:33:61:99:
                    96:f6:0d:78:77:c4:2a:57:62:4e:6a:d1:c3:c1:97:
                    9a:ca:92:d7:73:bd:5b:dc:92:cd:02:c8:a7:88:90:
                    c9:02:57:b0:bd:db:91:ee:2b:68:bd:b0:91:cd:66:
                    83:a4:22:ea:3b:7c:47:0f:e5:72:61:bf:d8:b4:52:
                    52:2f:99:c5:e2:bb:fb:fc:28:27:e9:8c:c8:a9:7f:
                    43:81:76:c3:23:96:61:a8:82:04:bb:8f:69:68:85:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:79:5B:B8:81:A0:9D:B8:9E:A8:2C:99:74:17:84:A1:B7:10:14:4D
            X509v3 Authority Key Identifier:
                keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:49:d1:41:e3:8b:c2:49:90:8f:6a:9b:92:48:35:e8:8b:9c:
         69:b2:30:69:a2:82:54:7a:78:38:cf:fd:4d:66:77:37:65:81:
         89:61:6b:ab:0e:2f:52:46:6d:d3:1a:e8:22:fd:7d:1d:f6:a3:
         53:80:88:e6:a8:72:6d:3f:68:44:73:7d:a3:d9:65:ef:a4:13:
         9e:ec:53:62:65:50:45:07:f8:dc:2e:d8:ec:58:e4:30:8f:4b:
         13:15:2b:bb:fc:b7:7d:7e:9d:43:e7:80:f4:2d:98:f4:83:a9:
         52:02:99:5e:c5:f7:e6:86:25:76:1a:de:ba:dd:82:45:2b:28:
         4e:12:55:b3:1d:87:42:3b:cb:9d:c0:0d:06:78:a0:c2:67:93:
         bc:76:c0:90:be:a1:3a:63:8b:08:3c:95:cc:f2:49:d5:84:f5:
         ea:bb:87:ea:71:f4:85:cc:22:e9:42:58:84:eb:05:1e:3b:e3:
         28:cd:87:30:f7:e2:8c:f8:3d:93:6e:af:5a:b9:7e:62:47:16:
         3b:9b:62:54:d4:1d:6b:d7:4b:6e:46:af:1f:eb:6e:73:98:72:
         58:78:4d:c2:2f:c2:af:9f:b7:e7:15:b7:2d:89:34:00:62:01:
         b1:5a:cf:93:fe:3a:bf:47:af:b5:fe:a1:b2:c8:5f:56:b7:9c:
         88:95:0a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:17 2026 by rpki-client