Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
File:                     smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json)
Hash identifier:          5oxNlBnUmV7fCJCuQEcF+GSKvAx6Bkgi4myudu34lBY=
Subject key identifier:   8D:F8:BF:03:B2:A6:DD:7D:17:6E:38:F7:15:6D:26:CE:63:76:C1:2B
Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
Certificate issuer:       /CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Certificate serial:       01A1385BA0EC8241DAA46CAB85371E0F0006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
Manifest number:          0534
Signing time:             Wed 14 Oct 2026 03:01:31 +0000
Manifest this update:     Wed 14 Oct 2026 03:01:31 +0000
Manifest next update:     Thu 15 Oct 2026 03:01:31 +0000
Files and hashes:         1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: cOwwBbu5AZSUqpMVG+53hQGSPOLo1ff/0Of2eEB04EE=)
                          2: us0cCXgOVilyc_-btAWVQ_9HSm0.roa (hash: FpuhhqsWI6lqjf12zy/aTBMSr3k50lCdEcAaN9Dak/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 03:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:38:5b:a0:ec:82:41:da:a4:6c:ab:85:37:1e:0f:00:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b
        Validity
            Not Before: Oct 14 03:01:31 2026 GMT
            Not After : Oct 15 03:01:31 2026 GMT
        Subject: CN=8df8bf03b2a6dd7d176e38f7156d26ce6376c12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:9d:fa:49:63:b5:6e:7a:c1:02:3e:73:1f:
                    9f:59:fd:69:e5:72:fc:99:eb:88:ad:03:06:9a:d9:
                    3c:a3:44:92:94:16:6e:98:f6:da:91:3c:5c:a9:81:
                    b7:0e:47:e4:ce:c9:88:6d:05:7c:34:fc:db:f3:a7:
                    20:2d:f2:a2:3f:9e:44:b6:69:69:09:48:30:f5:f0:
                    d9:fa:c9:f2:76:fe:f8:7b:ee:e9:79:29:70:6d:88:
                    dc:8f:a4:0e:87:67:17:f8:62:cd:9f:73:a0:1c:61:
                    a3:4d:ec:ea:35:e5:a8:60:b4:04:86:eb:72:1f:e2:
                    8e:a7:05:27:41:0a:a2:74:dd:68:23:a1:50:5d:5e:
                    0b:74:5b:02:cf:07:27:77:86:09:90:1a:40:0c:6f:
                    c8:5b:3a:59:b8:84:9c:55:db:1f:48:03:2f:25:34:
                    b0:c5:d1:2c:a4:38:9a:ac:71:93:35:df:c5:c8:b6:
                    14:f2:59:df:79:59:22:56:d5:75:40:22:85:cf:cf:
                    8c:61:32:ca:2c:e1:1d:2a:81:a6:d9:de:d3:43:3b:
                    37:d1:d7:41:dc:60:72:85:7c:ca:d4:0d:90:d8:b3:
                    ec:f1:35:85:02:a8:85:ea:86:9b:da:9a:ee:88:9b:
                    dd:c0:75:4e:8f:5e:ab:33:f1:88:2e:fe:65:6d:cd:
                    b8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F8:BF:03:B2:A6:DD:7D:17:6E:38:F7:15:6D:26:CE:63:76:C1:2B
            X509v3 Authority Key Identifier:
                keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:06:2f:38:ed:9f:5a:bf:1c:3a:73:89:e3:00:cf:63:98:6e:
         57:19:d3:bc:27:f0:3b:71:4a:f1:0d:2a:1a:96:ae:33:5a:10:
         4b:9d:36:55:a8:a0:8b:56:2c:17:bb:58:87:d0:f2:d4:cc:90:
         2c:6b:bf:27:b5:d5:65:04:10:c6:9c:c5:67:a8:f8:9b:6a:f6:
         3c:65:5c:00:56:2c:33:77:9a:80:3c:12:2f:0b:10:03:e4:f7:
         47:7e:8a:6f:47:b3:34:3b:48:28:57:a4:ea:16:74:c7:2b:2a:
         44:c5:46:48:6d:71:6d:91:cc:65:c0:84:15:0f:b3:8a:9c:6c:
         bf:e5:d2:28:8d:de:6d:ae:48:87:78:e1:f8:d3:68:10:d7:ce:
         18:3f:49:53:35:24:95:81:23:e3:98:5a:7d:99:1c:37:1b:08:
         96:0a:c2:be:a3:19:39:88:81:f8:a4:34:9f:bd:4c:3d:2c:61:
         16:f6:d1:37:af:34:8c:4d:60:76:4a:e6:a2:04:7f:53:22:19:
         db:5c:69:2f:17:ea:39:af:df:06:18:fb:31:f9:2f:4c:c5:35:
         7c:34:af:98:45:af:ae:fc:f8:07:01:60:02:35:c8:25:ea:6b:
         20:a8:12:80:c1:08:ad:04:90:7f:c1:c4:2c:86:0c:e6:66:e4:
         64:fe:9e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:32:28 2026 by rpki-client