Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
File:                     SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft (raw, json)
Hash identifier:          tTd15JM/jmqdqomCz5iLRFK0NtFmC1kJMgOkK1d0LXI=
Subject key identifier:   D3:A5:6C:76:62:B2:83:16:80:7A:AE:8A:12:46:C0:EF:95:13:FC:A6
Authority key identifier: 49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7
Certificate issuer:       /CN=492999fd50a69fd0412065490f5acc75a159deb7
Certificate serial:       019D265F1E9FCCB6FC8E1BABF9004BBB5BD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
Manifest number:          17E0
Signing time:             Wed 25 Mar 2026 19:01:01 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:01 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:01 +0000
Files and hashes:         1: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl (hash: kAYczcFhLmDdsYjWVN/UggYQKhRV9+swUNZTKnf7s+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:1e:9f:cc:b6:fc:8e:1b:ab:f9:00:4b:bb:5b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492999fd50a69fd0412065490f5acc75a159deb7
        Validity
            Not Before: Mar 25 19:01:01 2026 GMT
            Not After : Mar 26 19:01:01 2026 GMT
        Subject: CN=d3a56c7662b28316807aae8a1246c0ef9513fca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cd:03:3b:64:a0:fe:1b:be:85:15:d5:4a:a5:
                    22:92:d8:42:f9:d8:cb:3f:ba:cf:48:1f:15:51:af:
                    ac:91:34:6b:e8:1b:dc:12:45:74:38:e4:1b:bb:60:
                    21:a4:23:21:b1:7a:a4:a2:91:cd:a1:a6:88:93:83:
                    0d:da:5d:50:16:6f:cf:97:2f:d6:bf:8f:65:c7:10:
                    30:65:a5:30:d6:69:0b:64:f7:2c:71:1f:48:7d:b3:
                    2b:fd:e8:c5:25:6f:49:4b:5e:d8:e5:d2:49:2b:67:
                    7d:89:bb:3b:b0:86:42:b7:fd:39:0b:4c:85:df:01:
                    57:87:f4:94:76:7e:4d:58:4e:20:2e:01:3f:6e:74:
                    57:f3:61:2a:4b:45:a1:e6:41:1d:37:ae:5f:ea:90:
                    9f:93:88:58:e4:84:ef:d3:38:d7:d4:57:3c:62:bd:
                    b2:af:49:dd:2f:49:8f:15:a0:ae:5c:6c:2f:2d:1b:
                    8b:b6:27:28:0d:19:ef:de:cc:be:0d:dd:02:41:40:
                    a6:7b:1c:9c:b0:c6:ec:ee:7c:b9:26:e4:bf:62:41:
                    e2:a5:d0:b6:04:d0:2a:13:64:f8:5a:87:20:ce:c8:
                    fd:38:8d:d6:80:07:4d:15:a6:2c:54:89:88:4d:e1:
                    98:c7:fa:c6:71:b7:ae:dc:7d:7d:fd:c0:67:7e:6a:
                    55:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A5:6C:76:62:B2:83:16:80:7A:AE:8A:12:46:C0:EF:95:13:FC:A6
            X509v3 Authority Key Identifier:
                keyid:49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3e:f4:f9:ab:f1:e9:d4:29:2b:17:f6:ab:26:e3:2c:cb:7f:
         c9:d2:a9:2f:98:3f:22:46:69:91:7f:8f:e0:17:67:c4:72:33:
         04:b4:13:2a:9c:ea:8e:5a:76:e9:bd:18:6d:18:8a:d1:c3:f3:
         31:73:40:27:f2:1f:46:10:d3:d7:03:ef:af:c3:01:b5:7a:9e:
         8b:4a:80:1c:f2:90:60:7f:e0:6b:d0:cd:ca:df:35:7d:c3:2f:
         98:2b:03:78:fd:d9:75:3b:b6:d5:fa:c8:e6:be:a5:ae:98:f7:
         89:69:94:c2:bb:f1:86:96:75:bb:af:b4:1b:4a:5a:29:42:f2:
         10:67:c0:97:45:15:a7:1b:14:a0:e2:c7:7a:52:9c:32:62:28:
         0a:5a:88:2d:61:cc:be:ca:92:b1:6b:78:d8:b8:42:f2:63:35:
         2a:d5:cc:fa:c8:ba:18:3d:c9:0f:42:e2:c5:ad:55:7f:62:9f:
         42:7a:c2:e5:22:13:0b:a4:41:1a:76:b6:db:d9:13:7b:5c:7a:
         c4:72:e3:4b:c1:a0:f5:9a:5d:5d:42:c1:53:68:65:5c:12:14:
         99:c2:3b:49:21:4f:33:01:3b:ca:bc:f9:60:36:44:73:32:3f:
         4d:ee:32:71:1d:a8:a4:96:b1:4c:df:dd:63:1a:f2:c3:83:01:
         86:d7:d4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:49:28 2026 by rpki-client