Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
File:                     SmyWV_fDBZWx2hfELhdtdSygVLg.mft (raw, json)
Hash identifier:          aHJopYX5KwoQkJ53vbymu5WDcOfGGT8KYPJ6QahpcP4=
Subject key identifier:   1B:4F:0D:7C:CF:48:D1:AA:F9:45:C1:9A:21:DF:81:29:91:0F:E8:F0
Authority key identifier: 4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8
Certificate issuer:       /CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
Certificate serial:       019E1C47110D9CD2DB6B6658388950DC907C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
Manifest number:          0BBE
Signing time:             Tue 12 May 2026 13:01:19 +0000
Manifest this update:     Tue 12 May 2026 13:01:19 +0000
Manifest next update:     Wed 13 May 2026 13:01:19 +0000
Files and hashes:         1: FqtY-pXqBbYdmvWJFd9hm2R1554.asa (hash: qKyi+MjDfEKrQMXB3k9THtt/iSw21UVzmfAd3cDChqE=)
                          2: SmyWV_fDBZWx2hfELhdtdSygVLg.crl (hash: J1RjrzEZnyszQl88hW5e2tweL30s1g7WkAL6O8v17xI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:11:0d:9c:d2:db:6b:66:58:38:89:50:dc:90:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
        Validity
            Not Before: May 12 13:01:19 2026 GMT
            Not After : May 13 13:01:19 2026 GMT
        Subject: CN=1b4f0d7ccf48d1aaf945c19a21df8129910fe8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a4:90:b4:21:65:94:5f:ff:e1:09:a3:b1:7c:
                    b2:64:d3:77:3f:09:3c:fc:17:57:f0:75:c1:69:e7:
                    50:55:df:aa:21:12:05:a0:72:e5:c3:35:73:7d:63:
                    be:10:62:8b:2d:b4:e4:0a:5a:ea:06:cd:bf:0b:96:
                    c9:6a:b6:34:00:5e:b8:6f:bb:3e:16:0a:9b:fc:80:
                    fb:ef:e5:72:9a:11:4e:2f:d2:dd:23:28:5f:52:ed:
                    c8:57:16:cc:98:de:b8:b5:9e:b3:18:21:e3:f0:bd:
                    e8:cc:8c:6f:61:39:18:9d:ed:ac:a9:f2:1d:75:ae:
                    f9:cd:31:21:b6:9d:ce:f8:bd:57:0d:a1:f8:19:a1:
                    69:ec:2e:54:56:33:f4:01:94:16:14:ca:42:1f:f0:
                    bc:66:e3:f6:53:70:14:78:a9:12:3f:99:66:49:17:
                    72:29:1a:54:59:04:93:d1:51:1b:fb:bf:98:b0:4c:
                    8a:aa:75:d1:4e:c6:0e:c0:35:37:1b:3a:40:c8:2d:
                    fb:82:e5:f8:9e:34:7a:07:19:58:c8:e6:a9:b3:64:
                    2f:bf:22:4d:80:46:25:ab:6c:60:74:c3:32:33:6c:
                    f6:84:39:73:e2:bb:2a:c8:02:59:f1:4b:a5:b3:98:
                    19:78:80:39:fc:02:ea:8b:9c:d3:f4:d5:35:6b:13:
                    6e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4F:0D:7C:CF:48:D1:AA:F9:45:C1:9A:21:DF:81:29:91:0F:E8:F0
            X509v3 Authority Key Identifier:
                keyid:4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f4:08:3d:30:c2:64:28:42:bf:59:d6:1f:2c:3f:78:b6:23:
         38:c8:8d:59:e4:69:be:83:cf:1d:9b:d5:2e:73:63:ce:91:ae:
         73:c5:3c:66:cc:30:b3:4d:52:fa:8d:6d:2f:11:a1:58:14:0c:
         8e:32:c7:e0:77:ec:ce:ca:80:63:23:45:a3:19:28:e8:b1:ee:
         70:17:08:d8:7f:2e:cb:00:75:35:75:97:22:cc:c8:cd:f8:b1:
         9b:7f:83:dd:2c:e2:27:6f:45:29:cc:d0:0e:06:6b:10:cf:d6:
         f7:1b:20:86:8b:e4:97:50:1e:cb:ab:7a:85:35:17:94:6f:2f:
         ad:e1:77:b3:a9:ea:14:42:d8:2e:5e:97:b6:da:fe:f1:bd:c3:
         4c:30:2c:5c:e7:ad:ff:71:ee:e5:df:ce:cf:41:be:8c:a5:f4:
         0d:66:9d:28:a4:ee:a4:4c:99:22:43:f4:6b:21:3a:e0:a8:c4:
         87:21:1e:b1:30:74:4f:c0:5e:21:ce:8e:6d:01:08:c0:05:2c:
         cb:7a:e3:98:0b:54:68:d8:9b:d0:d0:01:93:f4:b4:15:e0:b7:
         f2:2f:de:ac:ca:aa:bb:29:e3:16:a2:f0:0e:61:26:c2:85:70:
         f9:56:6b:8a:5d:d0:a5:45:c1:9a:9e:f2:ca:3a:87:cf:f9:ed:
         bf:e3:08:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRxENnNLba2ZYOIlQ3JB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmM5NjU3ZjdjMzA1OTViMWRhMTdjNDJlMTc2ZDc1MmNh
MDU0YjgwHhcNMjYwNTEyMTMwMTE5WhcNMjYwNTEzMTMwMTE5WjAzMTEwLwYDVQQD
EygxYjRmMGQ3Y2NmNDhkMWFhZjk0NWMxOWEyMWRmODEyOTkxMGZlOGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqSQtCFllF//4QmjsXyyZNN3Pwk8
/BdX8HXBaedQVd+qIRIFoHLlwzVzfWO+EGKLLbTkClrqBs2/C5bJarY0AF64b7s+
Fgqb/ID77+VymhFOL9LdIyhfUu3IVxbMmN64tZ6zGCHj8L3ozIxvYTkYne2sqfId
da75zTEhtp3O+L1XDaH4GaFp7C5UVjP0AZQWFMpCH/C8ZuP2U3AUeKkSP5lmSRdy
KRpUWQST0VEb+7+YsEyKqnXRTsYOwDU3GzpAyC37guX4njR6BxlYyOaps2QvvyJN
gEYlq2xgdMMyM2z2hDlz4rsqyAJZ8Uuls5gZeIA5/ALqi5zT9NU1axNuuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtPDXzPSNGq+UXBmiHfgSmRD+jwMB8GA1UdIwQY
MBaAFEpsllf3wwWVsdoXxC4XbXUsoFS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU215V1ZfZkRCWld4MmhmRUxoZHRkU3lnVkxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hODM5Y2MtMjkyZC00NzJmLThhMzkt
NWY2NzYwODE4NjU1LzEvU215V1ZfZkRCWld4MmhmRUxoZHRkU3lnVkxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hODM5Y2MtMjkyZC00NzJmLThhMzktNWY2NzYwODE4NjU1
LzEvU215V1ZfZkRCWld4MmhmRUxoZHRkU3lnVkxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvQIPTDC
ZChCv1nWHyw/eLYjOMiNWeRpvoPPHZvVLnNjzpGuc8U8Zswws01S+o1tLxGhWBQM
jjLH4HfszsqAYyNFoxko6LHucBcI2H8uywB1NXWXIszIzfixm3+D3SziJ29FKczQ
DgZrEM/W9xsghovkl1Aey6t6hTUXlG8vreF3s6nqFELYLl6Xttr+8b3DTDAsXOet
/3Hu5d/Oz0G+jKX0DWadKKTupEyZIkP0ayE64KjEhyEesTB0T8BeIc6ObQEIwAUs
y3rjmAtUaNib0NABk/S0FeC38i/erMqquynjFqLwDmEmwoVw+VZril3QpUXBmp7y
yjqHz/ntv+MImQ==
-----END CERTIFICATE-----
Generated at Wed May 13 00:08:13 2026 by rpki-client