Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
File:                     SmyWV_fDBZWx2hfELhdtdSygVLg.mft (raw, json)
Hash identifier:          jO9gLRXyLuz8EQGTcuR2/YFnBVhu4CZXEJ2nT6HQacM=
Subject key identifier:   95:45:11:1E:54:02:1E:90:D4:44:A2:B8:A4:80:3B:A0:32:E6:02:47
Authority key identifier: 4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8
Certificate issuer:       /CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
Certificate serial:       01A0D9F1687FE53598D46EE713398FBE995A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
Manifest number:          0D2A
Signing time:             Fri 25 Sep 2026 19:01:11 +0000
Manifest this update:     Fri 25 Sep 2026 19:01:11 +0000
Manifest next update:     Sat 26 Sep 2026 19:01:11 +0000
Files and hashes:         1: 7dwMWzxrYLKUyz9OMFwsm3A1O5Y.asa (hash: ywvJHVR3B4vawxtuFjj3XJUi3rb3QhowkNq1qP6BNhk=)
                          2: SmyWV_fDBZWx2hfELhdtdSygVLg.crl (hash: Sqo+47JvaVfAqIkAWZhTKd6Rb9aRRyvaSaIQYXcOBEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:f1:68:7f:e5:35:98:d4:6e:e7:13:39:8f:be:99:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
        Validity
            Not Before: Sep 25 19:01:11 2026 GMT
            Not After : Sep 26 19:01:11 2026 GMT
        Subject: CN=9545111e54021e90d444a2b8a4803ba032e60247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:02:7b:89:45:97:82:c1:f6:db:51:2e:9d:71:
                    54:71:21:d4:d9:b3:ed:07:ef:fd:e4:48:33:84:4d:
                    98:a0:99:0b:25:e1:92:b7:9d:20:e6:8c:2d:db:d0:
                    26:96:44:ec:28:b2:9b:1f:59:fc:a5:33:c4:f6:98:
                    b5:39:38:0e:5b:d4:e3:06:84:79:cf:d9:ca:4d:39:
                    f8:96:b3:b0:89:cd:25:48:3d:8d:bc:81:1c:89:19:
                    98:ee:53:d1:ff:7e:0a:82:bc:4a:16:92:af:43:9e:
                    ab:74:ad:53:60:1c:e4:6e:b8:9d:fc:97:da:62:72:
                    31:49:68:aa:19:65:b5:6a:a9:5f:11:e7:93:ed:0d:
                    04:f0:66:ba:59:3d:45:29:3c:da:a8:25:80:bd:5a:
                    5c:7c:93:05:66:e8:a4:04:94:3c:9a:6c:80:99:be:
                    b2:34:38:78:63:74:0a:dc:76:f4:92:c1:93:d9:07:
                    8e:fb:90:00:dd:9f:47:a8:33:0f:66:a7:d1:8b:51:
                    42:9e:c0:95:37:ff:ab:37:bd:41:50:08:fd:b8:da:
                    24:8e:a5:5c:b2:36:31:40:b8:95:03:64:6b:3f:52:
                    ca:9b:e9:d4:01:42:3b:aa:e2:a2:36:fa:eb:04:1f:
                    c8:52:30:14:43:49:ca:2d:38:d5:c8:59:7f:ed:1b:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:45:11:1E:54:02:1E:90:D4:44:A2:B8:A4:80:3B:A0:32:E6:02:47
            X509v3 Authority Key Identifier:
                keyid:4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:92:88:31:8d:09:5a:a8:47:45:0d:fa:ab:14:16:07:df:32:
         41:05:3e:08:e5:82:8f:44:43:8a:30:b5:19:e3:dd:10:a0:b6:
         ce:ab:4d:a4:e6:93:b8:82:91:af:04:87:95:ec:1a:c1:c2:bf:
         f9:e4:05:99:38:f1:40:1b:3e:2a:9b:91:aa:e7:9d:6f:19:ba:
         c4:43:84:be:a3:07:bd:ce:f1:27:b2:0e:db:59:f2:e1:87:8f:
         76:e0:81:0b:00:b1:8c:5f:d1:90:ee:68:77:67:b4:c1:ad:e8:
         52:ad:f6:50:bc:99:95:b9:33:87:be:75:42:32:df:36:5e:ba:
         9f:00:5d:dd:11:92:ab:de:7c:89:60:8b:6c:0f:e6:0a:bc:43:
         71:ca:79:57:9e:bb:9b:28:00:35:e3:69:00:c1:29:be:26:b2:
         d2:a4:3b:a2:56:c0:10:33:ea:85:9a:a9:72:52:0a:a6:0f:8c:
         cf:85:13:b3:3f:40:48:1c:a1:d8:d0:bd:77:03:76:4d:06:28:
         b3:e6:0f:0d:45:c8:11:21:ef:97:34:bb:32:74:01:8d:ab:86:
         a7:e6:e3:1e:bc:78:b0:71:80:b3:02:d9:30:37:54:14:4d:d7:
         bc:f9:d8:c1:0c:92:ea:7c:de:33:11:89:3c:ad:23:38:24:56:
         d2:cf:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:30:56 2026 by rpki-client