Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
File:                     Sm8eAa8k15JJfXftH3mQrjphKQ0.mft (raw, json)
Hash identifier:          PVygdI1slFYHSxkscQoRs5BQ5eg+aD9UTsmbkflzk0g=
Subject key identifier:   CD:FC:23:B5:0A:8D:0B:11:46:ED:4F:F1:2D:C7:3D:EF:23:E8:93:49
Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
Certificate issuer:       /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Certificate serial:       019848531031BA5E71DC133C0FBC65A4C85F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
Manifest number:          1603
Signing time:             Sat 26 Jul 2025 20:00:59 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:59 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:59 +0000
Files and hashes:         1: Sm8eAa8k15JJfXftH3mQrjphKQ0.crl (hash: +awC+haZ6bu3n0CG0Zmx3hBU0dwMU4BHMgnlBxkMqCY=)
                          2: ukp1qSkbacWgh99iGDLbhVTGpfE.roa (hash: VZyI94Eyjd6/U3vi8uEiKE4SlR4D8n4H4v7qeg38d2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:53:10:31:ba:5e:71:dc:13:3c:0f:bc:65:a4:c8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
        Validity
            Not Before: Jul 26 20:00:59 2025 GMT
            Not After : Jul 27 20:00:59 2025 GMT
        Subject: CN=cdfc23b50a8d0b1146ed4ff12dc73def23e89349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:ff:cb:bc:f0:5c:c0:76:4f:10:43:c9:5f:
                    a6:f6:e3:42:b9:85:a7:21:1f:a6:ef:5c:8e:ce:70:
                    b7:80:57:57:d9:d5:54:b6:16:1f:8b:db:87:cf:46:
                    fc:bb:f1:44:e9:a1:4a:e4:a4:8d:30:29:1a:89:69:
                    04:20:7e:23:09:89:94:e8:f9:ca:67:36:17:d8:6b:
                    6b:d4:98:0e:c8:9f:c4:a8:2b:0a:25:08:59:0b:8f:
                    4e:c1:31:cd:2f:45:c3:92:e2:7e:31:82:50:45:bc:
                    8e:b2:1b:67:5c:28:70:88:75:ff:dd:32:ca:d2:61:
                    24:8b:de:43:be:37:c1:20:31:71:e4:ad:af:26:9e:
                    55:9c:41:1a:06:fb:a5:b0:79:22:6e:20:00:c9:06:
                    f8:e9:43:8c:2e:70:cc:ca:f6:b1:48:47:01:43:df:
                    b9:1b:42:20:16:51:e3:b2:12:93:41:b3:e5:56:7d:
                    0f:a5:0d:43:c1:21:14:d7:ce:8c:a9:e4:1c:95:b7:
                    a3:f1:47:90:8f:7d:4b:aa:0e:bf:02:c5:d7:14:12:
                    e1:84:d6:d7:42:db:1f:be:5e:16:a0:4a:1a:64:48:
                    e6:8d:4f:a9:9d:81:a0:4f:3d:2b:15:e0:dd:83:f8:
                    1c:04:42:39:b5:89:23:fe:e8:52:2b:27:f0:52:3c:
                    2b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FC:23:B5:0A:8D:0B:11:46:ED:4F:F1:2D:C7:3D:EF:23:E8:93:49
            X509v3 Authority Key Identifier:
                keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:cd:3d:24:d0:82:a0:f0:4d:bc:fd:dd:fa:51:72:5f:20:19:
         27:7b:22:f7:e6:64:b2:e1:e4:64:04:1e:68:e2:0b:4a:c8:d9:
         04:40:17:fa:32:fe:16:bf:d5:e6:0c:22:53:a0:7f:ea:7f:48:
         0c:1a:37:23:0f:f5:2e:37:dc:99:86:0e:59:f7:b7:09:b1:8f:
         a8:88:e4:11:68:4e:57:16:19:74:95:59:5a:d3:61:39:b0:39:
         7e:d4:03:72:3a:19:5c:e4:94:2d:77:b7:19:83:6d:50:c8:fa:
         fc:93:24:d8:2c:50:76:53:5e:17:ca:58:fc:fd:29:0d:5b:39:
         26:cc:50:a1:49:06:34:a9:c9:12:ef:2a:ed:ad:27:f7:7a:e8:
         e3:ca:4b:c9:4a:6e:f0:36:95:ba:b9:8b:8d:44:fc:04:54:2f:
         2d:39:34:85:98:8d:5d:65:69:88:d3:4e:be:1f:90:4d:54:07:
         eb:71:96:76:e9:2b:4e:04:a6:9b:bb:ce:bf:e8:92:1d:c2:66:
         07:e0:fe:7e:61:23:74:27:33:e7:af:c4:71:de:a9:b8:b5:a1:
         da:c1:ef:66:ac:b7:e7:a1:ed:46:ad:d6:bf:f3:ff:48:3d:5c:
         47:bc:28:b1:a1:ee:28:56:fc:65:d5:7e:3a:a3:ad:ff:f6:36:
         ec:26:aa:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUxAxul5x3BM8D7xlpMhfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmYxZTAxYWYyNGQ3OTI0OTdkNzdlZDFmNzk5MGFlM2E2
MTI5MGQwHhcNMjUwNzI2MjAwMDU5WhcNMjUwNzI3MjAwMDU5WjAzMTEwLwYDVQQD
EyhjZGZjMjNiNTBhOGQwYjExNDZlZDRmZjEyZGM3M2RlZjIzZTg5MzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8r/y7zwXMB2TxBDyV+m9uNCuYWn
IR+m71yOznC3gFdX2dVUthYfi9uHz0b8u/FE6aFK5KSNMCkaiWkEIH4jCYmU6PnK
ZzYX2Gtr1JgOyJ/EqCsKJQhZC49OwTHNL0XDkuJ+MYJQRbyOshtnXChwiHX/3TLK
0mEki95DvjfBIDFx5K2vJp5VnEEaBvulsHkibiAAyQb46UOMLnDMyvaxSEcBQ9+5
G0IgFlHjshKTQbPlVn0PpQ1DwSEU186MqeQclbej8UeQj31Lqg6/AsXXFBLhhNbX
Qtsfvl4WoEoaZEjmjU+pnYGgTz0rFeDdg/gcBEI5tYkj/uhSKyfwUjwr/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM38I7UKjQsRRu1P8S3HPe8j6JNJMB8GA1UdIwQY
MBaAFEpvHgGvJNeSSX137R95kK46YSkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mYzFhZGMtY2NkOC00YWE2LWI1NGQt
MDRkMzYyYTI4NThkLzEvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mYzFhZGMtY2NkOC00YWE2LWI1NGQtMDRkMzYyYTI4NThk
LzEvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYM09JNCC
oPBNvP3d+lFyXyAZJ3si9+ZksuHkZAQeaOILSsjZBEAX+jL+Fr/V5gwiU6B/6n9I
DBo3Iw/1LjfcmYYOWfe3CbGPqIjkEWhOVxYZdJVZWtNhObA5ftQDcjoZXOSULXe3
GYNtUMj6/JMk2CxQdlNeF8pY/P0pDVs5JsxQoUkGNKnJEu8q7a0n93ro48pLyUpu
8DaVurmLjUT8BFQvLTk0hZiNXWVpiNNOvh+QTVQH63GWdukrTgSmm7vOv+iSHcJm
B+D+fmEjdCcz56/Ecd6puLWh2sHvZqy356HtRq3Wv/P/SD1cR7wosaHuKFb8ZdV+
OqOt//Y27CaqnA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:15:13 2025 by rpki-client