Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
File:                     smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json)
Hash identifier:          rGtwQq0D7u4k+SkHfCPyrHrbEVIVrlQXUOCxCFWKvIA=
Subject key identifier:   9C:3E:93:9C:C3:C4:23:26:B7:38:B7:E5:70:0E:41:88:D6:9E:65:D1
Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
Certificate issuer:       /CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Certificate serial:       01983D6150446E8D61AB8F7D138FD9D6886C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
Manifest number:          8D
Signing time:             Thu 24 Jul 2025 17:00:44 +0000
Manifest this update:     Thu 24 Jul 2025 17:00:44 +0000
Manifest next update:     Fri 25 Jul 2025 17:00:44 +0000
Files and hashes:         1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: 0PUNcPbeEK56RFj5cKauekyGwiseylh/C9tlAFBY0UI=)
                          2: vfgaajpx_IwIslySYTAXUF8b2bQ.roa (hash: 5BG+nyK3l0jI+maIom4ahnVVqUeZ02d+C1Q9Lbzzldo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3d:61:50:44:6e:8d:61:ab:8f:7d:13:8f:d9:d6:88:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b
        Validity
            Not Before: Jul 24 17:00:44 2025 GMT
            Not After : Jul 25 17:00:44 2025 GMT
        Subject: CN=9c3e939cc3c42326b738b7e5700e4188d69e65d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0d:e3:05:e4:f4:cc:93:0f:4c:e8:20:87:cc:
                    0d:08:2c:15:37:72:7c:5c:2e:31:ce:31:51:4d:03:
                    65:3e:96:43:0f:ab:54:c9:d8:6a:d0:3b:61:ee:f5:
                    26:1d:99:be:a5:df:d8:f0:4c:e7:d3:19:68:42:d4:
                    a4:b8:28:42:cb:34:5d:8a:78:43:66:e8:8f:a7:37:
                    e6:5f:3c:42:ab:e9:13:25:af:83:f3:3a:81:cd:9c:
                    25:4c:0c:c6:66:e0:3a:de:4c:43:9b:ff:de:5e:22:
                    e3:64:49:c9:8e:6b:14:06:16:26:d1:d5:3e:20:a5:
                    84:a9:f5:22:89:a1:ac:35:a8:3f:7f:b8:8a:6e:73:
                    d3:f1:ab:14:7c:0b:85:29:3d:ec:1f:7f:0f:ca:7f:
                    9d:77:96:3d:9d:b9:a4:d7:bf:bd:31:ae:4e:b6:ba:
                    ef:e8:37:e1:e1:44:f3:f2:c7:39:d1:bc:85:af:e3:
                    43:e2:2b:3f:b3:23:f4:5e:2b:24:46:60:c8:bd:e3:
                    4a:1d:c7:4f:62:40:db:d8:7e:09:53:5c:03:9a:e7:
                    e9:73:09:7d:35:a2:31:24:1a:8f:58:ae:ff:f8:1d:
                    ec:d8:56:8d:a4:70:e8:c5:54:1b:2c:64:cd:39:56:
                    04:07:60:06:86:d4:b4:f1:e4:29:75:06:c2:48:4f:
                    ac:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3E:93:9C:C3:C4:23:26:B7:38:B7:E5:70:0E:41:88:D6:9E:65:D1
            X509v3 Authority Key Identifier:
                keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d6:1a:f4:d8:cc:37:b5:b8:7b:84:62:83:b8:20:9e:ed:a3:
         03:ec:66:5d:37:66:7e:4d:b2:4a:f9:c1:64:7b:2f:cb:92:0c:
         d8:f1:58:83:d8:ef:f6:f7:79:59:c7:d9:1e:a1:1e:21:54:12:
         fa:bb:1e:1f:16:47:21:b7:76:90:33:b0:73:14:5f:ee:2c:93:
         6c:12:c1:61:59:87:fd:df:9e:44:20:bc:3a:f6:da:a4:0a:ff:
         89:5f:88:5a:dc:4b:1e:3c:59:ae:d1:94:0b:a3:67:07:b8:b7:
         0a:92:6e:ba:ea:93:bd:82:e0:a0:ff:6b:c7:e8:f7:6e:91:32:
         f8:e1:11:27:f7:a9:e8:1e:9b:41:5e:53:ed:9a:38:27:e7:6e:
         29:e5:a1:a6:41:b2:b5:4e:8b:54:53:c7:01:d7:df:8a:8c:df:
         5d:7b:c4:60:d1:f3:22:4c:4e:44:40:dd:ef:4d:66:83:d4:85:
         32:a5:8b:f1:7a:61:54:d8:cd:75:13:46:90:f0:7f:24:36:e8:
         af:d8:95:fb:08:28:d4:24:3e:2b:76:e8:4e:e4:80:63:99:6b:
         ca:dd:56:78:f2:d7:29:f5:87:94:c1:02:cd:22:75:f5:68:e7:
         b1:53:da:18:fc:1a:99:3f:b9:7c:d5:94:18:c1:1f:ac:73:4a:
         bb:d6:0c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:37:28 2025 by rpki-client