Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
File:                     SMuUpENJ-Y1Am33bmgU99K7xrd8.mft (raw, json)
Hash identifier:          DGOSVfd8bZOvgGntNyUggVGerwI4D7G3rjDu3FcNtdQ=
Subject key identifier:   C6:74:CD:9C:B7:2B:D5:19:96:78:CA:47:B5:B9:51:D8:1A:B0:73:4D
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Certificate issuer:       /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial:       01964A0EF21FD5CBFDC03FBD993F113B1C12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
Manifest number:          0DE6
Signing time:             Fri 18 Apr 2025 18:00:15 +0000
Manifest this update:     Fri 18 Apr 2025 18:00:15 +0000
Manifest next update:     Sat 19 Apr 2025 18:00:15 +0000
Files and hashes:         1: SMuUpENJ-Y1Am33bmgU99K7xrd8.crl (hash: +nKMl6ILSTB4e8WahRy5xzbuK6/1zjSBpakjJu4oYjw=)
                          2: galtvA878B_gyWy0hQyRkeaZi6U.roa (hash: COa1iZxjQ8Xwq/EGs0wzkzw8um4DhbZoyDMdmoMPbH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:0e:f2:1f:d5:cb:fd:c0:3f:bd:99:3f:11:3b:1c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
        Validity
            Not Before: Apr 18 18:00:15 2025 GMT
            Not After : Apr 19 18:00:15 2025 GMT
        Subject: CN=c674cd9cb72bd5199678ca47b5b951d81ab0734d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bc:91:9f:a2:7a:66:ed:fa:09:e5:1e:57:ec:
                    62:e8:31:20:4a:8b:1b:87:cf:f9:70:48:b4:ce:2b:
                    3a:ec:7c:14:17:af:06:20:4c:2d:11:0d:26:88:80:
                    96:d2:68:48:25:15:a6:8f:31:47:54:ec:c6:4c:a2:
                    24:a2:e3:3c:b4:81:14:a9:b3:7c:64:c8:b5:5e:7c:
                    4d:f7:70:79:b2:5a:11:f0:0b:6c:99:58:51:00:bf:
                    39:fa:b2:a2:de:ac:52:fa:41:2f:e7:69:72:16:7e:
                    fd:27:7e:03:fb:52:ba:82:e6:1e:67:d6:c4:02:28:
                    5f:b4:c2:1c:f9:5d:2e:3f:18:a2:4c:97:b4:d3:1a:
                    72:f9:09:46:33:8c:bf:1f:80:9a:7e:f6:b7:a4:a3:
                    dd:b5:1e:b3:d0:24:53:6c:bc:ec:97:5e:45:0d:80:
                    c8:46:e2:8f:d0:a3:c0:e3:7a:13:d8:d3:c0:96:aa:
                    ae:69:49:e4:42:cd:b6:23:d0:ee:1a:19:ff:f3:ff:
                    7c:00:a9:9b:3f:b4:0b:fe:9f:a2:41:b1:9f:7c:e4:
                    10:45:c1:ac:f4:74:91:3a:e2:b2:19:b9:6f:22:1a:
                    93:f6:c0:13:dc:7f:32:04:c4:8c:f8:7e:3a:e4:ab:
                    45:1f:18:43:dd:c1:e9:56:5d:6d:dc:c7:25:4f:9c:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:74:CD:9C:B7:2B:D5:19:96:78:CA:47:B5:B9:51:D8:1A:B0:73:4D
            X509v3 Authority Key Identifier:
                keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:2e:ac:d7:3a:59:99:69:78:90:08:c2:b3:f1:26:19:4e:18:
         e9:49:6a:e8:00:a9:36:19:61:bb:2e:f3:be:55:f7:d2:16:5a:
         d6:39:5c:10:b0:a8:7a:18:64:f3:b8:65:da:50:6f:bc:ea:77:
         5c:f0:60:12:64:c6:6c:d5:bb:fb:e4:b8:cc:86:dd:84:c3:9c:
         ed:99:1c:97:17:7e:68:62:65:a0:81:31:69:61:00:ac:58:d7:
         1e:83:7a:58:ac:d1:a1:00:95:43:f9:37:1e:da:9a:e2:1d:a9:
         f1:08:b0:c3:81:0e:83:0b:9e:b6:62:55:3a:6a:c2:14:b2:59:
         c5:8d:56:d4:4e:19:73:90:ab:01:ca:bd:62:ad:6a:79:91:15:
         e9:6a:62:b8:24:d2:43:24:33:29:5c:87:12:02:67:8a:63:a4:
         7c:c1:69:79:1b:cb:7d:ee:a2:25:d8:3f:c2:3e:36:cb:59:93:
         21:40:05:20:b2:50:df:cd:58:8d:bc:3a:15:2a:7e:7d:68:9a:
         c3:c9:bf:ef:24:c4:42:76:3c:66:8d:dd:54:76:ca:62:4b:c1:
         4b:c5:e0:09:c0:1d:37:d0:bf:6f:6b:27:5b:74:0a:9d:27:16:
         c3:8a:4a:c3:d0:f9:90:c2:5c:f5:d8:f1:3d:19:1e:6b:6f:54:
         e8:7e:62:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKDvIf1cv9wD+9mT8ROxwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Y2I5NGE0NDM0OWY5OGQ0MDliN2RkYjlhMDUzZGY0YWVm
MWFkZGYwHhcNMjUwNDE4MTgwMDE1WhcNMjUwNDE5MTgwMDE1WjAzMTEwLwYDVQQD
EyhjNjc0Y2Q5Y2I3MmJkNTE5OTY3OGNhNDdiNWI5NTFkODFhYjA3MzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbyRn6J6Zu36CeUeV+xi6DEgSosb
h8/5cEi0zis67HwUF68GIEwtEQ0miICW0mhIJRWmjzFHVOzGTKIkouM8tIEUqbN8
ZMi1XnxN93B5sloR8AtsmVhRAL85+rKi3qxS+kEv52lyFn79J34D+1K6guYeZ9bE
AihftMIc+V0uPxiiTJe00xpy+QlGM4y/H4Cafva3pKPdtR6z0CRTbLzsl15FDYDI
RuKP0KPA43oT2NPAlqquaUnkQs22I9DuGhn/8/98AKmbP7QL/p+iQbGffOQQRcGs
9HSROuKyGblvIhqT9sAT3H8yBMSM+H465KtFHxhD3cHpVl1t3MclT5ywlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZ0zZy3K9UZlnjKR7W5UdgasHNNMB8GA1UdIwQY
MBaAFEjLlKRDSfmNQJt925oFPfSu8a3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU011VXBFTkotWTFBbTMzYm1nVTk5Szd4cmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hYzBjMDYtODA3Mi00ZTMwLTk1ZDEt
YTNkNTUzM2YxNzU3LzEvU011VXBFTkotWTFBbTMzYm1nVTk5Szd4cmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hYzBjMDYtODA3Mi00ZTMwLTk1ZDEtYTNkNTUzM2YxNzU3
LzEvU011VXBFTkotWTFBbTMzYm1nVTk5Szd4cmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEy6s1zpZ
mWl4kAjCs/EmGU4Y6Ulq6ACpNhlhuy7zvlX30hZa1jlcELCoehhk87hl2lBvvOp3
XPBgEmTGbNW7++S4zIbdhMOc7Zkclxd+aGJloIExaWEArFjXHoN6WKzRoQCVQ/k3
Htqa4h2p8Qiww4EOgwuetmJVOmrCFLJZxY1W1E4Zc5CrAcq9Yq1qeZEV6WpiuCTS
QyQzKVyHEgJnimOkfMFpeRvLfe6iJdg/wj42y1mTIUAFILJQ381Yjbw6FSp+fWia
w8m/7yTEQnY8Zo3dVHbKYkvBS8XgCcAdN9C/b2snW3QKnScWw4pKw9D5kMJc9djx
PRkea29U6H5itA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:01:38 2025 by rpki-client