Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File:                     SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier:          AUxSG2KitCbiz4oxxWnZbpRhtD+y2EyI3Op+CX0Aq1c=
Subject key identifier:   4D:A4:29:01:23:BA:DC:A0:88:E3:28:11:F1:D9:D5:8F:74:17:D6:D7
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer:       /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial:       019A239C51E6138F8318BB9E54E6988D2E8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number:          16F8
Signing time:             Mon 27 Oct 2025 03:00:38 +0000
Manifest this update:     Mon 27 Oct 2025 03:00:38 +0000
Manifest next update:     Tue 28 Oct 2025 03:00:38 +0000
Files and hashes:         1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: IADVY+Ljg/zzU2INAGRS1QNoUattkowAO0iEidjciBE=)
                          2: ZCwrk3DUvn-uZjo3WgvhoOWpHv0.roa (hash: AtdbQHHLI0H407seskZvbBq2HBK/6vTqf2YFUILBHxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:23:9c:51:e6:13:8f:83:18:bb:9e:54:e6:98:8d:2e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
        Validity
            Not Before: Oct 27 03:00:38 2025 GMT
            Not After : Oct 28 03:00:38 2025 GMT
        Subject: CN=4da4290123badca088e32811f1d9d58f7417d6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7c:61:ba:4c:51:3b:c6:05:8a:22:53:18:3c:
                    cf:f2:62:c5:90:ce:e1:41:4f:57:89:de:59:24:36:
                    fb:ad:ca:b9:d0:15:6d:85:08:55:00:29:e2:ef:2e:
                    46:11:82:72:42:e7:99:4d:c3:b8:3a:bf:e5:00:cf:
                    5e:ef:46:f4:dd:af:34:9f:31:ae:5f:c7:21:37:85:
                    66:c3:8e:70:94:91:9e:d1:5c:6f:2e:26:a8:c4:02:
                    85:5c:1b:1a:88:14:40:b3:87:c8:8f:97:8c:2c:67:
                    4a:29:4e:0f:fa:4d:1e:91:3c:46:aa:28:6a:95:8f:
                    9a:88:27:76:01:13:07:4a:06:13:8b:00:01:7d:bf:
                    84:6e:ac:33:db:b3:ae:15:2e:a1:de:63:08:d9:af:
                    56:93:7c:87:58:ab:42:4b:cf:36:5c:9e:de:f4:0c:
                    f7:73:4c:68:47:9b:40:f8:e4:de:6f:fe:ee:5c:e5:
                    4b:76:77:56:19:34:4b:50:fd:5c:e6:f2:67:ff:72:
                    3e:7c:2f:5d:db:7d:05:71:b5:3e:07:5a:4f:5c:e7:
                    f5:64:e4:e8:86:60:ea:85:c7:71:ed:0f:74:a1:58:
                    ff:de:78:42:cf:9c:8b:91:b7:2e:40:6e:83:b0:a8:
                    46:6d:e6:78:e2:13:ec:1b:10:4e:c1:a7:b2:3a:e2:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A4:29:01:23:BA:DC:A0:88:E3:28:11:F1:D9:D5:8F:74:17:D6:D7
            X509v3 Authority Key Identifier:
                keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:61:34:e7:53:73:ef:df:62:8a:00:0e:ff:9f:51:5f:cc:3d:
         37:07:d3:b7:82:0a:c7:4d:b5:fb:b5:ef:2a:f8:d0:46:5f:0d:
         88:97:c2:7f:0f:af:4e:77:7e:7d:c0:be:07:3d:2d:5d:ba:a9:
         e9:6e:c4:07:e0:a4:df:a9:08:9b:f8:01:b1:88:83:67:84:aa:
         d0:ea:d6:ec:bb:79:82:79:a0:79:08:b4:1b:ad:ef:c7:94:2a:
         96:9a:27:9e:26:3c:a4:50:e6:6c:03:52:d5:39:38:42:3f:d1:
         d1:40:d6:4d:d0:82:5f:69:b7:e8:4a:5c:bf:ae:38:07:36:4b:
         44:9f:41:f5:cd:d2:b1:a5:3f:62:ef:0d:8a:1d:61:93:08:1f:
         b3:fa:f9:72:a5:69:62:46:50:44:e5:4b:f2:88:fd:3e:65:d7:
         cb:c2:94:d2:d3:2f:81:00:b4:ce:45:17:ee:be:1a:ed:04:70:
         8e:72:6d:9f:de:c5:b9:df:47:f0:fe:e7:1d:f7:c9:83:b7:fd:
         cb:10:6f:78:af:4b:a4:a9:67:80:5a:07:2a:ed:0d:d2:a5:12:
         00:87:92:77:a5:a2:a5:1f:8f:2c:15:06:17:01:aa:45:5c:a5:
         b3:0a:2c:58:b1:a3:06:69:a9:ab:7b:10:f5:de:dc:25:2a:0c:
         82:36:01:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:02:43 2025 by rpki-client