Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File:                     SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier:          9MdA2em6GcC/hxLa5VP4kZs5GZddbE4I/K0VLRWxVNk=
Subject key identifier:   EE:5C:47:AD:A0:65:90:2A:20:A1:8F:EF:89:68:C1:FE:9C:A7:77:8A
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer:       /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial:       01964BFDF57369E48A6051E3593289A4EA60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number:          05E3
Signing time:             Sat 19 Apr 2025 03:00:56 +0000
Manifest this update:     Sat 19 Apr 2025 03:00:56 +0000
Manifest next update:     Sun 20 Apr 2025 03:00:56 +0000
Files and hashes:         1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: nz206qvXm2bdX2qyp/ajLrxjkOn97nTK4tV7CJatf/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:fd:f5:73:69:e4:8a:60:51:e3:59:32:89:a4:ea:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
        Validity
            Not Before: Apr 19 03:00:56 2025 GMT
            Not After : Apr 20 03:00:56 2025 GMT
        Subject: CN=ee5c47ada065902a20a18fef8968c1fe9ca7778a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4e:ff:29:08:67:c9:95:99:97:15:81:cc:3d:
                    69:14:a7:f7:05:d2:c3:38:67:e6:16:f3:68:c4:cb:
                    43:e2:ca:27:f9:1c:ad:6c:20:f6:a3:55:70:ad:5a:
                    ef:06:c3:91:46:a3:ce:9f:35:29:44:ff:49:ba:c8:
                    b8:49:c5:86:09:2f:66:8b:88:df:48:c7:13:40:51:
                    ec:99:a0:4b:e3:a7:9a:1c:40:10:07:55:7c:67:d2:
                    eb:6c:40:4e:a6:13:a2:5c:11:ba:0a:d5:f0:a4:b9:
                    81:85:25:13:6c:23:40:78:72:f0:1e:a4:38:dc:af:
                    03:b4:91:1a:99:10:d9:c0:e5:82:70:ba:a8:11:39:
                    2f:be:3a:1d:d4:d1:74:8c:18:16:56:d5:0c:2c:6f:
                    4e:a6:0f:54:ed:e1:92:ac:0e:1d:d8:04:76:8c:17:
                    bc:02:8e:8d:6f:fb:4e:0e:79:56:7a:ed:5b:ef:c6:
                    31:61:8e:67:45:55:a7:89:27:7c:e7:1d:65:13:c9:
                    de:22:22:85:3b:82:ac:b4:5a:b4:93:b0:b9:b2:da:
                    a1:c8:27:ce:dd:74:90:3b:dc:a9:c6:71:96:08:48:
                    68:b9:ef:9a:1b:08:c3:b8:eb:cb:36:1b:11:31:8c:
                    7a:f6:cb:0c:05:b6:3a:15:21:92:94:d5:a6:31:c6:
                    e0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5C:47:AD:A0:65:90:2A:20:A1:8F:EF:89:68:C1:FE:9C:A7:77:8A
            X509v3 Authority Key Identifier:
                keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:29:ef:51:c4:68:55:43:32:80:ae:4f:20:4c:2f:fd:99:a4:
         b3:80:e9:9e:8c:27:3f:e0:f2:80:1c:1c:8e:f1:74:b7:5a:a9:
         cb:a3:37:9a:44:42:d0:f0:cc:9d:9c:ec:c1:00:0c:83:c2:95:
         d3:af:8e:9e:dc:2e:c2:8c:bd:90:8f:ac:9c:1f:6e:76:b6:76:
         92:fd:c2:3b:ef:47:2e:66:62:0d:e8:12:41:59:32:68:c9:0f:
         e9:30:99:11:21:4b:ad:2b:c6:fd:06:6f:fb:1d:0d:96:5a:94:
         87:e8:ba:d6:bc:82:26:7a:35:78:b6:7d:21:6e:97:e1:a7:b0:
         28:c9:c3:ec:29:64:96:6d:78:b9:65:2b:47:31:9c:1c:71:4a:
         09:17:bc:74:88:3d:ff:4f:1d:83:76:08:e3:94:32:31:f6:ed:
         5f:5b:11:a5:61:b1:a4:7e:24:f4:64:bb:84:fb:a8:92:41:06:
         2b:ae:aa:c7:06:a0:23:67:90:da:f9:b4:49:bb:12:e0:db:96:
         b3:d8:a5:f8:19:e7:fb:94:d9:78:eb:5c:ed:24:75:ce:00:cc:
         1c:a1:72:01:9d:90:ad:d5:d2:cb:94:88:ec:f9:cd:41:ba:1b:
         23:fc:bc:b6:61:e2:91:80:d1:b9:53:e7:7a:31:9f:61:5e:75:
         e0:be:3a:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/fVzaeSKYFHjWTKJpOpgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YzMxMWVkZTI4YjkyZjVjNjFhOTEyYmUwNjAzOTQ5OGIy
MzQyMmEwHhcNMjUwNDE5MDMwMDU2WhcNMjUwNDIwMDMwMDU2WjAzMTEwLwYDVQQD
EyhlZTVjNDdhZGEwNjU5MDJhMjBhMThmZWY4OTY4YzFmZTljYTc3NzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk7/KQhnyZWZlxWBzD1pFKf3BdLD
OGfmFvNoxMtD4son+RytbCD2o1VwrVrvBsORRqPOnzUpRP9Jusi4ScWGCS9mi4jf
SMcTQFHsmaBL46eaHEAQB1V8Z9LrbEBOphOiXBG6CtXwpLmBhSUTbCNAeHLwHqQ4
3K8DtJEamRDZwOWCcLqoETkvvjod1NF0jBgWVtUMLG9Opg9U7eGSrA4d2AR2jBe8
Ao6Nb/tODnlWeu1b78YxYY5nRVWniSd85x1lE8neIiKFO4KstFq0k7C5stqhyCfO
3XSQO9ypxnGWCEhoue+aGwjDuOvLNhsRMYx69ssMBbY6FSGSlNWmMcbguQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5cR62gZZAqIKGP74lowf6cp3eKMB8GA1UdIwQY
MBaAFEjDEe3ii5L1xhqRK+BgOUmLI0IqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xZjY3NmEtYzUyMS00ZmM5LWI1NGIt
N2FlOGI3MDY2NzE5LzEvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xZjY3NmEtYzUyMS00ZmM5LWI1NGItN2FlOGI3MDY2NzE5
LzEvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhynvUcRo
VUMygK5PIEwv/Zmks4DpnownP+DygBwcjvF0t1qpy6M3mkRC0PDMnZzswQAMg8KV
06+Ontwuwoy9kI+snB9udrZ2kv3CO+9HLmZiDegSQVkyaMkP6TCZESFLrSvG/QZv
+x0NllqUh+i61ryCJno1eLZ9IW6X4aewKMnD7Clklm14uWUrRzGcHHFKCRe8dIg9
/08dg3YI45QyMfbtX1sRpWGxpH4k9GS7hPuokkEGK66qxwagI2eQ2vm0SbsS4NuW
s9il+Bnn+5TZeOtc7SR1zgDMHKFyAZ2QrdXSy5SI7PnNQbobI/y8tmHikYDRuVPn
ejGfYV514L46oA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:44 2025 by rpki-client