Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
File:                     Sm8eAa8k15JJfXftH3mQrjphKQ0.mft (raw, json)
Hash identifier:          FSvNuCA6TMDoUV1Wh5ygYxZ6tYcJI7q5khzu+AzPMvQ=
Subject key identifier:   4A:6A:29:43:E8:EC:E4:1F:F1:F7:29:7A:61:3A:C4:CA:5A:8F:4E:D6
Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
Certificate issuer:       /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Certificate serial:       019749681181E1FAF2CC59D3BF7E561D3CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 08:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:46 +0000
Files and hashes:         1: Sm8eAa8k15JJfXftH3mQrjphKQ0.crl (hash: ZPp+lzNWGqYz+uqLoPV7B5YmdAFsz4qfXLl8umxFmWs=)
                          2: ukp1qSkbacWgh99iGDLbhVTGpfE.roa (hash: VZyI94Eyjd6/U3vi8uEiKE4SlR4D8n4H4v7qeg38d2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:11:81:e1:fa:f2:cc:59:d3:bf:7e:56:1d:3c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
        Validity
            Not Before: Jun  7 08:00:46 2025 GMT
            Not After : Jun  8 08:00:46 2025 GMT
        Subject: CN=4a6a2943e8ece41ff1f7297a613ac4ca5a8f4ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:39:20:0e:0d:45:c9:b6:07:48:5a:25:c8:
                    c8:1a:45:9e:d7:ff:31:9e:af:36:85:41:89:15:e4:
                    a1:a0:68:02:de:8f:10:f9:23:f3:c5:17:a2:78:fd:
                    9d:bf:9d:27:32:0f:f8:74:1f:2f:6e:ac:9e:bb:3f:
                    87:6c:56:84:8e:e1:eb:3d:08:76:d1:f6:3a:35:45:
                    27:1f:fc:bf:a9:f4:a2:86:a0:a0:63:67:e8:ec:e9:
                    05:90:23:10:8b:0e:35:4a:bd:72:4f:29:06:18:7a:
                    4f:7e:28:7a:99:d5:16:d2:a6:0a:72:1e:14:c7:de:
                    c0:44:94:ed:20:fa:a3:3a:16:e2:bb:54:37:32:f7:
                    f0:08:28:97:fb:05:8a:ac:07:aa:ec:57:be:68:c2:
                    51:3e:7f:3d:66:97:b2:03:41:ad:a1:35:c5:66:fb:
                    fe:77:c9:59:f7:57:de:6f:4e:57:fc:b6:06:7f:6a:
                    8a:29:d0:99:46:ef:79:7c:a6:24:39:b6:0c:15:9d:
                    3f:5a:c5:7c:48:13:29:0f:4a:1e:ce:93:bb:32:3b:
                    11:b5:fa:76:ba:e9:e1:19:41:52:54:20:3c:9b:8b:
                    2e:d9:dc:3e:67:62:f2:0d:a2:b8:21:f3:63:d7:2d:
                    e1:d3:09:57:88:28:8b:8d:78:72:2b:45:a6:9e:51:
                    68:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6A:29:43:E8:EC:E4:1F:F1:F7:29:7A:61:3A:C4:CA:5A:8F:4E:D6
            X509v3 Authority Key Identifier:
                keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1e:b8:fa:11:07:01:b2:26:22:5b:ec:fe:1b:5a:14:39:f0:
         d8:f1:45:2b:fc:b6:81:9d:2e:9c:0a:ed:e1:9b:9f:dd:71:86:
         ca:05:f3:65:c2:fd:a8:12:ba:66:be:14:32:21:4a:f0:e0:89:
         ab:d9:9c:7c:24:71:6e:99:03:18:b5:30:68:60:04:c2:0d:90:
         68:8d:af:16:83:6e:ce:42:8e:ec:6d:f7:7c:25:08:fb:4c:18:
         8b:70:fd:19:fd:be:6d:b4:a4:60:43:bc:b7:69:9b:af:00:12:
         77:2b:b8:ef:61:1f:6f:68:ed:1b:ba:5c:52:d2:c2:44:c2:ff:
         b9:61:7d:36:a0:d7:12:07:c7:ea:e5:6a:20:15:e0:62:1e:74:
         da:d7:34:99:18:23:c4:cb:9c:c6:69:ed:cd:2d:b9:c2:56:94:
         78:a5:da:b1:73:c5:ff:f9:d3:44:01:58:2d:d3:0c:ad:d2:fd:
         02:d8:3d:dc:24:76:3d:b2:c6:63:b2:fc:22:7d:49:53:80:01:
         47:5e:6c:e9:1a:38:45:90:18:00:51:09:3f:fe:0a:82:b4:2c:
         37:a8:9a:30:9f:0e:5d:37:84:9c:62:8a:77:c6:a7:da:01:68:
         4b:db:b3:29:b2:7f:8a:d4:6f:46:e5:b5:77:44:ad:d8:b8:ba:
         22:07:07:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:37 2025 by rpki-client