Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File:                     SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier:          ktGzhwelKucuaUVPXVsxP7Jp29kBdzLlpb2xQxvbCcA=
Subject key identifier:   49:59:CA:F5:94:A7:78:FC:1E:FF:A0:00:B7:43:14:21:6B:65:16:F8
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer:       /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial:       01975948A69A30F9FB7BCE6EF6A1BEF9344E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number:          151D
Signing time:             Tue 10 Jun 2025 10:00:22 +0000
Manifest this update:     Tue 10 Jun 2025 10:00:22 +0000
Manifest next update:     Wed 11 Jun 2025 10:00:22 +0000
Files and hashes:         1: Os6xDD1H4LsrEU2Pwmq0YT-o8IM.roa (hash: 9WTAK5WFdauUxfw4Aw74xq8JjOOgRjy/Qe/px+Cijao=)
                          2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: PqsbIZRnqBbz6qNv/fP1pVc7jgRe4gWiFqu0UiMB0rI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 10:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:48:a6:9a:30:f9:fb:7b:ce:6e:f6:a1:be:f9:34:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
        Validity
            Not Before: Jun 10 10:00:22 2025 GMT
            Not After : Jun 11 10:00:22 2025 GMT
        Subject: CN=4959caf594a778fc1effa000b74314216b6516f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:83:eb:94:71:3f:ee:78:8a:e9:20:1b:98:
                    bb:ca:ce:f7:a9:08:53:27:cb:ea:28:ee:c1:66:5e:
                    57:7e:26:2b:db:95:fe:7c:8d:03:43:52:62:61:8a:
                    56:bd:5e:52:d8:b0:a3:05:ed:8b:82:76:a1:bd:e8:
                    13:1e:36:31:98:9a:69:ee:4a:71:d4:fd:0e:9b:ca:
                    04:5a:1d:77:2b:aa:6a:9e:36:ea:b8:ce:79:5e:23:
                    69:cf:ee:8a:55:7a:80:1b:a6:5c:fd:0d:0f:b1:77:
                    f9:71:c3:0a:e3:5a:5a:0b:38:28:3b:3b:7f:1e:64:
                    86:21:db:fe:de:e7:c2:3e:c5:d3:6a:d8:fc:4e:5d:
                    0e:34:6a:41:2b:05:ec:57:a6:9d:ee:cc:2a:e3:26:
                    86:d4:7d:a4:46:b2:de:86:f4:97:be:2a:9e:e6:a0:
                    12:3a:37:02:c8:98:04:d2:f5:a4:0f:5c:3a:05:8e:
                    11:d1:83:84:cc:bd:07:57:01:33:cb:9f:47:76:86:
                    46:03:7e:d2:43:80:b0:fb:fb:94:5d:f8:a3:0e:b1:
                    8b:b2:ee:4f:68:4e:ac:43:24:be:6a:21:ce:cf:26:
                    30:ed:da:37:bd:59:4a:04:e4:b5:16:ee:0d:a2:2b:
                    d2:4a:ac:98:74:92:79:e5:20:f1:25:ec:f3:8b:99:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:59:CA:F5:94:A7:78:FC:1E:FF:A0:00:B7:43:14:21:6B:65:16:F8
            X509v3 Authority Key Identifier:
                keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:08:4c:51:d4:49:09:a3:84:6f:65:22:5e:7f:d2:02:f6:05:
         9e:6b:f8:12:fd:57:db:81:8a:d8:99:e6:bc:cc:3a:63:4a:30:
         24:60:f3:2a:3c:f7:ac:1a:49:68:aa:a4:b4:7a:12:74:59:7c:
         9b:ce:12:e7:54:19:c3:67:9c:82:d2:5a:e3:ca:6b:68:bd:e3:
         7c:e8:62:98:03:44:d9:aa:70:2a:b6:82:e6:44:f2:d2:25:25:
         3e:a2:ab:bb:d6:61:a9:27:53:b7:68:18:03:28:78:a6:24:38:
         3d:e5:f1:61:8f:d4:94:58:63:6c:79:f4:c7:cd:04:a3:a8:1c:
         3e:1c:91:72:92:fa:b7:23:36:8c:68:69:69:d4:b8:f5:e7:b0:
         cd:53:ce:02:78:06:11:da:ba:7a:a8:20:c8:23:e3:31:0c:36:
         d7:f1:f2:6e:9e:b9:03:4f:2a:91:d9:2e:83:db:71:df:f3:8d:
         e6:9c:65:18:ec:04:6e:87:5e:5e:73:69:da:20:df:94:84:e4:
         78:dc:e6:19:97:eb:ed:33:39:74:7e:f2:55:23:66:5d:89:7a:
         d9:13:59:30:99:94:0e:0f:bc:c4:23:d0:23:a4:a6:74:50:4d:
         a5:b8:bf:1f:23:ce:3f:0b:8c:37:3e:60:7c:08:92:75:46:b4:
         07:1e:43:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZSKaaMPn7e85u9qG++TROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Y2YzN2IzNjQ2ZmRhOTNjYmRkMGI4YWFjY2ZmZjMxM2E2
ZjcxOGYwHhcNMjUwNjEwMTAwMDIyWhcNMjUwNjExMTAwMDIyWjAzMTEwLwYDVQQD
Eyg0OTU5Y2FmNTk0YTc3OGZjMWVmZmEwMDBiNzQzMTQyMTZiNjUxNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo2D65RxP+54iukgG5i7ys73qQhT
J8vqKO7BZl5XfiYr25X+fI0DQ1JiYYpWvV5S2LCjBe2LgnahvegTHjYxmJpp7kpx
1P0Om8oEWh13K6pqnjbquM55XiNpz+6KVXqAG6Zc/Q0PsXf5ccMK41paCzgoOzt/
HmSGIdv+3ufCPsXTatj8Tl0ONGpBKwXsV6ad7swq4yaG1H2kRrLehvSXviqe5qAS
OjcCyJgE0vWkD1w6BY4R0YOEzL0HVwEzy59HdoZGA37SQ4Cw+/uUXfijDrGLsu5P
aE6sQyS+aiHOzyYw7do3vVlKBOS1Fu4NoivSSqyYdJJ55SDxJezzi5nh6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElZyvWUp3j8Hv+gALdDFCFrZRb4MB8GA1UdIwQY
MBaAFEjPN7Nkb9qTy90LiqzP/zE6b3GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yMGQ1OTMtNzIzZi00OTYzLTkwMWQt
MTdlMzE1ODk1NGRhLzEvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8yMGQ1OTMtNzIzZi00OTYzLTkwMWQtMTdlMzE1ODk1NGRh
LzEvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdghMUdRJ
CaOEb2UiXn/SAvYFnmv4Ev1X24GK2JnmvMw6Y0owJGDzKjz3rBpJaKqktHoSdFl8
m84S51QZw2ecgtJa48praL3jfOhimANE2apwKraC5kTy0iUlPqKru9ZhqSdTt2gY
Ayh4piQ4PeXxYY/UlFhjbHn0x80Eo6gcPhyRcpL6tyM2jGhpadS49eewzVPOAngG
Edq6eqggyCPjMQw21/Hybp65A08qkdkug9tx3/ON5pxlGOwEbodeXnNp2iDflITk
eNzmGZfr7TM5dH7yVSNmXYl62RNZMJmUDg+8xCPQI6SmdFBNpbi/HyPOPwuMNz5g
fAiSdUa0Bx5DxQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 15:54:17 2025 by rpki-client