Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
File:                     smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json)
Hash identifier:          pCR5X9b70tpFBY8qkB8MhAcSXEM90AZdPUvIZexZOwA=
Subject key identifier:   9E:9D:67:EA:06:77:56:1F:58:76:A9:B9:25:B3:83:B8:10:04:7F:AB
Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
Certificate issuer:       /CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Certificate serial:       01974FD7A806D6CB1E7C792030E1A64A2665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
Manifest number:          12
Signing time:             Sun 08 Jun 2025 14:00:22 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:22 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:22 +0000
Files and hashes:         1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: K6HNhN1ysPBZ1aF1Fq5pFfdFGRFhdtgRdJvDQ6JFyZY=)
                          2: vfgaajpx_IwIslySYTAXUF8b2bQ.roa (hash: 5BG+nyK3l0jI+maIom4ahnVVqUeZ02d+C1Q9Lbzzldo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d7:a8:06:d6:cb:1e:7c:79:20:30:e1:a6:4a:26:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b
        Validity
            Not Before: Jun  8 14:00:22 2025 GMT
            Not After : Jun  9 14:00:22 2025 GMT
        Subject: CN=9e9d67ea0677561f5876a9b925b383b810047fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:70:3c:10:35:a7:69:73:56:4f:57:3c:64:
                    c4:05:0d:2e:4a:34:1c:51:7b:69:d0:ef:5d:16:c4:
                    19:67:12:87:bc:8a:eb:b1:ed:77:90:63:a3:95:47:
                    01:74:68:cf:90:8f:5b:29:28:51:9d:74:b3:e6:a0:
                    54:ff:5d:18:6a:52:34:56:13:55:c1:a3:cd:b7:5d:
                    1d:5e:00:85:ad:cf:67:96:a2:de:03:ce:42:5d:cb:
                    84:20:e4:33:50:6c:44:fd:c4:aa:d0:ff:6c:3d:dd:
                    8a:e0:25:25:73:2c:fe:88:b1:e0:e2:8d:e5:6d:d3:
                    8f:82:da:45:4b:9a:c6:78:92:66:1f:c7:6d:32:e8:
                    c2:7e:4a:30:f5:59:43:d8:b9:b5:8b:39:a4:10:78:
                    59:98:ae:95:4b:d5:0c:f7:13:80:e9:eb:5f:9b:be:
                    c9:1f:c4:ac:20:20:3f:34:c9:43:19:9a:2f:e9:c3:
                    63:5a:f9:2b:37:77:66:3f:a3:21:12:b6:87:cb:dd:
                    13:3c:b0:5d:7d:85:39:d7:1e:ca:97:ed:d8:1b:85:
                    e7:7d:f0:63:99:f0:58:25:78:f4:fb:2d:8b:41:95:
                    b1:4c:f7:c8:78:e8:7a:5f:db:3a:33:25:5d:39:b1:
                    68:88:fb:f8:26:77:fd:9e:cf:fb:b6:68:a6:b1:6d:
                    eb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9D:67:EA:06:77:56:1F:58:76:A9:B9:25:B3:83:B8:10:04:7F:AB
            X509v3 Authority Key Identifier:
                keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ff:5c:7e:db:38:1b:14:00:d1:7a:88:cf:7a:40:94:8d:e1:
         2d:7e:dd:d2:63:ac:52:d6:d2:8f:27:d5:3b:c3:4c:fd:cc:05:
         e2:a5:a9:c8:4a:19:1a:7c:af:96:1a:ee:f6:2e:fa:c6:b6:28:
         e0:8f:a0:46:f9:3e:e7:77:ad:fa:cf:18:de:4d:bb:53:ca:e4:
         87:a9:99:cc:15:1a:d3:58:aa:dd:6f:b0:a8:7b:d4:d8:34:71:
         0c:ae:f5:40:a2:42:00:18:87:33:37:bb:ec:77:41:53:e1:20:
         ad:2d:a0:66:15:29:77:f6:ce:f5:72:a4:84:2e:c5:8c:50:64:
         05:7f:ae:d4:fe:fa:c5:86:b7:5b:2d:13:e1:6c:c4:d9:18:a3:
         66:17:f8:11:e1:79:20:e9:68:3b:5a:d9:09:a2:db:83:cf:f6:
         b0:d0:6e:61:ea:f8:4a:3f:62:59:58:65:97:43:4f:59:45:5a:
         0b:5a:0d:d7:56:eb:37:a0:9c:0d:ea:67:7d:e7:15:ad:e0:58:
         69:19:d8:fd:ba:02:51:db:be:33:ee:4a:26:98:2e:aa:06:08:
         6f:9f:77:1c:46:55:20:4e:bb:ca:a7:05:4e:9a:87:56:42:dc:
         e5:cc:6b:c4:e4:22:35:3a:b3:9c:90:da:f1:2b:09:7e:c0:49:
         f6:e6:c6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:23:49 2025 by rpki-client