Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
File:                     SMOd4l_6fq8CsqbYws9uLOtWK_M.mft (raw, json)
Hash identifier:          VoKUlo2749WHgvORhwKdma9or1xg+gFYBuVTgGjnjCw=
Subject key identifier:   6B:16:E0:E4:46:7C:A0:41:B6:7B:5F:2D:DD:E0:FC:D3:01:09:37:20
Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
Certificate issuer:       /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Certificate serial:       01963F55279C311E72D9A97ED7CF31D6CB7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
Manifest number:          114F
Signing time:             Wed 16 Apr 2025 16:01:07 +0000
Manifest this update:     Wed 16 Apr 2025 16:01:07 +0000
Manifest next update:     Thu 17 Apr 2025 16:01:07 +0000
Files and hashes:         1: JtwVZJ2q-er-ZyfG4We1Ih9BT0U.roa (hash: xnd0jnisgvFr2C1BnV+wtzkH+5RWNTZh9FBZUZ5Hu3E=)
                          2: SMOd4l_6fq8CsqbYws9uLOtWK_M.crl (hash: GuoN5K/rztAmStHRv+bPpee/koZNuraRhLcZpfMXeo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:55:27:9c:31:1e:72:d9:a9:7e:d7:cf:31:d6:cb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
        Validity
            Not Before: Apr 16 16:01:07 2025 GMT
            Not After : Apr 17 16:01:07 2025 GMT
        Subject: CN=6b16e0e4467ca041b67b5f2ddde0fcd301093720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:5d:94:ca:b1:b7:db:e6:7f:65:81:9b:84:
                    e3:ae:8b:ea:d7:1c:03:9f:48:ef:e8:32:60:64:f4:
                    57:07:1b:66:ff:c1:ef:ec:68:9b:1e:c6:98:a5:31:
                    98:2f:c1:e7:f2:27:32:00:24:32:97:a5:02:f5:77:
                    8f:3e:78:3e:28:0c:e8:fe:2c:a0:69:4d:c9:37:27:
                    63:e7:fd:27:ee:ec:6c:e9:72:d8:67:cf:fa:08:35:
                    da:13:df:64:9b:a6:c4:70:85:46:a5:74:c2:55:c7:
                    d1:36:43:2e:7e:96:5a:48:02:c8:c0:5b:f7:1c:8d:
                    36:32:a8:26:b8:0c:02:34:74:ab:41:af:aa:95:99:
                    db:80:3d:2e:d0:18:52:11:3b:6a:d4:b0:44:82:7a:
                    f6:ba:75:d9:b7:dd:0a:dd:37:c9:d9:d3:be:7a:5e:
                    9e:b9:2a:d0:b1:50:a0:1d:7b:0f:6e:25:51:6e:66:
                    8c:a4:17:9a:92:17:4d:da:95:da:ae:b4:e9:6e:9d:
                    03:ba:73:20:05:9d:0f:30:2d:ff:54:ef:66:a0:9b:
                    23:69:6b:a8:5a:84:b4:b0:68:52:30:62:82:67:da:
                    62:1c:1d:62:b3:15:36:61:95:33:76:16:c6:2f:48:
                    51:40:08:99:84:6a:cd:9a:5b:b4:24:ea:e4:f9:5c:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:16:E0:E4:46:7C:A0:41:B6:7B:5F:2D:DD:E0:FC:D3:01:09:37:20
            X509v3 Authority Key Identifier:
                keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:40:e8:39:90:b3:f7:ab:3d:2f:22:11:b8:93:20:1c:da:ce:
         a2:60:89:66:51:5d:bf:ea:70:a6:b7:aa:9f:05:61:94:38:13:
         4b:a1:2e:52:3e:69:53:c5:48:da:a6:74:85:27:8c:4d:ff:c8:
         9b:f9:b3:e0:89:bd:f2:2d:c3:18:79:5b:b8:ca:60:13:22:3f:
         4a:5e:fb:17:11:21:7d:cf:bb:aa:12:38:1d:83:48:df:64:c5:
         46:51:9b:63:82:cb:54:cb:1b:54:3c:61:59:cf:fc:64:33:40:
         91:11:21:12:87:72:79:47:1b:cb:e3:b2:c7:8a:b2:b6:be:8a:
         bd:ec:47:9c:cd:a6:e3:fa:a3:d6:4a:9d:ae:ca:85:cf:93:16:
         83:54:e1:c7:9c:2b:9b:63:b4:85:73:88:7c:63:37:e8:a4:ab:
         9e:71:b1:48:67:98:32:a8:31:fb:1e:f2:02:ad:86:b4:51:37:
         c4:a4:08:93:ad:7d:69:d1:63:98:53:95:c4:27:b2:b2:69:21:
         54:79:db:60:e4:0d:c0:0b:65:d8:0a:7d:92:aa:75:70:1a:d3:
         aa:97:b8:f8:3f:41:f2:12:9d:ae:ef:5c:7f:f2:8f:87:a1:73:
         f3:e2:c1:69:09:6b:ad:0a:92:d9:b4:41:4c:18:27:8b:81:e5:
         2f:1b:31:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/VSecMR5y2al+188x1st9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YzM5ZGUyNWZmYTdlYWYwMmIyYTZkOGMyY2Y2ZTJjZWI1
NjJiZjMwHhcNMjUwNDE2MTYwMTA3WhcNMjUwNDE3MTYwMTA3WjAzMTEwLwYDVQQD
Eyg2YjE2ZTBlNDQ2N2NhMDQxYjY3YjVmMmRkZGUwZmNkMzAxMDkzNzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsRdlMqxt9vmf2WBm4Tjrovq1xwD
n0jv6DJgZPRXBxtm/8Hv7GibHsaYpTGYL8Hn8icyACQyl6UC9XePPng+KAzo/iyg
aU3JNydj5/0n7uxs6XLYZ8/6CDXaE99km6bEcIVGpXTCVcfRNkMufpZaSALIwFv3
HI02MqgmuAwCNHSrQa+qlZnbgD0u0BhSETtq1LBEgnr2unXZt90K3TfJ2dO+el6e
uSrQsVCgHXsPbiVRbmaMpBeakhdN2pXarrTpbp0DunMgBZ0PMC3/VO9moJsjaWuo
WoS0sGhSMGKCZ9piHB1isxU2YZUzdhbGL0hRQAiZhGrNmlu0JOrk+VxwYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsW4ORGfKBBtntfLd3g/NMBCTcgMB8GA1UdIwQY
MBaAFEjDneJf+n6vArKm2MLPbizrVivzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YmNiYWYtNDk5My00ZDA4LWI5YTgt
MDM1NWVmMTE1ODljLzEvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85YmNiYWYtNDk5My00ZDA4LWI5YTgtMDM1NWVmMTE1ODlj
LzEvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEDoOZCz
96s9LyIRuJMgHNrOomCJZlFdv+pwpreqnwVhlDgTS6EuUj5pU8VI2qZ0hSeMTf/I
m/mz4Im98i3DGHlbuMpgEyI/Sl77FxEhfc+7qhI4HYNI32TFRlGbY4LLVMsbVDxh
Wc/8ZDNAkREhEodyeUcby+Oyx4qytr6KvexHnM2m4/qj1kqdrsqFz5MWg1Thx5wr
m2O0hXOIfGM36KSrnnGxSGeYMqgx+x7yAq2GtFE3xKQIk619adFjmFOVxCeysmkh
VHnbYOQNwAtl2Ap9kqp1cBrTqpe4+D9B8hKdru9cf/KPh6Fz8+LBaQlrrQqS2bRB
TBgni4HlLxsx0g==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:19:05 2025 by rpki-client