Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
File:                     SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft (raw, json)
Hash identifier:          /cBYDA8d1gpjSl7vR7+MRwiJflMqfMXT6tVIAv6LE8w=
Subject key identifier:   B1:F2:11:C1:43:4E:0F:07:6D:C0:D5:5F:4A:B7:26:6F:40:40:C2:9A
Authority key identifier: 4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
Certificate issuer:       /CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Certificate serial:       019849652270D0E3A29D31C10981D6BB5FB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
Manifest number:          0DF4
Signing time:             Sun 27 Jul 2025 01:00:21 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:21 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:21 +0000
Files and hashes:         1: SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl (hash: bvSYWbXECJ4y0gC533A91NHb3HiiiQViF/NMOWn9MAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:22:70:d0:e3:a2:9d:31:c1:09:81:d6:bb:5f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
        Validity
            Not Before: Jul 27 01:00:21 2025 GMT
            Not After : Jul 28 01:00:21 2025 GMT
        Subject: CN=b1f211c1434e0f076dc0d55f4ab7266f4040c29a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:35:58:8a:ac:b7:cd:31:e7:7d:ec:6f:2f:
                    38:e3:8c:b0:4f:15:8d:ce:42:15:69:27:3a:af:d4:
                    2b:e2:ca:4d:cc:1a:0f:04:a8:34:f5:11:ed:92:a5:
                    09:9e:ed:c8:a0:0f:d8:84:c0:93:8d:bc:ea:fa:3f:
                    ed:a7:83:46:9e:53:3b:1a:8f:6d:2e:d6:d8:bd:1f:
                    de:3b:99:b0:af:1d:08:be:3e:8b:58:4e:25:43:3a:
                    b1:39:ee:e6:a7:64:de:38:bb:35:86:c8:73:b4:76:
                    f3:6a:f7:9c:c2:07:e9:39:09:2c:a8:fd:d5:24:28:
                    2e:71:77:f3:e0:c2:49:cc:c7:d8:c8:9b:d3:51:c0:
                    4d:b8:68:7e:77:d2:39:54:41:c3:0b:35:5f:e1:61:
                    f5:0d:23:06:29:b3:00:4f:ec:fc:db:36:d1:e3:d3:
                    e9:37:c1:53:53:df:60:9f:ea:44:8b:36:2a:ea:ec:
                    a0:a4:4f:94:f0:9f:68:f1:1a:37:4f:4c:09:5d:d4:
                    0b:13:c7:e7:e5:73:d2:7d:dd:4d:e7:12:6b:07:c0:
                    c6:f0:97:db:85:a3:c1:1c:0d:77:66:16:5f:5c:d5:
                    dd:ea:55:62:e1:1d:7c:73:97:df:82:9a:ba:74:c4:
                    ed:8c:30:da:ab:cb:da:4e:d8:a1:65:54:f8:88:81:
                    87:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F2:11:C1:43:4E:0F:07:6D:C0:D5:5F:4A:B7:26:6F:40:40:C2:9A
            X509v3 Authority Key Identifier:
                keyid:4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:32:b4:c5:02:15:d6:de:af:cd:ca:22:52:e4:61:2a:20:bd:
         f8:86:e5:a2:b3:76:c8:0b:48:4e:14:b7:40:09:87:5a:49:cf:
         aa:cc:76:7c:07:05:67:22:c6:d3:64:7c:90:7a:dc:91:d7:30:
         bf:3e:53:c4:51:4c:a6:c5:03:29:cb:d8:b6:f6:c2:b9:f7:f1:
         cb:2e:94:66:e4:08:dd:df:bd:36:b6:16:4d:56:3b:5e:38:c1:
         a0:13:a4:e6:56:64:63:aa:71:8b:ba:f0:95:ce:25:cd:fa:10:
         7c:08:8e:2d:bb:9b:d8:b4:2b:7e:29:27:3e:00:53:e1:ff:a7:
         49:09:ef:2c:d6:d6:49:45:b8:4d:4b:3c:9e:d5:2d:af:b6:64:
         62:56:5f:7d:56:bb:9c:43:be:2e:96:df:26:39:20:51:1f:bc:
         d1:67:39:9f:09:d7:98:29:de:99:d3:0c:a7:78:c4:82:59:97:
         fa:e8:d6:99:d5:74:b3:c5:a4:f2:05:3e:ac:26:63:c2:b9:ef:
         2f:aa:6c:db:09:85:78:69:15:5a:36:e8:87:f6:33:2c:44:80:
         fb:03:c9:40:a8:37:77:00:1e:98:78:1f:32:e7:cd:5d:8d:d0:
         ed:2c:79:70:a5:ed:30:4b:e9:3a:c1:73:df:56:c6:4b:a0:00:
         45:1f:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:32:08 2025 by rpki-client