Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
File:                     SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft (raw, json)
Hash identifier:          eR8ldT6g9HNNfuo/9LWRepELNgAlKHMqm45HDxeGAoc=
Subject key identifier:   AA:FC:30:E4:0A:10:F9:70:B3:08:63:4C:1E:8E:45:43:2F:3C:A7:BB
Authority key identifier: 48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89
Certificate issuer:       /CN=48cf96aa5eb0774f0d7b426b327435a8788eb189
Certificate serial:       0195903D6C31CC0965E201D33A060B40F384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
Manifest number:          1495
Signing time:             Thu 13 Mar 2025 16:01:39 +0000
Manifest this update:     Thu 13 Mar 2025 16:01:39 +0000
Manifest next update:     Fri 14 Mar 2025 16:01:39 +0000
Files and hashes:         1: SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl (hash: wyHGibqg8BFI1um0WYR9mA1DU/npLju7U1JDtyG1ERg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:3d:6c:31:cc:09:65:e2:01:d3:3a:06:0b:40:f3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cf96aa5eb0774f0d7b426b327435a8788eb189
        Validity
            Not Before: Mar 13 16:01:39 2025 GMT
            Not After : Mar 14 16:01:39 2025 GMT
        Subject: CN=aafc30e40a10f970b308634c1e8e45432f3ca7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:76:19:c8:bb:2b:12:ec:82:c1:93:c6:f1:
                    b8:15:76:b6:c9:d2:a4:5c:c7:01:c2:cd:1d:b2:04:
                    9a:ba:16:4b:9e:c8:e1:71:74:dd:7a:a9:dd:5a:f1:
                    84:cf:b1:0c:36:26:82:37:ea:8a:09:67:c9:1b:a1:
                    db:b9:29:64:98:29:9c:23:2d:b0:b6:4a:1a:13:ae:
                    25:95:5d:aa:2b:5f:3f:73:33:6d:2e:c7:fd:b1:52:
                    d4:b4:bb:1a:ac:6f:97:e3:79:ff:0e:86:15:14:ee:
                    bd:5d:aa:8e:0f:5a:bc:31:bb:01:23:03:14:aa:df:
                    0c:27:b4:38:1a:a5:cd:8e:1f:29:c0:1b:f0:1a:ba:
                    70:67:c2:ee:32:ed:71:b2:94:95:4e:9c:07:84:d5:
                    56:a2:99:57:46:56:e3:64:52:e9:98:36:60:49:0b:
                    fb:1f:55:ba:25:4f:93:c3:c0:24:d2:d3:ed:fe:19:
                    4b:48:37:8d:bc:7a:fe:97:14:31:28:2f:49:34:30:
                    27:80:b2:c6:ac:c4:2a:2a:63:e8:2b:2c:f7:da:14:
                    22:2f:4d:98:57:7b:85:e5:02:e9:47:a5:7b:a9:92:
                    35:c6:72:53:72:c6:41:b2:ed:25:0a:f5:f3:39:64:
                    13:9f:93:ac:36:94:75:79:98:45:5f:43:2e:4f:d5:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FC:30:E4:0A:10:F9:70:B3:08:63:4C:1E:8E:45:43:2F:3C:A7:BB
            X509v3 Authority Key Identifier:
                keyid:48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:98:76:2b:33:98:41:12:5e:dc:39:0d:0e:41:d9:3b:b2:ad:
         48:e9:25:b4:eb:f1:30:3d:f4:f1:3a:18:db:cb:37:24:8d:d2:
         77:e0:c2:09:dd:c4:23:39:fc:1f:b1:a4:83:76:80:13:29:d1:
         25:70:ef:d5:a5:d0:c7:02:00:03:86:c6:3a:af:79:50:f5:2f:
         c5:6a:88:fd:ee:25:34:97:db:6b:cb:dc:57:bf:53:52:ee:85:
         76:a8:1a:cc:83:98:c7:e5:41:27:82:30:9e:7d:e1:33:2a:55:
         3d:87:09:ec:43:41:82:0a:b5:74:9d:b7:51:bc:da:14:14:fd:
         5a:8a:c9:3b:ab:d1:c2:c1:a4:15:a0:d2:64:29:a7:ea:63:ef:
         e7:c7:b9:16:18:a0:23:13:85:33:24:f3:f7:77:be:17:43:92:
         a1:18:27:52:be:ce:4e:59:9d:7e:5e:3c:78:1b:6e:45:0f:d7:
         8e:51:94:0e:aa:e1:ae:75:44:dd:6e:cc:e4:85:08:b3:a9:b0:
         07:27:dd:fd:7c:f8:62:53:93:44:13:91:86:7d:ba:fe:7c:37:
         28:c8:79:49:c1:2e:3c:36:0e:dc:ae:e9:f7:26:3b:69:2f:bd:
         62:1b:5b:af:1c:e7:0e:7a:de:88:1e:7d:56:df:de:2d:e2:33:
         0c:90:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----