Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
File:                     SmyWV_fDBZWx2hfELhdtdSygVLg.mft (raw, json)
Hash identifier:          d4TujLyDTa70pvcuYkaSBxY7NdEw/hPKxoA/5BKrLHQ=
Subject key identifier:   B9:E7:77:ED:26:C0:82:DB:C8:73:E5:D6:8C:32:D9:D9:4F:A8:AD:CE
Authority key identifier: 4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8
Certificate issuer:       /CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
Certificate serial:       019A71132E39FD78AB71A4659F832FD823B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
Manifest number:          09D7
Signing time:             Tue 11 Nov 2025 04:01:13 +0000
Manifest this update:     Tue 11 Nov 2025 04:01:13 +0000
Manifest next update:     Wed 12 Nov 2025 04:01:13 +0000
Files and hashes:         1: SmyWV_fDBZWx2hfELhdtdSygVLg.crl (hash: MnWJd64/AJxv1no7HY3C+EhMyni4TFW7C7BKbskxIRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:13:2e:39:fd:78:ab:71:a4:65:9f:83:2f:d8:23:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
        Validity
            Not Before: Nov 11 04:01:13 2025 GMT
            Not After : Nov 12 04:01:13 2025 GMT
        Subject: CN=b9e777ed26c082dbc873e5d68c32d9d94fa8adce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:9d:c6:c3:98:1e:67:64:a9:6a:0f:8d:6b:
                    07:31:5a:fa:e8:ac:79:5b:a7:ff:31:a7:12:2f:78:
                    8d:66:e8:87:8a:fa:88:aa:05:df:1b:cf:df:41:0c:
                    de:83:e4:ea:36:51:1e:23:c4:54:a3:3f:37:1c:9a:
                    c0:62:c4:32:43:a7:16:38:0d:ab:09:80:ad:16:59:
                    23:77:a5:80:18:94:32:3c:06:c8:3f:da:4b:7d:0b:
                    6f:a1:08:a0:16:14:78:61:d7:99:36:59:f2:40:51:
                    21:05:9c:d6:b9:a2:2f:c5:4b:a1:a9:5f:8e:2e:19:
                    57:72:d7:a2:4e:46:de:f8:0a:6d:3e:6d:e6:2e:9b:
                    8a:17:ab:a6:ff:8e:17:54:48:72:b6:9e:30:00:d7:
                    0a:2b:66:3d:5d:47:7f:e7:2d:bf:a9:16:5f:35:7b:
                    b2:9b:b7:68:89:77:be:b1:5a:44:69:d1:7c:1b:74:
                    0b:34:5b:81:37:f2:bf:5e:8d:e7:40:3a:d8:58:89:
                    6f:9a:ce:e5:4f:66:f6:22:53:c0:ff:d0:e9:7a:61:
                    27:9d:de:57:11:00:6c:26:10:24:db:3d:0e:77:34:
                    0e:b9:f3:07:88:cf:3f:64:d8:c7:85:4d:f1:f6:d1:
                    53:62:3f:00:42:1d:88:7b:75:48:10:21:a3:e6:ce:
                    86:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E7:77:ED:26:C0:82:DB:C8:73:E5:D6:8C:32:D9:D9:4F:A8:AD:CE
            X509v3 Authority Key Identifier:
                keyid:4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:51:59:e6:07:6c:c5:69:48:fc:a4:fe:3e:ee:29:ed:bc:26:
         5c:bb:89:9c:e5:f4:8c:37:12:41:0f:be:a0:2f:7c:08:46:6c:
         63:7b:ce:60:69:2e:57:ae:6c:9e:a3:71:08:aa:2a:2e:97:c4:
         31:1d:6a:be:e9:9e:de:c8:52:06:2a:46:3f:02:a0:fd:fd:28:
         c5:e4:67:f6:f7:4a:35:ea:35:fa:25:06:75:4a:4c:ec:7b:18:
         06:79:cf:01:5f:92:b6:97:fe:75:2d:7c:12:a1:97:ab:10:a7:
         02:a8:16:81:81:76:a8:6b:0e:6b:17:33:fd:3b:71:75:0c:36:
         19:00:f3:21:fa:c0:72:01:ce:18:2e:b7:f8:2d:8a:75:fd:76:
         be:2f:6d:33:9f:ee:da:d7:53:df:31:8e:c0:06:b7:87:e5:7d:
         cb:0f:fe:fe:24:f7:3f:fc:97:0a:56:50:c3:32:61:14:e5:30:
         11:d8:88:bb:92:4c:a3:49:8e:48:52:5a:4f:56:8e:02:10:50:
         c8:f5:4f:63:53:21:07:dc:e4:d7:aa:60:19:88:b7:a0:22:95:
         b2:e9:b6:55:cc:d7:23:df:3f:2d:cd:2f:c1:ef:81:63:67:df:
         9c:66:65:ce:7b:56:7b:c4:22:d4:f1:43:17:68:a1:42:96:32:
         65:22:68:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:29 2025 by rpki-client