Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
File:                     SmyWV_fDBZWx2hfELhdtdSygVLg.mft (raw, json)
Hash identifier:          vuDB2KWW2FIp4cAA6vUFC8UCwNg9huDfCm75YqdSZ/0=
Subject key identifier:   C6:36:32:37:6B:32:80:BB:83:14:F8:24:6A:40:D3:9D:AF:21:97:A7
Authority key identifier: 4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8
Certificate issuer:       /CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
Certificate serial:       019922FA458A6ECBBDF1A85360B4F5E289CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
Manifest number:          092A
Signing time:             Sun 07 Sep 2025 07:00:51 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:51 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:51 +0000
Files and hashes:         1: SmyWV_fDBZWx2hfELhdtdSygVLg.crl (hash: U0GdcEmqHKTWiXC5sD72BVsFT2h0IwIY46Z/TwM/9l8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:45:8a:6e:cb:bd:f1:a8:53:60:b4:f5:e2:89:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
        Validity
            Not Before: Sep  7 07:00:51 2025 GMT
            Not After : Sep  8 07:00:51 2025 GMT
        Subject: CN=c63632376b3280bb8314f8246a40d39daf2197a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d2:14:4d:0a:7b:4e:cf:72:f7:c6:5d:d4:4a:
                    12:27:64:f5:7f:e7:f4:7a:db:da:85:bb:d5:1d:92:
                    ca:96:31:66:71:25:90:19:c0:19:69:6a:34:06:ee:
                    00:37:a0:9c:02:14:0d:4d:db:36:2a:7a:54:16:a0:
                    5e:c6:b0:f1:d8:d6:18:ad:5b:06:bb:ed:3d:b8:63:
                    83:5b:0f:de:80:b0:9f:ed:a5:23:9f:d6:a6:bd:ab:
                    d9:87:7d:a5:da:ed:db:f8:09:01:f6:6d:0e:df:5f:
                    81:dc:0e:63:16:4e:35:26:9a:31:b9:ba:34:7b:4b:
                    89:af:84:ae:c1:4c:1f:99:0d:9d:14:73:42:15:5a:
                    08:ed:84:b5:b8:b0:af:6e:2d:76:0b:3a:98:ae:e6:
                    f3:af:03:04:fb:7f:30:55:69:c3:ca:b5:b5:41:6b:
                    e7:c6:af:a5:ec:91:21:c2:a4:9a:08:21:26:2d:4d:
                    70:af:a2:56:51:e2:6b:ed:9c:8f:ac:fe:7f:17:a3:
                    55:b6:f1:d2:dd:04:85:cb:40:28:b1:db:6c:71:18:
                    d5:3c:2b:ba:63:2e:20:ec:21:84:5e:0f:1b:96:31:
                    04:cd:80:d6:9a:58:bd:9e:ab:b0:91:a6:6f:08:42:
                    bf:e3:b7:a6:af:dc:84:ce:1f:a1:9e:86:27:ab:ee:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:36:32:37:6B:32:80:BB:83:14:F8:24:6A:40:D3:9D:AF:21:97:A7
            X509v3 Authority Key Identifier:
                keyid:4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ca:90:6d:5b:b2:b3:8a:d1:6a:56:b7:27:7c:ff:3e:59:e5:
         72:06:29:b1:bf:10:3f:12:aa:f6:95:b1:b3:69:d5:b8:64:53:
         e2:b2:a6:e7:06:78:e3:ed:ab:02:ec:75:a9:1c:7e:12:75:29:
         98:fb:29:de:c8:28:02:56:72:32:4d:84:c5:20:1e:b4:ba:7d:
         a0:9d:26:09:2c:b8:9f:bb:f3:c3:52:90:30:13:70:42:0d:25:
         55:74:cc:e9:a5:43:c4:67:67:03:ad:b8:13:19:d3:20:6a:06:
         1d:ae:60:bb:74:ca:61:03:1b:14:48:f9:b4:5f:2f:07:e0:f8:
         f4:da:32:b7:20:b2:76:62:f5:dc:2b:26:5f:55:dd:c5:82:5a:
         90:5e:b6:ef:a0:d9:40:de:26:75:60:30:4b:85:ed:16:36:79:
         ac:cc:a4:3c:8e:42:de:48:d4:d8:5e:c2:f4:5d:b2:1e:87:93:
         7c:26:21:11:b7:d7:cc:83:14:d0:f8:61:fd:d7:2a:ef:9c:8f:
         14:b3:1f:c4:ee:d3:8d:ed:b5:f4:8f:8b:b3:b4:3d:7b:ee:14:
         c9:8d:1c:e7:72:65:01:99:19:74:5b:91:fc:96:5c:e3:82:0b:
         45:f0:74:fd:f7:4a:fe:54:2b:81:73:48:03:43:62:37:b9:22:
         7d:cf:2b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:52 2025 by rpki-client