Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
File:                     SMuUpENJ-Y1Am33bmgU99K7xrd8.mft (raw, json)
Hash identifier:          arxYWvtK1ce5DKD+A10qSZZohEON9kZkx17CcmpyJrU=
Subject key identifier:   36:9B:48:2F:CC:FD:EF:AF:AD:C0:F0:1A:E1:6F:28:15:71:BB:DB:C9
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Certificate issuer:       /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial:       019A51515DE873F483DFD86631FC14526932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
Manifest number:          0FFC
Signing time:             Wed 05 Nov 2025 00:01:18 +0000
Manifest this update:     Wed 05 Nov 2025 00:01:18 +0000
Manifest next update:     Thu 06 Nov 2025 00:01:18 +0000
Files and hashes:         1: SMuUpENJ-Y1Am33bmgU99K7xrd8.crl (hash: ju/YsDhi+Hzy/Cp4DGSLe5l0FGxcm+Wsc3hGNy+Pus4=)
                          2: galtvA878B_gyWy0hQyRkeaZi6U.roa (hash: COa1iZxjQ8Xwq/EGs0wzkzw8um4DhbZoyDMdmoMPbH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:51:5d:e8:73:f4:83:df:d8:66:31:fc:14:52:69:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
        Validity
            Not Before: Nov  5 00:01:18 2025 GMT
            Not After : Nov  6 00:01:18 2025 GMT
        Subject: CN=369b482fccfdefafadc0f01ae16f281571bbdbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:44:af:03:83:0a:2c:8d:4b:8d:e3:84:fe:
                    ca:d3:f3:10:dc:5d:8d:ee:7c:f1:cf:43:b2:55:be:
                    73:ba:d4:9a:88:a6:c5:23:a3:1a:74:3e:0b:cc:38:
                    9d:9b:94:a6:c5:33:6a:94:99:b1:eb:7b:43:14:e4:
                    00:be:e2:5f:fe:00:1e:f6:5b:00:aa:53:7c:53:c3:
                    46:35:47:6f:7d:64:72:0b:df:8d:81:38:5d:1b:b3:
                    13:5d:e6:23:67:10:65:35:37:e9:c6:e3:c4:09:f1:
                    f1:5c:e5:09:ca:37:00:d1:1b:a9:2d:08:d3:dc:97:
                    1b:8f:dd:92:d9:9b:2a:63:80:1d:0f:62:bc:21:2e:
                    74:18:fe:27:18:a1:65:f3:d5:71:43:7d:d6:84:b0:
                    96:16:22:c2:8d:ae:98:a3:c2:52:cb:63:50:be:6a:
                    0e:a1:cf:51:e4:91:fc:d3:d8:f4:fa:d4:2d:c4:dc:
                    61:09:dd:ac:b0:4a:32:98:6c:2c:6a:b1:73:10:68:
                    71:f7:2b:83:f4:03:9b:c7:31:8c:87:2b:08:bc:0e:
                    37:af:fa:04:5d:28:e5:3d:09:bd:97:13:dd:f7:df:
                    31:95:ee:42:d5:b2:c7:c4:98:4b:bf:87:a0:47:16:
                    b6:de:d0:81:1e:c0:53:bb:85:2f:64:b1:a1:bc:4d:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9B:48:2F:CC:FD:EF:AF:AD:C0:F0:1A:E1:6F:28:15:71:BB:DB:C9
            X509v3 Authority Key Identifier:
                keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4e:88:97:88:4c:ea:b0:fa:c5:3f:05:2b:10:87:bf:b2:e6:
         c9:8a:dc:03:f9:9e:3c:63:17:af:13:75:d7:5d:cf:0f:f3:37:
         7e:5c:8a:47:3c:c9:47:b4:c7:46:91:bf:5b:3f:6c:13:b6:bb:
         de:c3:fa:fd:7e:c3:87:58:e3:62:a3:9d:a1:23:16:40:a9:67:
         e0:28:2f:8d:54:25:03:97:58:d0:68:d6:87:e7:da:6d:78:6a:
         62:cd:5a:c4:ad:c8:7c:d5:eb:31:88:c3:f7:14:1a:9c:72:6c:
         42:12:4a:19:56:fc:06:06:43:7f:c5:8e:16:04:8f:7e:f7:2a:
         04:f6:1e:27:36:3d:8d:5a:cd:db:15:67:e1:17:05:8b:1a:6a:
         ff:e2:20:2f:b2:79:16:03:7a:e0:44:28:32:e0:d0:b9:7c:94:
         23:73:de:15:cc:f4:57:e2:f7:ca:d6:ce:07:ed:58:43:c2:17:
         0f:85:1b:f7:b6:62:c4:3d:80:d4:cd:9d:dc:e8:80:ad:7f:c0:
         65:1d:67:b4:fa:b4:0c:26:8f:15:35:2d:6b:da:5c:aa:ad:85:
         71:f4:2c:ec:3d:9b:0d:d2:4b:a8:3d:54:3c:07:5d:73:5d:37:
         a1:83:4a:2a:53:da:fc:d6:e7:d0:33:3a:15:ae:b3:34:df:f6:
         a5:f5:7e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:57:55 2025 by rpki-client