Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File:                     SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier:          NW4Y7NaHcFwkfOXwGrkNTpF6P573yV/CDCU2x4DOPDo=
Subject key identifier:   D6:F3:81:4C:60:CF:B5:43:6F:A6:25:DE:36:E7:A5:C9:37:9C:30:04
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer:       /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial:       01987CADFA88F6F6167D91F0AC694A0FE5DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 00:00:33 +0000
Manifest this update:     Wed 06 Aug 2025 00:00:33 +0000
Manifest next update:     Thu 07 Aug 2025 00:00:33 +0000
Files and hashes:         1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: n8hjIVAObQV5+oOdnDvnzOoOetmOgEzMHE6m9o56Wzc=)
                          2: ZCwrk3DUvn-uZjo3WgvhoOWpHv0.roa (hash: AtdbQHHLI0H407seskZvbBq2HBK/6vTqf2YFUILBHxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ad:fa:88:f6:f6:16:7d:91:f0:ac:69:4a:0f:e5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
        Validity
            Not Before: Aug  6 00:00:33 2025 GMT
            Not After : Aug  7 00:00:33 2025 GMT
        Subject: CN=d6f3814c60cfb5436fa625de36e7a5c9379c3004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:0a:6f:fa:6b:50:f8:a4:1c:ad:30:fb:6f:
                    9e:22:01:06:72:ac:4e:cc:f6:30:3b:d3:cc:b7:e3:
                    9a:0e:23:43:12:87:22:41:28:a9:cb:11:a6:61:ca:
                    79:72:ce:39:90:ef:43:22:6f:69:f2:cd:df:69:f1:
                    3c:2e:31:fd:96:45:4c:fe:e8:b9:81:b0:0b:54:47:
                    8e:c5:ae:d1:09:81:67:7c:7f:ad:8b:5f:5c:66:09:
                    05:68:df:2d:e2:ce:04:75:63:22:5d:b2:07:2a:89:
                    62:a3:07:93:35:ea:19:8c:11:c9:0a:7a:dd:20:fc:
                    aa:5a:54:be:71:e8:34:97:0d:cd:a1:c5:88:e7:4d:
                    7d:67:03:eb:2d:a3:57:21:6b:9a:3c:e8:7c:ac:8c:
                    6f:0a:07:53:9e:75:f2:3c:11:1d:d7:f8:28:e5:fc:
                    33:dd:a2:d9:17:32:4c:d3:ed:24:3c:77:63:a7:b6:
                    20:02:1c:a6:a1:11:0f:52:d4:2b:25:6a:4c:76:02:
                    e9:45:53:cd:ba:2c:1e:d4:ef:08:98:00:76:71:12:
                    d8:f7:0f:94:e5:a1:3d:43:bc:0a:bd:a4:de:75:2d:
                    71:0e:6a:e0:00:80:db:0f:21:b5:6a:57:b4:43:39:
                    29:6c:5a:f2:e3:a1:3b:a3:1f:e1:12:60:17:74:2e:
                    9f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F3:81:4C:60:CF:B5:43:6F:A6:25:DE:36:E7:A5:C9:37:9C:30:04
            X509v3 Authority Key Identifier:
                keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:37:56:b1:2e:ae:21:bf:5d:dd:45:5e:99:41:ba:99:bc:a4:
         8e:11:08:41:38:d6:b9:48:e6:8c:46:0f:b9:c3:b8:b4:63:42:
         48:cb:0f:ae:0a:da:e7:16:16:de:eb:a2:63:22:47:ac:9c:4d:
         69:da:30:69:3f:77:13:d3:b2:77:20:4f:3f:ab:2a:9b:ec:22:
         4e:c1:fa:35:6c:8b:1e:62:7f:3e:de:d9:98:dd:74:82:df:bb:
         f9:08:e2:5d:38:aa:f3:66:21:74:d8:08:8e:f5:ce:58:89:64:
         ef:7d:41:ed:9a:3d:21:8e:c2:45:01:61:40:a2:2d:05:d8:ed:
         cd:37:e3:49:1f:63:df:13:dc:a4:d5:7f:22:4b:fa:eb:73:b7:
         87:9a:89:fc:4a:2e:be:f3:de:53:93:77:98:e6:4c:89:f2:81:
         c7:e0:a3:f5:d6:94:05:5a:9b:5c:6f:5d:23:46:7f:d4:ec:89:
         7d:ce:9d:35:a6:c4:8b:f1:df:3d:c1:7a:8a:4e:7e:51:ce:2b:
         5b:85:f6:92:28:2d:44:a5:06:d4:fc:c1:cc:47:f4:7e:2d:6a:
         7b:5b:62:e1:e4:93:88:ee:b7:c0:07:c7:61:14:92:49:18:55:
         8d:70:23:db:1c:9c:cf:fb:32:f1:c4:5c:ba:e1:0a:58:86:9e:
         d8:db:c9:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rfqI9vYWfZHwrGlKD+XdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjM3NmNlOTIwODdlNGM3Y2U1MzY2ODY1Mzc3NjllMmNj
MzQwNTkwHhcNMjUwODA2MDAwMDMzWhcNMjUwODA3MDAwMDMzWjAzMTEwLwYDVQQD
EyhkNmYzODE0YzYwY2ZiNTQzNmZhNjI1ZGUzNmU3YTVjOTM3OWMzMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16IKb/prUPikHK0w+2+eIgEGcqxO
zPYwO9PMt+OaDiNDEociQSipyxGmYcp5cs45kO9DIm9p8s3fafE8LjH9lkVM/ui5
gbALVEeOxa7RCYFnfH+ti19cZgkFaN8t4s4EdWMiXbIHKolioweTNeoZjBHJCnrd
IPyqWlS+ceg0lw3NocWI5019ZwPrLaNXIWuaPOh8rIxvCgdTnnXyPBEd1/go5fwz
3aLZFzJM0+0kPHdjp7YgAhymoREPUtQrJWpMdgLpRVPNuiwe1O8ImAB2cRLY9w+U
5aE9Q7wKvaTedS1xDmrgAIDbDyG1ale0QzkpbFry46E7ox/hEmAXdC6fTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbzgUxgz7VDb6Yl3jbnpck3nDAEMB8GA1UdIwQY
MBaAFEpjds6SCH5MfOU2aGU3dp4sw0BZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21OMnpwSUlma3g4NVRab1pUZDJuaXpEUUZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83Y2Y0MmUtMmFlOC00ZjEzLWEwYzQt
NGUxZmI3NmM4NDdhLzEvU21OMnpwSUlma3g4NVRab1pUZDJuaXpEUUZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83Y2Y0MmUtMmFlOC00ZjEzLWEwYzQtNGUxZmI3NmM4NDdh
LzEvU21OMnpwSUlma3g4NVRab1pUZDJuaXpEUUZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTdWsS6u
Ib9d3UVemUG6mbykjhEIQTjWuUjmjEYPucO4tGNCSMsPrgra5xYW3uuiYyJHrJxN
adowaT93E9OydyBPP6sqm+wiTsH6NWyLHmJ/Pt7ZmN10gt+7+QjiXTiq82YhdNgI
jvXOWIlk731B7Zo9IY7CRQFhQKItBdjtzTfjSR9j3xPcpNV/Ikv663O3h5qJ/Eou
vvPeU5N3mOZMifKBx+Cj9daUBVqbXG9dI0Z/1OyJfc6dNabEi/HfPcF6ik5+Uc4r
W4X2kigtRKUG1PzBzEf0fi1qe1ti4eSTiO63wAfHYRSSSRhVjXAj2xycz/sy8cRc
uuEKWIae2NvJ3g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:04:31 2025 by rpki-client