Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
File:                     Sm8eAa8k15JJfXftH3mQrjphKQ0.mft (raw, json)
Hash identifier:          RnzJYuVfBpghJm1CuQiz++wMK+ChwMXZujYGhcDpqzM=
Subject key identifier:   AF:94:69:4A:F8:A2:9F:49:B9:F8:B9:75:8B:23:B0:5D:AF:BD:97:CA
Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
Certificate issuer:       /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Certificate serial:       01968C266C3BDF84C503AD9C1AF3B020AFCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
Manifest number:          151D
Signing time:             Thu 01 May 2025 14:00:50 +0000
Manifest this update:     Thu 01 May 2025 14:00:50 +0000
Manifest next update:     Fri 02 May 2025 14:00:50 +0000
Files and hashes:         1: Sm8eAa8k15JJfXftH3mQrjphKQ0.crl (hash: chOKfry+oMUqtns8YaU20/cVXmShstOBhVpWjP9ZjMg=)
                          2: ukp1qSkbacWgh99iGDLbhVTGpfE.roa (hash: VZyI94Eyjd6/U3vi8uEiKE4SlR4D8n4H4v7qeg38d2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:26:6c:3b:df:84:c5:03:ad:9c:1a:f3:b0:20:af:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
        Validity
            Not Before: May  1 14:00:50 2025 GMT
            Not After : May  2 14:00:50 2025 GMT
        Subject: CN=af94694af8a29f49b9f8b9758b23b05dafbd97ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:b7:00:ab:86:65:33:0b:ca:2a:84:4c:58:
                    e6:27:12:fd:da:fa:73:0b:c8:08:cd:2b:3e:74:b5:
                    b0:07:44:36:58:18:97:6d:be:8c:ec:12:52:ed:37:
                    1a:cc:c3:a3:28:8f:4f:94:d8:fd:a5:e9:19:fb:57:
                    ea:41:5d:b4:4e:62:88:24:bc:58:cd:bb:9b:f8:97:
                    0f:16:f0:16:0d:57:59:50:19:be:40:23:87:a5:5f:
                    14:9b:3b:cf:e5:5f:0a:58:ef:06:a0:67:43:22:4a:
                    22:c4:4e:26:07:84:57:f8:44:76:93:88:69:5a:08:
                    42:37:da:bd:be:14:3e:76:ec:a6:d0:c3:c7:29:22:
                    33:85:3a:ea:61:b5:e0:ee:2d:8f:f8:dc:2b:00:ce:
                    ac:91:ee:5b:22:fb:f6:5f:3e:63:21:c4:73:18:a7:
                    00:a5:02:c5:27:c5:65:cd:a1:29:a2:94:f3:7e:e9:
                    e7:81:01:c5:93:cc:92:8e:db:a4:ff:5c:da:8e:e4:
                    16:02:45:e0:25:e6:c6:53:b9:62:c2:7d:5c:89:e3:
                    82:09:8c:fa:80:97:3d:95:35:26:da:99:8d:34:29:
                    2c:72:6d:5a:60:da:b1:19:2a:41:52:5a:a8:3f:b5:
                    03:c9:84:bc:6e:f2:8d:0c:10:b8:84:ba:0c:c0:5f:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:94:69:4A:F8:A2:9F:49:B9:F8:B9:75:8B:23:B0:5D:AF:BD:97:CA
            X509v3 Authority Key Identifier:
                keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f9:87:de:02:57:80:77:87:75:f7:cf:3d:97:46:a4:3e:6e:
         32:19:3d:43:15:ed:2c:60:3e:cf:88:27:09:13:12:6c:90:84:
         db:10:ab:c6:71:15:e3:e3:b9:7f:b8:d9:bb:a0:1f:40:b5:21:
         4e:24:a4:a0:cb:79:65:87:38:5e:59:49:7a:37:c9:f9:47:e1:
         37:9f:57:9b:d2:ff:03:2e:86:8f:b7:8b:39:14:8c:c5:98:6a:
         4b:fd:d3:be:0f:e2:e2:e5:27:e3:24:ab:85:30:29:2c:50:a4:
         3d:96:45:b3:3c:00:fa:29:a5:28:0e:78:20:81:8c:ab:0e:90:
         ed:14:dd:e5:b8:b5:79:c5:e1:5d:e8:8f:5f:58:b5:c8:17:c0:
         e1:b7:f7:6d:46:84:98:42:00:15:5e:25:cd:66:21:d6:8d:f4:
         a8:dd:28:ad:cb:8f:07:07:50:22:6d:60:1d:b5:5d:75:c7:fe:
         3c:7d:fe:39:09:0b:5e:80:5f:0d:be:1b:eb:e8:02:65:ab:2f:
         3f:03:4a:ea:df:32:b2:40:87:8d:f1:7c:2b:59:13:49:b1:2e:
         4d:b9:21:fa:5a:2e:b8:6e:56:1d:ce:7b:43:1a:20:9a:06:12:
         12:70:62:89:63:70:71:e7:27:e3:d6:f1:a5:b3:7c:a4:4e:0f:
         28:e7:d3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:42:04 2025 by rpki-client