Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
File:                     Sm8eAa8k15JJfXftH3mQrjphKQ0.mft (raw, json)
Hash identifier:          Hih2CG8UiBIBH01QGxwlQiK4n6fekyw9wOprnfiyxsI=
Subject key identifier:   82:A3:E4:38:60:3D:64:AE:31:73:E6:DD:12:40:CB:CF:AA:6E:C2:DA
Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
Certificate issuer:       /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Certificate serial:       01987E65C96D979CAEA3E8AF7B9198B70600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
Manifest number:          161F
Signing time:             Wed 06 Aug 2025 08:00:56 +0000
Manifest this update:     Wed 06 Aug 2025 08:00:56 +0000
Manifest next update:     Thu 07 Aug 2025 08:00:56 +0000
Files and hashes:         1: Sm8eAa8k15JJfXftH3mQrjphKQ0.crl (hash: iUKWcLO7nv78+i4QUl7BXLZllHgK0ePCnaaM3mjvX3U=)
                          2: ukp1qSkbacWgh99iGDLbhVTGpfE.roa (hash: VZyI94Eyjd6/U3vi8uEiKE4SlR4D8n4H4v7qeg38d2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:65:c9:6d:97:9c:ae:a3:e8:af:7b:91:98:b7:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
        Validity
            Not Before: Aug  6 08:00:56 2025 GMT
            Not After : Aug  7 08:00:56 2025 GMT
        Subject: CN=82a3e438603d64ae3173e6dd1240cbcfaa6ec2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:37:fc:6d:34:f7:c5:3b:c3:49:53:72:f2:
                    ec:35:23:4b:18:d0:a8:30:36:42:77:dd:99:5b:22:
                    76:66:86:be:31:bf:93:2e:53:66:4d:b7:28:c3:95:
                    66:cb:bf:40:d3:12:e3:7f:48:95:44:45:92:0b:47:
                    c5:43:bd:8a:26:23:ad:79:d3:1d:6d:ff:ae:e1:57:
                    f1:b5:ab:2a:35:68:13:03:62:1e:e9:50:4b:f2:31:
                    7e:dd:b7:80:7a:0d:a3:ca:ad:d1:27:5c:da:6a:0b:
                    54:74:be:77:7d:83:20:36:21:44:2e:ac:98:5c:9f:
                    1d:bc:e1:e4:2b:42:ec:e0:1b:f5:99:b3:11:fd:a6:
                    e0:8d:b1:cc:c7:ea:ff:69:89:0c:c2:45:0a:4b:41:
                    cc:8c:11:6c:b9:5a:60:8f:2d:00:45:8a:e3:88:c0:
                    57:3e:75:2f:a7:2f:5c:99:01:b4:e0:ed:69:19:4b:
                    04:6e:18:59:dd:7c:46:f0:8c:26:92:35:e5:44:30:
                    fd:88:c0:89:c3:a4:22:61:e9:e7:6d:4f:db:c1:5c:
                    5e:03:1f:2c:91:ad:a9:18:2d:e3:25:fb:6f:a1:2d:
                    a8:1d:0f:82:f6:26:f9:d4:e8:3d:19:9e:e7:36:46:
                    63:0b:6b:57:f8:31:1f:46:51:23:16:30:db:20:80:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A3:E4:38:60:3D:64:AE:31:73:E6:DD:12:40:CB:CF:AA:6E:C2:DA
            X509v3 Authority Key Identifier:
                keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:78:5f:82:02:e3:2a:fe:58:41:93:f5:f2:c7:11:84:24:d0:
         27:71:f4:7a:7b:cb:88:a6:97:23:1e:d2:5d:a8:a9:3e:aa:db:
         98:2c:e4:4f:c0:8b:23:83:b1:6f:e0:b1:f3:d7:6c:a4:97:54:
         2b:80:3e:df:25:a4:bd:54:09:b2:77:38:7d:0e:ca:57:87:c3:
         68:70:ec:9d:90:e9:6c:18:06:03:b5:6d:6f:2f:1b:0d:04:2d:
         8c:6f:47:90:38:96:e5:e3:ee:08:de:64:d2:ed:b1:fc:0f:2f:
         ed:ef:56:b5:fb:e3:89:02:a7:b3:bc:96:62:26:07:80:31:93:
         80:9a:0e:34:8c:59:fd:b1:09:56:b3:bb:3d:0a:87:fe:75:7b:
         59:15:e5:9e:a9:b4:5b:35:74:6d:65:7c:10:8c:74:f7:0d:5c:
         fa:4a:52:98:28:38:56:24:7e:7a:fb:2c:4b:b1:f1:26:72:b9:
         59:e3:8c:35:9c:0e:b1:33:35:9c:f7:9f:f9:e1:ec:b8:f8:99:
         05:b1:ec:0a:a7:32:84:26:d1:03:1d:17:6f:12:db:4b:c2:58:
         13:73:79:d5:e0:ad:45:44:d5:bb:da:85:c3:44:8b:c4:41:1c:
         3e:fa:e6:f3:6e:b0:45:2c:8c:a4:1a:91:bc:df:5b:b0:67:05:
         ce:24:80:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:30:07 2025 by rpki-client