Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
File:                     SMOd4l_6fq8CsqbYws9uLOtWK_M.mft (raw, json)
Hash identifier:          WMxp40HQKXrrQUwIdC8fm9Ce7Cjl4F5qbBpIU7wZO8g=
Subject key identifier:   5E:45:86:48:B8:71:F7:FE:5A:5B:BE:2A:94:39:5E:11:F6:C2:80:80
Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
Certificate issuer:       /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Certificate serial:       019880C1D80802777803A5FAF9429E1C9BCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
Manifest number:          127A
Signing time:             Wed 06 Aug 2025 19:00:44 +0000
Manifest this update:     Wed 06 Aug 2025 19:00:44 +0000
Manifest next update:     Thu 07 Aug 2025 19:00:44 +0000
Files and hashes:         1: JtwVZJ2q-er-ZyfG4We1Ih9BT0U.roa (hash: xnd0jnisgvFr2C1BnV+wtzkH+5RWNTZh9FBZUZ5Hu3E=)
                          2: SMOd4l_6fq8CsqbYws9uLOtWK_M.crl (hash: s2ugNgt022UMRMs7OvNoHHfD2jkBsF3lRCDDalsqE5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c1:d8:08:02:77:78:03:a5:fa:f9:42:9e:1c:9b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
        Validity
            Not Before: Aug  6 19:00:44 2025 GMT
            Not After : Aug  7 19:00:44 2025 GMT
        Subject: CN=5e458648b871f7fe5a5bbe2a94395e11f6c28080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:8c:5b:38:c0:17:3c:d2:d8:0d:18:09:9c:
                    45:0c:4e:4f:4f:56:56:0e:07:d8:92:cf:6e:57:67:
                    b0:f6:3d:c6:ef:82:d6:c3:f6:5f:a4:6c:5e:93:c2:
                    ae:71:d7:64:ea:c3:d5:9a:26:94:7b:1a:37:26:e6:
                    62:7f:22:b7:5a:c9:4e:c3:86:f2:01:e4:0d:ce:1c:
                    fd:86:65:e7:82:6f:82:a4:7e:ff:1e:c8:c5:ba:24:
                    15:09:bd:69:1b:64:b7:8d:d3:ed:1e:8e:ec:18:10:
                    22:5f:17:8f:4f:53:ae:a2:92:0f:64:8d:b1:ae:cc:
                    ce:52:e6:5d:40:c6:31:13:70:0e:17:dc:bb:71:a6:
                    86:8e:23:ab:36:89:b7:6a:95:ab:0e:34:d3:67:67:
                    79:ab:c7:bf:38:04:58:f7:78:1b:d3:32:ea:df:c6:
                    72:21:35:4d:d3:df:aa:f0:54:5a:f7:d7:a0:ec:98:
                    03:66:b5:fb:cb:dc:33:0e:77:d2:9f:bb:90:0c:70:
                    81:7d:0e:0a:7c:f8:5f:97:b0:f4:5a:40:2d:29:4f:
                    9c:e9:02:f3:f6:ab:f2:1d:a1:4c:85:7d:a5:ec:d9:
                    6b:1e:3c:91:b2:af:74:3c:d0:d9:d2:a7:bb:a0:0c:
                    cd:f6:7a:59:75:c5:55:5f:e8:50:d9:a3:72:63:fa:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:45:86:48:B8:71:F7:FE:5A:5B:BE:2A:94:39:5E:11:F6:C2:80:80
            X509v3 Authority Key Identifier:
                keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:41:9e:60:53:24:15:be:f7:1a:01:00:af:48:e7:7f:44:c5:
         7c:6a:0c:15:c9:5c:85:d1:17:f9:52:67:f4:2c:21:09:ee:8a:
         1b:84:1f:84:0b:b4:89:fc:f6:51:dd:79:f5:e1:c2:01:16:ee:
         5c:7f:6b:bb:ac:90:73:af:dc:5f:e0:3a:d3:55:40:4b:03:06:
         c5:4e:09:4f:87:a7:0a:96:d4:5e:3a:3a:c4:de:ce:61:81:e7:
         bd:cd:0a:0b:23:ab:99:0b:f8:40:d5:b4:1d:90:f6:00:e6:ae:
         eb:76:02:07:cb:a2:29:91:d5:1b:cc:13:3f:4f:50:c3:5c:91:
         94:ba:31:cc:67:0b:4c:66:cd:be:74:ca:6c:34:01:c8:56:09:
         9c:94:8f:98:e2:fa:2c:c3:37:ca:66:54:02:81:a9:22:ad:5b:
         cc:89:45:5b:36:42:e9:f6:03:6a:d7:c1:8d:2f:2c:79:9d:b2:
         44:55:5c:c6:c1:ac:82:96:72:ea:8d:9e:cb:27:ba:8e:b3:e7:
         f9:8f:0d:88:ea:c3:02:7b:36:34:1f:49:5a:36:d2:bf:64:f4:
         16:e0:3a:c6:d8:0b:41:90:f5:bc:fc:f8:50:22:00:5e:b8:34:
         89:46:fd:8f:e1:98:30:50:3c:f8:ac:f0:af:91:36:42:c3:e1:
         84:80:78:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:24 2025 by rpki-client