Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
File:                     SMOd4l_6fq8CsqbYws9uLOtWK_M.mft (raw, json)
Hash identifier:          7gIX1z9LxMOJyC3TI+0+LqjQDyawyMhRSB0kLFoIsgY=
Subject key identifier:   36:E8:CC:6E:AF:A1:C7:6B:BC:D1:19:A3:99:91:05:03:17:AC:77:93
Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
Certificate issuer:       /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Certificate serial:       01977263FEBDDECCA91F28F18441D44511D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
Manifest number:          11EE
Signing time:             Sun 15 Jun 2025 07:00:45 +0000
Manifest this update:     Sun 15 Jun 2025 07:00:45 +0000
Manifest next update:     Mon 16 Jun 2025 07:00:45 +0000
Files and hashes:         1: JtwVZJ2q-er-ZyfG4We1Ih9BT0U.roa (hash: xnd0jnisgvFr2C1BnV+wtzkH+5RWNTZh9FBZUZ5Hu3E=)
                          2: SMOd4l_6fq8CsqbYws9uLOtWK_M.crl (hash: 11roDbgAzAXauWQ6HJc7K4QP+WN4SvA9hG2zSJbDj7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:63:fe:bd:de:cc:a9:1f:28:f1:84:41:d4:45:11:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
        Validity
            Not Before: Jun 15 07:00:45 2025 GMT
            Not After : Jun 16 07:00:45 2025 GMT
        Subject: CN=36e8cc6eafa1c76bbcd119a39991050317ac7793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3e:24:8e:1b:5f:56:15:23:17:c8:02:b2:72:
                    3b:16:16:50:f1:7b:3a:d9:e3:7c:6a:e3:24:9e:92:
                    12:e3:91:f0:03:08:7c:ef:d4:1d:a3:5a:ad:8d:d7:
                    94:b1:62:a0:25:e4:21:66:01:ec:76:d3:75:40:8b:
                    65:8c:48:67:ae:5e:0b:96:e2:f1:c7:9d:eb:be:c1:
                    24:e5:fc:0d:1f:7c:70:38:dc:44:ba:3c:99:a7:c2:
                    59:a3:a6:70:e5:46:a0:5c:d9:f5:28:a6:2d:fe:8f:
                    4e:9d:eb:c2:64:ea:9d:8d:70:ec:b2:62:ce:d4:59:
                    67:26:5c:94:18:ae:fb:fa:a0:0f:3f:dd:f6:c9:ef:
                    de:4f:28:92:a5:a0:cd:d7:18:3a:f2:1d:ec:a0:8e:
                    53:11:3c:26:3a:f4:97:b1:8a:76:90:c4:a3:f2:e3:
                    f6:e0:f8:9c:34:05:42:2c:01:4a:28:b2:4a:c6:e6:
                    d0:5b:57:57:b2:b7:e6:ff:6b:ce:1a:97:30:f3:a1:
                    35:20:eb:5f:67:fa:81:c2:22:37:a8:9f:34:6e:26:
                    f9:e9:53:30:d0:65:dc:8e:fb:18:f1:9c:0c:1c:c7:
                    97:c5:e9:05:16:cc:03:10:a6:85:11:02:ea:08:32:
                    2e:b0:0b:5b:8f:80:b8:0a:6d:c8:96:46:af:bb:2b:
                    a6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E8:CC:6E:AF:A1:C7:6B:BC:D1:19:A3:99:91:05:03:17:AC:77:93
            X509v3 Authority Key Identifier:
                keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e1:21:5f:e1:5c:fd:09:e9:ce:5c:60:c0:bf:c0:7b:ef:47:
         83:e5:4e:2e:4f:f4:fd:64:d9:75:a6:57:31:a0:6b:78:23:23:
         7a:25:7a:e3:ff:43:57:8a:dc:4c:ee:c1:11:c5:1c:3b:8c:d5:
         0e:1f:ab:c0:2f:17:6b:68:0b:3e:bb:5f:32:82:8b:af:93:2f:
         ea:a4:16:7e:67:48:86:31:2f:14:8b:97:41:28:ea:64:ef:5d:
         8d:32:19:d2:fc:bf:1a:78:98:d1:75:a5:32:68:2a:df:4d:f0:
         f1:1e:b6:75:bf:88:c3:5b:e3:f5:0e:af:a0:65:26:f3:58:16:
         13:74:fa:da:1a:29:2d:cc:d3:b2:19:63:da:64:5f:2c:1f:6a:
         94:39:5f:19:97:6d:3c:02:35:c0:2b:9d:58:0e:60:2f:76:86:
         f7:fc:cd:66:bd:b9:7b:cd:be:c6:1a:d8:87:c0:e6:78:4a:d3:
         0c:bd:56:69:e2:d4:7f:96:56:b4:19:fc:0a:1b:9a:76:62:10:
         26:63:f2:81:36:30:d0:2c:54:40:8b:6f:85:be:66:bf:2a:75:
         90:3f:6d:68:ba:61:42:fe:c7:d7:eb:d3:db:63:57:53:bb:78:
         b1:38:5f:57:ba:ce:a9:57:bd:8a:73:cf:5d:ae:aa:13:e3:23:
         db:f8:20:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyY/693sypHyjxhEHURRHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YzM5ZGUyNWZmYTdlYWYwMmIyYTZkOGMyY2Y2ZTJjZWI1
NjJiZjMwHhcNMjUwNjE1MDcwMDQ1WhcNMjUwNjE2MDcwMDQ1WjAzMTEwLwYDVQQD
EygzNmU4Y2M2ZWFmYTFjNzZiYmNkMTE5YTM5OTkxMDUwMzE3YWM3NzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T4kjhtfVhUjF8gCsnI7FhZQ8Xs6
2eN8auMknpIS45HwAwh879Qdo1qtjdeUsWKgJeQhZgHsdtN1QItljEhnrl4LluLx
x53rvsEk5fwNH3xwONxEujyZp8JZo6Zw5UagXNn1KKYt/o9OnevCZOqdjXDssmLO
1FlnJlyUGK77+qAPP932ye/eTyiSpaDN1xg68h3soI5TETwmOvSXsYp2kMSj8uP2
4PicNAVCLAFKKLJKxubQW1dXsrfm/2vOGpcw86E1IOtfZ/qBwiI3qJ80bib56VMw
0GXcjvsY8ZwMHMeXxekFFswDEKaFEQLqCDIusAtbj4C4Cm3IlkavuyumnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbozG6vocdrvNEZo5mRBQMXrHeTMB8GA1UdIwQY
MBaAFEjDneJf+n6vArKm2MLPbizrVivzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YmNiYWYtNDk5My00ZDA4LWI5YTgt
MDM1NWVmMTE1ODljLzEvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85YmNiYWYtNDk5My00ZDA4LWI5YTgtMDM1NWVmMTE1ODlj
LzEvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+EhX+Fc
/QnpzlxgwL/Ae+9Hg+VOLk/0/WTZdaZXMaBreCMjeiV64/9DV4rcTO7BEcUcO4zV
Dh+rwC8Xa2gLPrtfMoKLr5Mv6qQWfmdIhjEvFIuXQSjqZO9djTIZ0vy/GniY0XWl
Mmgq303w8R62db+Iw1vj9Q6voGUm81gWE3T62hopLczTshlj2mRfLB9qlDlfGZdt
PAI1wCudWA5gL3aG9/zNZr25e82+xhrYh8DmeErTDL1WaeLUf5ZWtBn8ChuadmIQ
JmPygTYw0CxUQItvhb5mvyp1kD9taLphQv7H1+vT22NXU7t4sThfV7rOqVe9inPP
Xa6qE+Mj2/ggqw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:41:21 2025 by rpki-client