Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File:                     saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier:          EdBnjYCgYQxnAAogg4hDrwkw9sJ7qfmlhwErd8T4+T8=
Subject key identifier:   56:67:D6:52:AA:E6:4F:F5:08:1C:2A:5F:25:38:B4:51:51:8D:9F:8B
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer:       /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial:       01976D7436D0EDF88DAE953D00EFCA0B597D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number:          159C
Signing time:             Sat 14 Jun 2025 08:00:22 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:22 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:22 +0000
Files and hashes:         1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=)
                          2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
                          3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
                          4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: V9KV3YhlAVo/jZ7sfVhpTGEnCUHoiMeoYGSqt/Bpiok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:36:d0:ed:f8:8d:ae:95:3d:00:ef:ca:0b:59:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
        Validity
            Not Before: Jun 14 08:00:22 2025 GMT
            Not After : Jun 15 08:00:22 2025 GMT
        Subject: CN=5667d652aae64ff5081c2a5f2538b451518d9f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:50:87:3f:ce:63:9f:f7:d3:a3:04:f9:f0:
                    da:ab:01:60:e7:72:23:92:65:fa:21:6f:e3:84:75:
                    8d:d5:23:46:f2:4a:eb:3c:46:e1:4e:a0:84:91:f6:
                    5a:31:7b:a5:2a:4e:60:01:0e:f6:7d:bf:ab:8a:72:
                    40:0d:d2:61:1a:25:04:62:d7:a1:07:03:83:54:e5:
                    78:4c:0a:c4:6e:c2:5e:c4:1c:2e:bc:f4:aa:7c:5a:
                    74:1d:e0:8c:4e:54:3f:a9:0b:aa:e5:fb:e8:94:68:
                    76:ab:54:16:9f:94:11:65:81:6c:71:af:69:30:07:
                    84:27:89:7f:ba:e5:7d:fe:8e:24:6c:46:ba:3d:5c:
                    59:74:34:b2:b8:45:cb:aa:10:74:b2:fc:44:92:37:
                    b4:bf:81:3c:4c:30:ae:29:28:5d:68:5b:38:64:c5:
                    2d:be:87:75:35:57:63:99:0c:ad:d2:16:61:6c:92:
                    e0:19:70:2d:50:e0:f1:92:5d:cf:28:0e:50:07:d3:
                    75:60:1d:79:8c:58:d5:c0:9c:58:91:9d:cf:96:b2:
                    7f:f1:0b:bb:0c:54:0c:50:89:0c:21:bb:7c:1a:c8:
                    57:e2:db:1b:21:ec:4f:53:a8:c2:2d:c8:43:13:cf:
                    6d:ca:aa:6d:15:f9:bc:0f:8e:6b:78:80:72:f4:43:
                    b1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:67:D6:52:AA:E6:4F:F5:08:1C:2A:5F:25:38:B4:51:51:8D:9F:8B
            X509v3 Authority Key Identifier:
                keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:2f:5d:3e:45:02:00:54:dc:0b:3e:91:04:e7:8f:41:a3:bd:
         e0:92:11:64:9c:7a:fc:54:0f:92:0e:15:8f:42:fa:00:6c:9f:
         20:b1:ae:b4:c7:35:85:04:c6:69:df:fa:b9:a8:47:fd:93:da:
         57:8e:f0:6b:e5:dd:c8:5e:d3:a4:d5:30:3c:32:de:b9:0d:25:
         1c:34:71:2f:2e:87:10:89:ca:ee:38:b6:44:b0:05:e5:64:df:
         5b:5f:19:2d:45:fc:26:17:34:80:c8:9e:8e:4d:97:06:ed:5c:
         ab:c8:05:b6:10:e9:46:ab:13:a5:0c:de:77:ea:a7:3e:3e:fe:
         0e:88:6b:75:3a:1d:b1:1a:66:36:f2:ed:1b:99:7b:0d:13:7c:
         bc:5f:15:d4:c0:83:e3:2c:fe:6a:f9:78:91:ee:93:11:a3:85:
         b5:9f:1d:d0:5d:df:d5:b4:8c:3c:fc:94:e5:eb:ae:3f:85:7d:
         b2:8f:b7:25:fe:1d:c2:29:e0:1b:92:87:0d:1f:a9:c5:86:e6:
         18:2a:53:74:d9:ca:74:cd:3c:d8:20:88:bc:3a:c9:a0:87:05:
         50:74:7b:d3:10:08:41:cb:17:9d:b6:ba:44:ae:ef:ad:0a:6d:
         a9:6e:e5:8e:fa:0e:3e:fa:09:19:76:03:40:5b:0c:20:44:cb:
         bf:f6:6b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:21:59 2025 by rpki-client