Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
File:                     SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft (raw, json)
Hash identifier:          TVs3//iqg8jyOAwJlEXtTIEgmUKPYeX9LejGBMvl43w=
Subject key identifier:   96:95:C4:48:19:A9:DA:13:21:6F:34:48:92:7E:F4:7D:44:9C:C2:57
Authority key identifier: 49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7
Certificate issuer:       /CN=492999fd50a69fd0412065490f5acc75a159deb7
Certificate serial:       0198752C38FC9F72C492E65A855FAC117CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
Manifest number:          1572
Signing time:             Mon 04 Aug 2025 13:01:28 +0000
Manifest this update:     Mon 04 Aug 2025 13:01:28 +0000
Manifest next update:     Tue 05 Aug 2025 13:01:28 +0000
Files and hashes:         1: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl (hash: TgxaUdi6X8+fTKnL0DhFO8otdbNW1rPpfiGs77a2A7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2c:38:fc:9f:72:c4:92:e6:5a:85:5f:ac:11:7c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492999fd50a69fd0412065490f5acc75a159deb7
        Validity
            Not Before: Aug  4 13:01:28 2025 GMT
            Not After : Aug  5 13:01:28 2025 GMT
        Subject: CN=9695c44819a9da13216f3448927ef47d449cc257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:8b:ed:ce:25:22:4d:f9:32:ab:09:80:a9:
                    6a:c8:9a:a4:3d:ff:0c:10:fb:8c:69:d6:5a:02:d6:
                    c4:41:04:c7:ad:79:de:3d:09:34:6e:74:09:b3:d7:
                    c6:72:60:fc:4a:64:f6:9f:90:0a:cd:f0:59:04:50:
                    10:03:2a:7a:08:f0:51:3b:63:8a:8c:fb:8b:bc:40:
                    ad:33:ab:c3:db:d0:34:2a:a6:f8:e5:a6:71:c3:95:
                    52:33:b7:9d:94:98:a8:71:30:29:81:a4:00:75:bd:
                    8c:37:b4:7b:59:0c:ee:0e:e7:64:e6:b0:e4:09:da:
                    13:64:31:7b:9a:27:03:11:5a:7b:8f:9c:fa:97:65:
                    b4:65:3b:c3:f4:56:af:91:05:8a:9b:e3:74:3d:13:
                    dd:b5:21:e5:17:b7:e8:fa:c7:83:66:40:99:ce:a8:
                    45:99:1b:93:49:ad:9d:f9:45:45:5e:81:ff:7c:91:
                    a3:21:41:03:06:93:12:87:64:65:18:70:e4:91:ab:
                    e6:50:d9:73:f7:5f:01:fc:32:fc:95:ed:c3:9c:9b:
                    d2:ed:15:11:90:0e:d9:d9:5b:64:5e:ed:cb:b3:21:
                    f6:2a:04:05:81:c5:e9:34:4b:15:fe:31:19:26:53:
                    0b:8a:1d:cc:0e:f7:16:17:40:bb:75:ce:24:0c:91:
                    d7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:95:C4:48:19:A9:DA:13:21:6F:34:48:92:7E:F4:7D:44:9C:C2:57
            X509v3 Authority Key Identifier:
                keyid:49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:97:14:7c:b1:c0:a4:53:a6:8f:5f:e0:fb:58:a5:df:ca:1d:
         79:5d:a5:a9:64:98:64:9e:28:65:6b:4e:14:41:e7:31:23:de:
         d9:53:35:00:f5:de:2e:cb:a5:8e:7a:d2:a5:46:61:83:b0:41:
         c0:86:71:88:1d:c4:9f:24:8a:02:45:9e:a2:49:00:f2:64:25:
         c2:1d:99:69:98:f8:53:d8:3b:cd:fb:cf:f0:68:3e:7c:63:3a:
         89:2f:fe:63:78:f5:b9:a6:b0:09:52:76:06:e0:94:1f:15:00:
         47:60:52:3a:47:1c:c2:30:23:05:3e:0f:15:aa:35:eb:f3:5b:
         32:41:50:39:12:10:d5:85:fe:67:df:46:df:e8:93:2b:8b:c8:
         2d:5f:30:62:20:a5:85:92:be:b0:74:c5:c1:34:bc:3a:5e:fd:
         9c:de:58:5d:41:04:1f:cc:88:c6:28:a3:2a:ba:3e:af:9f:e3:
         96:30:29:81:f1:20:27:e1:b9:1f:02:d9:87:a4:d1:95:51:eb:
         46:8e:94:d7:1f:cc:f9:52:36:b9:e9:3c:2c:c3:9d:15:47:5d:
         9d:a0:63:da:72:0c:6b:8f:bf:8c:0a:1c:2b:50:4f:d0:9e:98:
         4e:ac:b6:09:88:5f:fe:89:aa:c2:b0:84:ff:f7:a8:d7:39:0e:
         1a:40:f2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:06 2025 by rpki-client