Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File:                     SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier:          4/8unVa9dSVhvVyl29E2JQXU1xDUyfzSxcEDgDXMbEQ=
Subject key identifier:   EB:4E:98:B9:A5:21:F3:78:F5:2A:43:03:8A:3C:FF:CD:CA:56:90:2E
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer:       /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial:       0199FB0F0AB2C49FAF54BD9B249C175DA2A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 06:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:30 +0000
Files and hashes:         1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: qqC/mT484Ogkdu6rARGi2vGlEgvOP1yvWTYtK6c9geI=)
                          2: ZCwrk3DUvn-uZjo3WgvhoOWpHv0.roa (hash: AtdbQHHLI0H407seskZvbBq2HBK/6vTqf2YFUILBHxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:0a:b2:c4:9f:af:54:bd:9b:24:9c:17:5d:a2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
        Validity
            Not Before: Oct 19 06:01:30 2025 GMT
            Not After : Oct 20 06:01:30 2025 GMT
        Subject: CN=eb4e98b9a521f378f52a43038a3cffcdca56902e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:06:e6:93:8b:f9:f1:b9:45:f1:2f:89:c9:
                    aa:a8:c0:41:f0:04:03:5e:3e:74:28:a8:80:09:60:
                    44:24:34:4b:53:eb:2f:79:e2:62:26:4c:78:bf:79:
                    53:7c:6d:d0:61:fe:6f:b9:45:45:13:ec:88:9a:39:
                    bf:62:af:f8:ac:b1:92:e6:3a:da:72:56:86:07:0a:
                    99:f2:c3:a5:8e:53:75:bb:d9:f4:88:76:de:f2:aa:
                    b2:b9:31:a5:d4:82:9f:13:64:74:36:28:f8:90:69:
                    45:56:4c:d2:29:da:9d:20:75:dd:31:07:9b:61:22:
                    2a:05:c4:38:8d:45:b1:74:1d:eb:5f:fa:96:e7:79:
                    9e:6a:6b:47:df:3d:4e:b9:ea:ec:79:5a:f1:e0:9c:
                    8d:1d:56:86:d8:87:01:43:ef:1c:e5:b4:de:3e:58:
                    1c:22:9d:cb:eb:7b:12:83:db:a6:3e:2e:08:fd:95:
                    09:97:ea:ed:4b:15:a0:e7:2d:8e:3d:50:16:08:90:
                    ed:8e:59:69:ee:34:6e:b4:42:dd:42:27:ed:46:a0:
                    71:e9:f6:15:86:84:58:2f:da:82:65:99:75:18:3b:
                    a3:d0:7e:5b:d8:86:54:73:46:7f:c8:94:03:0a:bc:
                    a0:ae:45:c6:c9:01:5a:24:46:6d:84:6f:74:a9:16:
                    f0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4E:98:B9:A5:21:F3:78:F5:2A:43:03:8A:3C:FF:CD:CA:56:90:2E
            X509v3 Authority Key Identifier:
                keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:01:48:46:ea:4e:5d:8e:d3:bb:88:6d:ae:e6:9a:2c:18:7d:
         d4:ec:a9:8d:77:b9:20:73:eb:24:9b:7b:03:f6:43:79:d6:26:
         0e:9f:30:92:12:ba:35:f5:c5:54:64:55:99:c5:06:32:a1:1b:
         67:da:51:50:41:91:fa:2a:a3:b0:dc:50:33:d1:7d:a7:b5:73:
         65:d8:13:4b:85:a1:a7:fc:bf:2a:4e:34:29:a2:15:09:ba:8f:
         68:68:e1:1b:7b:a9:95:0a:0e:0c:ed:8e:bf:89:1b:0a:70:0a:
         a3:b0:0d:12:f6:71:a9:54:e5:11:19:27:c1:d9:ae:b0:25:4f:
         82:1e:24:dd:2c:55:cf:af:91:d5:e7:3d:db:16:0d:94:13:70:
         c5:21:e2:a4:9c:ad:f0:4e:31:e0:5b:ce:47:51:7a:48:7c:7b:
         cf:c2:06:8b:ab:29:32:96:cc:91:98:f1:70:12:a2:70:15:09:
         cb:a8:67:20:8e:0e:fd:38:d0:d3:6d:d2:b1:a3:81:be:56:7b:
         2f:40:93:30:be:be:11:21:73:91:96:95:e3:c8:ee:76:ff:06:
         27:81:ea:d0:cb:f4:54:41:1f:14:d7:61:06:2b:14:df:ce:2d:
         d4:5b:c0:28:69:fb:db:8f:79:89:8e:00:86:1f:41:cb:53:d3:
         40:ce:a9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:11 2025 by rpki-client