Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File:                     SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier:          XjIWpI6e53zJBYH2eEk7E2Ul2jjpjmcBT6p0nSu4jIM=
Subject key identifier:   FD:3D:8E:E8:D2:A7:30:2B:D7:1A:D4:DD:91:20:D0:06:A3:93:2A:65
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer:       /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial:       0199FC58A74458A7AAD3BAABAF82868A8426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number:          07CC
Signing time:             Sun 19 Oct 2025 12:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:32 +0000
Files and hashes:         1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: AzKk2s7A+akiJb4Xmuc4PP+nbujwmwxZuDyc8XqqNeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:a7:44:58:a7:aa:d3:ba:ab:af:82:86:8a:84:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
        Validity
            Not Before: Oct 19 12:01:32 2025 GMT
            Not After : Oct 20 12:01:32 2025 GMT
        Subject: CN=fd3d8ee8d2a7302bd71ad4dd9120d006a3932a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:97:f5:d8:da:0c:62:05:e8:f3:eb:15:06:0c:
                    9c:88:35:25:c8:9d:ba:85:0b:f8:43:e4:e7:a7:69:
                    3d:43:57:1a:20:e6:ba:59:9e:c7:f8:db:7e:c7:f6:
                    21:f6:f2:6c:15:d4:8a:9e:3f:64:b3:cf:b7:f8:62:
                    f4:3c:db:29:92:a3:e7:4b:94:72:4b:dc:1f:81:25:
                    3b:5e:3b:a2:7e:dc:48:46:c5:9a:ca:1d:50:93:97:
                    b1:59:e4:4a:99:8f:3d:22:aa:f1:77:39:64:8b:fc:
                    6f:b4:3c:62:63:fd:33:13:6b:1c:09:fb:a4:5f:61:
                    58:1a:57:1f:b9:57:be:d1:c4:16:00:04:92:7f:9d:
                    36:25:5b:77:55:8a:3b:c5:1f:c9:07:02:47:b0:64:
                    91:bb:84:74:4e:68:43:a3:86:93:0a:57:bc:eb:6b:
                    7f:ec:ed:08:8b:08:b1:a8:51:4e:62:bf:fa:14:04:
                    f7:42:a2:4d:2a:c1:e0:e7:75:2a:89:d5:fb:3e:b1:
                    cd:45:20:ef:a4:1c:14:04:14:8d:24:61:8c:31:bd:
                    72:eb:88:07:39:26:75:e3:2a:f6:df:10:a0:21:1e:
                    c4:05:a1:c7:05:db:cc:2f:30:ad:e0:66:5d:ad:5b:
                    35:7c:0a:8c:5b:ef:f2:aa:47:f9:42:4b:92:9c:81:
                    f6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3D:8E:E8:D2:A7:30:2B:D7:1A:D4:DD:91:20:D0:06:A3:93:2A:65
            X509v3 Authority Key Identifier:
                keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b1:d9:5e:66:44:f0:a6:f2:65:b4:bf:1d:53:e3:05:b2:f3:
         eb:e0:a8:61:33:6f:74:4e:7e:e0:da:ff:40:19:da:10:af:ba:
         30:09:d1:3f:90:e5:83:25:1e:0f:43:54:be:2b:f4:e3:d4:55:
         3f:dc:2c:aa:b0:7d:5b:47:0c:40:d1:76:5c:18:7f:b4:8a:3f:
         56:75:e2:bd:ec:bd:50:fc:ba:8e:26:8e:6d:17:0e:6e:f1:88:
         e0:ac:8a:fe:d5:55:1b:51:ec:b5:9d:2e:b9:f3:a6:92:7d:85:
         01:5c:d3:01:4f:eb:c5:16:76:a9:15:69:96:46:70:b7:18:99:
         b9:83:26:9c:7f:03:82:09:f5:15:f6:dd:c7:f0:54:10:c3:cf:
         5a:a2:9c:b7:17:86:c3:bf:84:46:c5:bf:a3:a4:a4:6e:6d:1f:
         f5:3b:d2:8a:fc:1a:99:da:70:58:00:d6:ec:4c:b4:59:52:c8:
         de:54:1c:26:0b:4f:d0:9a:e0:9c:c5:12:54:b2:24:e4:12:94:
         3b:6c:56:a3:30:08:b3:fe:32:74:a0:40:37:d4:5c:9c:62:ef:
         6f:31:c5:22:5b:40:6f:62:a0:ab:ed:b6:f4:fe:5e:0d:f0:50:
         09:52:53:a7:1e:30:55:ee:60:8c:9d:7c:c6:ed:59:ce:70:c5:
         a3:9b:11:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:00 2025 by rpki-client