Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
File:                     SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft (raw, json)
Hash identifier:          61Fs2DtgzH7IpaLaoAlHwFm4Cdslt33gnDP64qy+T24=
Subject key identifier:   F6:5E:BF:08:60:FD:59:77:4E:B2:E8:21:0C:E2:84:B2:02:63:10:79
Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
Certificate issuer:       /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Certificate serial:       0196DAE6B98A539ACF1790CDDA9AF592E0D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
Manifest number:          0A06
Signing time:             Fri 16 May 2025 21:01:15 +0000
Manifest this update:     Fri 16 May 2025 21:01:15 +0000
Manifest next update:     Sat 17 May 2025 21:01:15 +0000
Files and hashes:         1: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl (hash: NHfUvSpuVzpk0O27y9uASzopw7hqdsaiDb371pEUYSA=)
                          2: XWgrA6JE6hMs-fYR5JSr732MBIw.roa (hash: +T0dpzBRYum3dH9uf73tvrJYycbYVgdyC2zBV2vtA1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:da:e6:b9:8a:53:9a:cf:17:90:cd:da:9a:f5:92:e0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
        Validity
            Not Before: May 16 21:01:15 2025 GMT
            Not After : May 17 21:01:15 2025 GMT
        Subject: CN=f65ebf0860fd59774eb2e8210ce284b202631079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:be:d4:db:7b:ee:b0:52:76:8c:82:24:5c:f5:
                    4b:af:c3:5b:2c:c0:1b:9e:8c:1c:de:14:5a:c6:ce:
                    fb:0b:82:fc:c9:ae:33:7c:ff:01:08:2f:d6:12:0a:
                    9b:38:aa:45:76:5e:87:8a:a1:05:af:c2:0f:46:46:
                    27:cc:42:59:4f:a3:34:45:f6:91:e4:d7:69:89:89:
                    cd:13:83:b7:6c:f3:f7:b1:41:05:23:6c:4c:5b:22:
                    97:65:c6:ae:a4:ae:b2:8c:ce:a0:6e:2b:5c:88:f3:
                    8e:a1:60:6d:38:3f:ee:da:f5:cc:d8:5a:49:ac:70:
                    30:e8:e7:cf:38:32:96:56:14:f2:b0:de:e0:db:e2:
                    ae:4c:e1:a6:76:ea:c3:f8:b0:89:71:39:4b:2b:19:
                    c4:9b:8b:ec:f6:bc:79:25:d2:27:45:86:66:3d:b5:
                    fd:0b:82:07:99:df:f2:a0:43:65:39:1e:5f:d3:bb:
                    9e:89:63:c5:d3:e8:3b:39:7c:95:1e:4a:83:4d:17:
                    b0:d0:03:9d:9e:89:da:cd:4a:dc:33:65:fa:d0:3f:
                    9e:90:ae:b2:c8:bf:92:4f:de:86:48:ac:5e:cc:89:
                    76:29:f4:3a:d8:80:20:f0:6f:f2:12:a6:96:00:c7:
                    b3:93:b5:dd:3e:e8:2a:72:a7:89:ae:01:c7:d1:3f:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5E:BF:08:60:FD:59:77:4E:B2:E8:21:0C:E2:84:B2:02:63:10:79
            X509v3 Authority Key Identifier:
                keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:09:19:ad:d2:62:df:d8:15:b0:3c:e9:6d:26:d8:bd:03:cd:
         7d:60:a1:2f:1b:63:f4:f7:33:74:d9:65:09:1d:a7:71:a8:9e:
         46:a8:6e:e3:74:63:54:57:46:67:26:52:70:41:0f:5b:52:84:
         26:f8:c3:c4:47:a7:8d:6e:d5:b1:b6:8e:16:d1:4e:b9:80:b6:
         5c:7a:7e:46:0c:97:4a:13:2f:19:ab:7b:b8:c7:b4:0b:7b:9c:
         7a:aa:87:f2:43:3c:69:a3:de:b8:ab:37:51:0d:4a:23:6e:b8:
         c9:0c:08:04:ce:40:f8:b6:f2:0c:1a:6c:5f:8f:13:c7:ae:f3:
         63:ff:e1:7a:a6:ca:a6:f5:96:5c:c8:d6:16:42:47:f7:5b:07:
         e4:89:0c:4c:98:23:1c:0e:4c:2d:c7:71:3f:7a:b6:69:e0:47:
         da:fc:16:01:4e:34:81:59:03:92:31:a8:14:18:f0:d2:8b:fe:
         59:d7:69:a8:ae:34:9b:d0:c1:f5:6f:3e:fb:0c:ed:ff:1b:eb:
         85:ca:6e:74:e5:80:93:22:9c:d1:1c:76:3e:33:dc:73:3c:b5:
         47:bd:1c:ae:f1:9b:35:60:21:c6:2e:dc:25:ed:4d:bc:8c:45:
         8a:b5:d0:d7:ed:18:e5:74:57:6b:9e:76:4b:a2:77:5f:d7:33:
         19:1c:65:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:13:21 2025 by rpki-client