Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
File:                     smK_Id5ROFhZQWxMYIAB4gJaXSU.mft (raw, json)
Hash identifier:          nikZZn0QEPWHm4eULU96GB6Z3hn7C546g08VeBXTWFg=
Subject key identifier:   AB:49:65:74:DB:A2:CD:50:BB:A9:42:34:0B:A7:B3:68:2E:66:D7:56
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Certificate issuer:       /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial:       0197B7EA744890ACB5F0FE47A87E297D96D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
Manifest number:          0E3D
Signing time:             Sat 28 Jun 2025 19:01:25 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:25 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:25 +0000
Files and hashes:         1: 70DfSihtLn-MMeYnWYv7ZjpjEgM.roa (hash: u78wuaLSg6GaDt+rxcnVBh35CQfMs4UrEtrKVLvgnzw=)
                          2: HxSDF3RSnEvi55r0ntqSFgDhGUI.roa (hash: NLofzV7uwWNcSKkUAvo8Nc2AOY4OLfgQGuve63ilrNk=)
                          3: LJDUfh2zlZ_tH_G6HCU58zg5f4I.roa (hash: LqY6hDZmTT8yYm5vXHX0GHlSL9eE6EX8ryuyXk0I54w=)
                          4: YpkkKmboA4aHm_SpF6rE9LejCsY.roa (hash: hvX1xuiKff9tUazulkNao07mga+YtxbInH9ufQvIEJ8=)
                          5: smK_Id5ROFhZQWxMYIAB4gJaXSU.crl (hash: lRBowHpovSEs03lU8GoPjjbjNqaTHpYYZiMqrFi2sr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:74:48:90:ac:b5:f0:fe:47:a8:7e:29:7d:96:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
        Validity
            Not Before: Jun 28 19:01:25 2025 GMT
            Not After : Jun 29 19:01:25 2025 GMT
        Subject: CN=ab496574dba2cd50bba942340ba7b3682e66d756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:94:7a:f9:0c:74:00:b0:02:a7:76:b9:8b:
                    b8:3e:12:d3:f7:f8:fd:b4:31:6d:a1:2e:e1:78:0d:
                    53:cc:f0:10:85:66:3b:89:d1:65:50:6e:44:2b:33:
                    f0:b8:03:b7:7e:9b:ac:4a:50:d6:75:07:c3:d8:37:
                    b1:4f:11:b3:4a:77:1b:82:ae:f4:cc:28:9b:b4:65:
                    35:4d:e6:72:23:db:46:07:74:48:f4:78:a3:c5:8d:
                    41:8a:a6:d7:bc:d9:4e:d9:ce:6e:a1:8d:4e:93:f6:
                    04:51:44:ef:44:fe:65:7d:3f:88:88:02:34:eb:66:
                    51:70:34:5a:ae:5c:f1:1e:a3:c7:ea:a2:9d:28:04:
                    50:28:64:41:01:a0:f9:84:3c:de:87:76:43:89:0f:
                    94:96:9e:87:c7:4d:a5:f2:28:e6:b7:ed:3b:db:5f:
                    21:d3:7c:b8:94:2e:7b:04:4c:fd:f4:68:86:51:36:
                    3b:5e:d5:b1:0f:e0:44:5c:1b:07:5e:75:95:ec:77:
                    67:fd:76:1c:42:1d:84:48:6b:ac:ba:d4:d8:8e:0d:
                    c3:ff:7d:0c:59:98:28:31:35:0d:f1:e4:2c:ce:73:
                    3d:e5:b9:e1:68:17:d9:11:b8:f2:af:54:52:24:d3:
                    4d:95:a5:cf:1b:63:82:4d:32:58:b7:d5:85:ea:af:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:49:65:74:DB:A2:CD:50:BB:A9:42:34:0B:A7:B3:68:2E:66:D7:56
            X509v3 Authority Key Identifier:
                keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:5b:97:a6:4d:5b:58:8c:4b:d8:40:c2:c1:4a:39:3d:72:4a:
         e8:4d:25:66:5c:2d:44:ce:94:52:07:ba:3e:56:de:2f:ea:85:
         ed:ef:7a:ff:99:3e:cb:29:f8:d0:97:e1:a2:dd:f6:e1:b0:94:
         81:a2:49:bd:0c:ca:3f:65:e6:cc:f8:cb:58:aa:91:fc:b0:eb:
         07:97:d4:91:fb:90:f6:7a:f5:97:86:69:71:bb:fa:a5:0b:0f:
         d7:eb:b9:9a:62:78:1f:fe:84:66:5c:6e:1b:2d:4f:b8:b5:a3:
         09:6d:91:58:49:dd:d0:e0:b4:cd:06:a8:b0:a0:d0:73:b4:9f:
         57:89:fb:d2:95:81:4e:46:72:ce:62:f0:be:14:da:75:5e:16:
         ea:4b:65:4d:10:db:cc:78:3c:28:e2:d7:04:ef:3f:0f:57:3e:
         fc:dc:61:83:30:f2:ce:80:89:ab:eb:46:61:6a:1f:24:b5:6f:
         b7:9c:96:22:17:29:71:db:63:df:da:13:84:ee:99:a5:ba:9f:
         7e:b3:e5:cd:cc:8a:f1:14:63:7c:2e:aa:08:1d:15:49:b7:0e:
         f4:18:ca:15:28:c9:3d:ec:80:f9:bc:12:e5:ba:d5:1e:0d:a3:
         db:e1:34:74:c9:2a:88:44:26:9b:a5:8c:0d:e6:40:4d:cb:bc:
         0b:c4:42:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:23 2025 by rpki-client