Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
File:                     Sm8eAa8k15JJfXftH3mQrjphKQ0.mft (raw, json)
Hash identifier:          +wL46P2Q8MLLYr7z3fRHBe83IEqvRnDoDoG4UTMxG5E=
Subject key identifier:   0C:73:D0:45:AF:57:AE:BF:BF:32:65:AC:A0:1A:C6:0F:C1:D5:3A:82
Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
Certificate issuer:       /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Certificate serial:       0197B77CA54A6AFC04A8E4067A7F535B16AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 17:01:28 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:28 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:28 +0000
Files and hashes:         1: Sm8eAa8k15JJfXftH3mQrjphKQ0.crl (hash: x314tFH4vfgCErUQrWdi1o6/DFOHjsPmLR49pRI+ex4=)
                          2: ukp1qSkbacWgh99iGDLbhVTGpfE.roa (hash: VZyI94Eyjd6/U3vi8uEiKE4SlR4D8n4H4v7qeg38d2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:a5:4a:6a:fc:04:a8:e4:06:7a:7f:53:5b:16:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
        Validity
            Not Before: Jun 28 17:01:28 2025 GMT
            Not After : Jun 29 17:01:28 2025 GMT
        Subject: CN=0c73d045af57aebfbf3265aca01ac60fc1d53a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:44:3c:af:cf:de:c5:6c:f5:c2:1d:0e:33:
                    2e:b3:2f:46:7e:ce:39:cd:17:0d:ff:22:f9:2e:8d:
                    23:16:f2:ba:08:30:ec:dd:13:74:b4:a4:32:d5:37:
                    c1:8c:1b:bb:98:fe:53:06:0f:77:7a:a6:07:bc:f3:
                    ec:12:82:0f:0c:b6:17:d7:59:77:e7:65:c0:41:7e:
                    a8:dc:e5:38:f0:13:50:9b:5e:ee:c1:a3:4a:0d:f7:
                    d7:9e:27:2f:92:53:bf:88:39:a9:06:bb:8a:fa:c2:
                    36:78:3c:54:08:18:89:ee:a0:fe:81:59:c5:23:c9:
                    e6:dd:c8:04:aa:75:64:0b:7b:54:b1:a7:cf:69:d9:
                    c3:f0:bc:59:f4:06:a2:63:e4:6f:77:48:68:00:4a:
                    4c:08:3a:d1:e5:76:7e:08:a1:d0:6d:f1:67:de:ef:
                    7c:6b:17:3b:8e:1a:61:d8:fb:78:69:4a:18:d7:42:
                    64:c9:d9:3c:ad:90:0c:45:2a:df:f5:71:ca:1a:c6:
                    42:46:a5:d2:80:b3:42:db:96:9a:35:b0:5b:1d:1c:
                    7c:2a:64:e1:b9:d2:79:ed:73:aa:9a:34:03:ce:8b:
                    60:ea:f2:d3:b5:4b:15:ac:23:2d:13:e1:af:5b:69:
                    28:ae:6b:cd:6b:2a:8d:00:28:50:53:12:2d:7a:a4:
                    7b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:73:D0:45:AF:57:AE:BF:BF:32:65:AC:A0:1A:C6:0F:C1:D5:3A:82
            X509v3 Authority Key Identifier:
                keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:89:98:8c:0c:8d:93:48:f2:7c:3f:3b:0c:92:96:9d:54:f1:
         2e:67:fb:2e:58:37:7a:d5:51:19:8a:79:f0:bf:e4:20:b4:07:
         ef:26:90:19:38:e7:08:e1:7a:2e:a6:01:30:a3:e9:a1:2a:7d:
         46:da:74:dc:df:47:a9:fa:41:a4:e0:9f:26:4b:fe:73:d5:14:
         8e:c2:f4:59:c6:0c:a3:c0:70:6f:61:af:21:56:61:2f:20:8a:
         e7:f2:46:fb:b7:21:07:e8:b0:03:6e:06:1d:86:df:51:08:b7:
         76:a0:e8:46:95:0c:83:78:3e:9b:64:bb:a4:b6:d4:12:5b:55:
         99:a7:8e:39:b8:57:e8:ed:d3:c4:0f:10:dd:7f:6f:01:d8:b6:
         38:71:f4:b3:92:42:1c:47:3a:f0:b0:52:c7:26:31:77:ca:4f:
         86:14:63:7c:8c:0f:7a:10:5a:1c:1f:90:15:0a:a0:16:f6:8e:
         43:c4:c5:08:a5:8a:b5:af:54:3f:a5:52:b0:2c:08:df:56:f4:
         87:3a:3b:0d:62:6f:eb:37:29:cc:cb:0c:ea:a6:1c:b4:2f:e6:
         1d:41:b1:73:55:46:08:95:25:c1:f0:3b:da:71:a8:57:3f:00:
         fc:09:92:b4:13:91:8f:88:0e:5d:61:27:c8:93:ad:b4:36:14:
         5f:ee:8d:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fKVKavwEqOQGen9TWxaqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmYxZTAxYWYyNGQ3OTI0OTdkNzdlZDFmNzk5MGFlM2E2
MTI5MGQwHhcNMjUwNjI4MTcwMTI4WhcNMjUwNjI5MTcwMTI4WjAzMTEwLwYDVQQD
EygwYzczZDA0NWFmNTdhZWJmYmYzMjY1YWNhMDFhYzYwZmMxZDUzYTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfREPK/P3sVs9cIdDjMusy9Gfs45
zRcN/yL5Lo0jFvK6CDDs3RN0tKQy1TfBjBu7mP5TBg93eqYHvPPsEoIPDLYX11l3
52XAQX6o3OU48BNQm17uwaNKDffXnicvklO/iDmpBruK+sI2eDxUCBiJ7qD+gVnF
I8nm3cgEqnVkC3tUsafPadnD8LxZ9AaiY+Rvd0hoAEpMCDrR5XZ+CKHQbfFn3u98
axc7jhph2Pt4aUoY10Jkydk8rZAMRSrf9XHKGsZCRqXSgLNC25aaNbBbHRx8KmTh
udJ57XOqmjQDzotg6vLTtUsVrCMtE+GvW2kormvNayqNAChQUxIteqR7cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxz0EWvV66/vzJlrKAaxg/B1TqCMB8GA1UdIwQY
MBaAFEpvHgGvJNeSSX137R95kK46YSkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mYzFhZGMtY2NkOC00YWE2LWI1NGQt
MDRkMzYyYTI4NThkLzEvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mYzFhZGMtY2NkOC00YWE2LWI1NGQtMDRkMzYyYTI4NThk
LzEvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGImYjAyN
k0jyfD87DJKWnVTxLmf7Llg3etVRGYp58L/kILQH7yaQGTjnCOF6LqYBMKPpoSp9
Rtp03N9HqfpBpOCfJkv+c9UUjsL0WcYMo8Bwb2GvIVZhLyCK5/JG+7chB+iwA24G
HYbfUQi3dqDoRpUMg3g+m2S7pLbUEltVmaeOObhX6O3TxA8Q3X9vAdi2OHH0s5JC
HEc68LBSxyYxd8pPhhRjfIwPehBaHB+QFQqgFvaOQ8TFCKWKta9UP6VSsCwI31b0
hzo7DWJv6zcpzMsM6qYctC/mHUGxc1VGCJUlwfA72nGoVz8A/AmStBORj4gOXWEn
yJOttDYUX+6N9w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:25 2025 by rpki-client