Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
File:                     Sm8eAa8k15JJfXftH3mQrjphKQ0.mft (raw, json)
Hash identifier:          vtp+n6XZ2KOX9GKAjtSLicknTEiJRmuMxOLsJErhQXo=
Subject key identifier:   E1:B5:38:D5:DE:D3:B2:48:EF:7A:C8:35:23:24:F8:7A:39:DB:7C:61
Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
Certificate issuer:       /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Certificate serial:       0199FEB48995C0E1C743E26BBDFA987581FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 23:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:08 +0000
Files and hashes:         1: Sm8eAa8k15JJfXftH3mQrjphKQ0.crl (hash: YNLacHZQDpqwbiNZE1yt/0CWf/brPDkcAHCzcz4eG4Q=)
                          2: ukp1qSkbacWgh99iGDLbhVTGpfE.roa (hash: VZyI94Eyjd6/U3vi8uEiKE4SlR4D8n4H4v7qeg38d2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:89:95:c0:e1:c7:43:e2:6b:bd:fa:98:75:81:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
        Validity
            Not Before: Oct 19 23:01:08 2025 GMT
            Not After : Oct 20 23:01:08 2025 GMT
        Subject: CN=e1b538d5ded3b248ef7ac8352324f87a39db7c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:18:89:12:6f:d8:b3:3f:b5:97:cc:02:ba:5f:
                    5a:97:cd:88:19:d1:fb:10:31:a9:b4:10:32:f7:c3:
                    45:ac:2d:c7:d6:c8:77:38:62:1f:d2:24:8d:9e:c4:
                    17:e8:1b:b6:a0:30:8c:f0:b6:93:3e:33:89:5a:70:
                    90:2e:b4:f4:15:58:5e:e2:4d:ab:46:c3:c9:75:fc:
                    2f:c3:73:52:5a:68:df:91:a1:b1:8c:58:35:0d:b5:
                    0d:cf:03:01:dd:16:a1:a8:4e:71:9d:3f:e7:8f:d2:
                    1a:23:03:3f:ff:9f:fa:63:f0:ee:cc:0a:1c:e7:2e:
                    45:79:ae:48:24:64:98:d3:0c:70:f2:42:23:8d:18:
                    84:38:ca:9b:42:72:96:5d:fb:0b:49:93:c1:68:31:
                    75:a1:2f:4e:9d:fe:39:66:1c:b0:88:73:5f:8a:ee:
                    c5:52:39:7a:28:0a:c1:82:22:45:1a:3e:38:83:5e:
                    47:20:6b:b3:cc:b5:2e:d9:34:a3:77:98:f6:3b:ae:
                    f0:c7:d1:f9:35:39:8e:b8:98:cc:b0:96:fa:ea:46:
                    ee:58:33:05:dc:f7:98:ed:b8:4e:f6:50:fe:3b:0a:
                    39:b9:96:98:dc:56:9f:47:0c:06:b9:99:35:0c:2b:
                    1f:3d:19:bf:79:3f:27:f4:21:4b:ef:0a:fb:de:42:
                    d1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B5:38:D5:DE:D3:B2:48:EF:7A:C8:35:23:24:F8:7A:39:DB:7C:61
            X509v3 Authority Key Identifier:
                keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:85:3a:c7:01:fd:ab:0a:76:cf:72:d7:13:6e:b6:6a:d3:c0:
         6c:9e:3e:9d:ce:90:4b:b1:09:a8:34:74:0e:bb:8d:fa:5d:78:
         6e:cc:78:8e:74:72:a0:8b:9e:2c:cf:35:62:a4:00:01:26:9d:
         c5:d9:ae:10:55:f2:d0:a6:de:18:93:d4:00:b0:bf:02:55:7f:
         65:78:b2:50:0b:d6:5b:a4:eb:ae:51:32:fb:b5:05:83:d6:63:
         0f:c1:7f:8a:da:75:10:59:b5:45:4a:dc:21:4e:f4:f8:77:96:
         23:63:e9:16:26:89:14:94:41:78:eb:18:88:e0:f0:09:89:65:
         aa:98:28:0b:e4:b9:15:1f:c2:78:ba:da:78:c0:8e:87:65:b3:
         47:e8:69:ee:d4:8b:4e:7e:70:40:db:f8:cc:7c:dd:93:59:8e:
         ae:6b:8b:73:70:96:ce:4e:f7:9c:18:5f:2b:49:f0:bb:c2:a6:
         12:86:55:55:93:f9:74:5f:7c:9a:ed:b7:8f:e1:bd:c0:03:02:
         1b:f9:a5:03:ab:b2:9e:a5:fe:6d:7f:ac:bf:81:5b:e7:65:fe:
         05:31:a3:9d:55:f4:c7:6c:99:b9:5e:0e:80:9c:83:0b:10:b8:
         4d:e5:e0:6b:10:a8:97:f2:09:b4:a6:f5:a8:a9:27:50:9a:59:
         b9:7e:6f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:21:20 2025 by rpki-client