Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
File:                     smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json)
Hash identifier:          pVxRKw/glnUAgAPYwIy0wB6IWCcFwOJ6/RSRnlUthAA=
Subject key identifier:   D8:A9:78:E1:EF:2E:58:10:CF:8A:6B:02:02:35:79:1A:AC:64:AB:D8
Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
Certificate issuer:       /CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Certificate serial:       0198D5F15A21E87B0B9D04CA834CD882A06B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
Manifest number:          DC
Signing time:             Sat 23 Aug 2025 08:00:20 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:20 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:20 +0000
Files and hashes:         1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: LxltU7+61qzPD2LJKQ4+tKrImSWihMbWAPRZnId+kLI=)
                          2: vfgaajpx_IwIslySYTAXUF8b2bQ.roa (hash: 5BG+nyK3l0jI+maIom4ahnVVqUeZ02d+C1Q9Lbzzldo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:5a:21:e8:7b:0b:9d:04:ca:83:4c:d8:82:a0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b
        Validity
            Not Before: Aug 23 08:00:20 2025 GMT
            Not After : Aug 24 08:00:20 2025 GMT
        Subject: CN=d8a978e1ef2e5810cf8a6b020235791aac64abd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:ae:4d:70:58:e2:12:6d:71:d8:8d:35:af:
                    75:d6:16:ef:21:84:2b:4d:a0:0b:90:4c:1a:92:6d:
                    a5:df:c4:5b:a0:f5:a8:0f:d5:e0:9f:61:6f:95:fa:
                    1c:46:37:2d:c5:18:93:73:4d:79:e9:b7:42:e9:10:
                    e5:31:63:4d:7c:8e:aa:e3:f9:13:92:b2:cc:32:26:
                    de:e7:b5:34:fb:7a:94:83:9d:45:d5:c5:73:2d:dd:
                    96:bc:8e:36:dc:3b:78:cb:83:df:cf:4c:97:95:d4:
                    a5:b9:ae:5b:ab:96:21:40:89:d4:7b:51:d3:5a:52:
                    4b:6a:bd:33:33:10:3e:94:b2:ac:7e:e3:20:7a:13:
                    f0:2e:29:80:56:15:47:38:61:47:0f:9c:35:7f:b4:
                    87:ab:b0:95:f9:79:fe:d7:fe:de:d1:f5:a9:f5:1e:
                    3c:05:88:ea:41:13:7a:53:f3:42:bc:59:31:ff:80:
                    c1:f7:29:dc:36:c6:7b:97:66:03:80:22:b1:91:63:
                    21:cb:63:e5:4b:da:73:fe:bb:54:fa:da:5e:ec:65:
                    b0:fa:63:47:6a:5d:5b:fe:52:e9:08:eb:c8:aa:6b:
                    8d:02:83:be:c1:59:d4:ad:57:7d:57:d6:bb:46:78:
                    af:dc:aa:ae:27:fd:a1:cc:42:0c:b0:eb:80:4e:21:
                    c6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A9:78:E1:EF:2E:58:10:CF:8A:6B:02:02:35:79:1A:AC:64:AB:D8
            X509v3 Authority Key Identifier:
                keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1d:35:ca:26:9f:21:6c:5e:3d:77:2c:20:b0:96:19:6d:42:
         05:71:a7:1e:d7:67:63:7c:e7:1a:a4:4e:80:f8:3f:d5:5b:69:
         fb:b0:ee:c0:ec:7c:98:68:5f:0d:ae:78:e4:62:42:81:b0:ce:
         f3:2c:b0:af:96:9f:19:fc:1b:05:5c:2a:56:c4:0d:41:de:89:
         48:4b:67:9c:c7:e9:7f:74:5a:2f:d2:d9:a7:b6:51:b8:42:1d:
         fb:57:37:22:b4:12:56:7e:99:cb:e4:78:ad:c5:ef:a0:23:97:
         f3:ab:90:0f:04:87:76:33:c1:c2:bb:aa:cd:f3:a2:7a:e1:d7:
         98:51:e3:63:a0:d9:b3:7a:77:54:b0:44:62:61:5f:6a:2f:97:
         04:d5:39:d1:ca:59:ae:c2:99:12:c6:ba:6c:11:fe:ff:b2:a4:
         dc:b9:3d:de:59:9e:a7:d2:6a:e3:7e:85:55:a7:4d:88:6f:eb:
         50:45:ac:4e:28:6f:26:2b:25:77:67:4a:2c:be:ff:b0:23:c3:
         5f:e1:a3:d5:03:83:8b:87:66:e9:d6:67:b9:ad:b3:e9:0a:ee:
         7a:62:6f:42:e1:36:c6:0d:df:42:4d:fa:63:c4:d1:de:0c:a8:
         a8:57:59:60:99:0a:d8:c2:6c:1c:19:91:3a:7b:de:5e:e0:51:
         5a:29:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:36 2025 by rpki-client