Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
File:                     SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft (raw, json)
Hash identifier:          AzKQmHG61Wqs6wq5XcixBqGIusOr/hI/sdxL23JY5jA=
Subject key identifier:   84:57:B3:9A:CB:E1:0D:EE:CF:8C:FD:D2:10:6B:97:CE:26:B6:AE:BD
Authority key identifier: 4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
Certificate issuer:       /CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Certificate serial:       0196A088B239215EDDCD9679AD8B1DDBA21E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
Manifest number:          0D18
Signing time:             Mon 05 May 2025 13:00:35 +0000
Manifest this update:     Mon 05 May 2025 13:00:35 +0000
Manifest next update:     Tue 06 May 2025 13:00:35 +0000
Files and hashes:         1: SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl (hash: yzjuVqfBF2bVUUnzU+rThBTjUdzsR229SIN044PrYOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:88:b2:39:21:5e:dd:cd:96:79:ad:8b:1d:db:a2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
        Validity
            Not Before: May  5 13:00:35 2025 GMT
            Not After : May  6 13:00:35 2025 GMT
        Subject: CN=8457b39acbe10deecf8cfdd2106b97ce26b6aebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e2:57:dd:b3:af:72:6b:c0:02:54:a0:cb:a6:
                    4d:a7:d7:42:90:5b:4e:fe:21:4a:d0:f2:d5:21:25:
                    00:ea:03:34:d1:5e:37:7d:46:e4:46:e8:78:84:b2:
                    5b:c4:52:7f:89:aa:1f:eb:fc:05:d2:d3:67:3a:88:
                    49:b2:67:fe:84:f6:99:fb:fd:84:53:18:b1:d2:6d:
                    37:80:50:03:71:5f:83:10:12:5b:77:37:71:6d:e0:
                    61:e0:30:f8:3b:23:28:45:7f:79:4e:14:ee:81:01:
                    a4:94:90:f9:87:11:56:28:47:47:13:11:8a:4f:9b:
                    d8:4d:1a:43:27:e4:21:16:17:50:60:88:73:8c:22:
                    17:bb:30:20:06:e2:22:83:97:94:5c:22:1d:43:d7:
                    c8:6c:81:75:59:2c:de:c4:c6:51:09:84:17:4e:29:
                    33:c6:b0:85:07:fc:0a:7f:37:3c:4a:d7:a7:72:a3:
                    d5:63:8f:19:03:96:5d:17:8a:c3:db:22:06:ac:ac:
                    e8:cb:dd:bc:c9:5b:a9:19:02:d7:d8:46:46:23:42:
                    34:6a:34:b5:77:89:3b:30:af:12:f5:84:47:3c:8d:
                    ee:95:eb:d8:47:b3:8e:ca:24:c1:08:01:48:d4:43:
                    6e:34:3c:95:57:5d:0d:b7:4a:0b:c2:95:35:b7:2d:
                    a9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:57:B3:9A:CB:E1:0D:EE:CF:8C:FD:D2:10:6B:97:CE:26:B6:AE:BD
            X509v3 Authority Key Identifier:
                keyid:4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:81:c7:77:08:0a:f1:43:63:d8:4f:b5:fa:b6:c1:20:2a:d2:
         f2:59:09:0e:de:d9:88:2d:9d:e0:e8:ad:8d:4f:26:6a:4d:9d:
         15:f0:65:0b:a4:cf:04:33:2b:26:9a:4b:7c:42:1b:84:96:f8:
         16:95:ba:ed:85:7a:2c:12:b7:77:f5:00:2e:d5:c6:ed:31:74:
         72:d6:97:af:0b:b8:a6:68:31:9d:7d:4f:26:0f:aa:73:b5:ce:
         a4:f1:7c:06:22:28:7d:be:8e:af:4e:b3:3e:fc:1f:07:1f:fc:
         2c:4d:7c:8e:3b:a3:c9:04:78:26:08:bf:4e:2c:7b:c3:88:46:
         28:50:3a:f0:22:98:1b:86:78:2a:5c:30:8d:08:ca:fd:59:1d:
         4e:fe:a1:0d:3e:b8:e2:9e:34:65:ed:d6:fe:c9:d0:bd:84:a9:
         33:5f:1b:ac:1f:3c:44:3f:c3:9a:0a:8a:72:74:22:8f:5a:9d:
         34:1e:69:60:9a:11:54:9e:04:65:5b:8a:ae:39:e7:d8:e5:f8:
         9f:5b:b4:08:26:35:df:72:07:fe:34:2e:22:fa:0b:8b:b2:42:
         0a:f6:7f:75:30:d6:17:b8:01:9b:bd:61:5d:fe:00:2a:92:cf:
         02:fc:65:88:22:12:6e:d8:22:18:bc:1d:d1:fd:d1:8c:de:84:
         ff:c7:32:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:50:27 2025 by rpki-client