Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
File:                     SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft (raw, json)
Hash identifier:          Zuvk0npF7FtZsxHAmWEZcrZGdmr2/4bgz1kcDOiRgFk=
Subject key identifier:   5B:53:A9:2A:5D:33:F2:38:1F:CF:18:FA:2E:20:34:3A:C1:18:7B:A1
Authority key identifier: 48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89
Certificate issuer:       /CN=48cf96aa5eb0774f0d7b426b327435a8788eb189
Certificate serial:       0198D6604BB80C8053E6B7EA731C036F0B25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 10:01:31 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:31 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:31 +0000
Files and hashes:         1: SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl (hash: OrN5qg/WZK6ZtgKMVDueaRK+H5gEfRPO/+cBsfjriJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:4b:b8:0c:80:53:e6:b7:ea:73:1c:03:6f:0b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cf96aa5eb0774f0d7b426b327435a8788eb189
        Validity
            Not Before: Aug 23 10:01:31 2025 GMT
            Not After : Aug 24 10:01:31 2025 GMT
        Subject: CN=5b53a92a5d33f2381fcf18fa2e20343ac1187ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:6b:55:d6:0f:51:6a:be:aa:ad:ff:2b:e4:
                    6f:b5:e1:25:9b:e7:57:b8:78:95:c5:8f:7f:1b:ea:
                    c7:63:6f:6f:94:cc:8c:56:0a:42:a6:2a:13:4b:a5:
                    b6:2a:58:17:ba:4e:58:c2:85:c9:15:37:f4:e6:4f:
                    b8:43:80:9c:84:e7:2b:f1:05:09:f0:6f:b2:83:0e:
                    4b:9b:16:3e:a9:05:c4:5a:0f:e3:e7:52:ec:66:bf:
                    78:20:dd:52:0e:13:9b:f3:79:ba:df:d8:48:cd:f8:
                    07:51:6b:7f:05:36:c3:b9:6c:d3:46:88:00:01:48:
                    44:62:9f:f3:b0:c7:f2:cf:b0:72:2c:c1:0a:ff:9a:
                    14:d5:a7:20:7c:66:e7:7e:c6:3c:ce:78:c5:18:5b:
                    fc:2d:58:aa:13:7b:ee:f1:65:eb:af:30:24:d7:69:
                    9c:e7:a9:4c:a7:d7:6a:5b:2d:7b:19:ae:43:17:a4:
                    c3:1e:d5:88:ee:fc:3b:c1:2b:f8:22:51:70:10:29:
                    09:15:02:fa:12:48:fc:b8:6f:15:ba:fe:25:f6:18:
                    9e:4e:99:80:d8:3f:7c:55:e4:af:35:4c:8e:5e:bc:
                    e5:39:97:6b:3f:9b:ca:b3:a4:02:73:6a:f2:fa:dd:
                    03:a7:b6:ce:ee:0d:0c:f3:ed:c4:9e:f5:77:6d:a7:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:53:A9:2A:5D:33:F2:38:1F:CF:18:FA:2E:20:34:3A:C1:18:7B:A1
            X509v3 Authority Key Identifier:
                keyid:48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:4a:10:ef:5d:f1:1b:91:10:78:ef:9d:0f:a0:b5:92:17:39:
         81:99:af:b0:20:42:7c:86:01:d9:26:77:f6:a7:a6:57:20:9a:
         b1:8a:97:93:90:24:44:85:de:4f:1f:2a:28:44:66:c0:f9:df:
         c9:27:7c:0c:67:9b:f1:c9:01:45:cf:bc:64:ca:4a:dc:d9:49:
         d5:8b:f6:a5:43:44:d4:f1:5b:4b:0d:b2:5d:62:cf:59:da:e4:
         cc:f7:aa:34:22:39:20:67:85:e6:91:ba:35:d7:95:6d:5f:2f:
         68:22:f4:86:bf:56:6e:fb:5a:eb:ec:1d:7e:c0:69:c2:af:f1:
         23:a8:61:6c:b5:1c:79:8b:56:81:81:63:81:37:57:2f:c5:59:
         50:a6:7b:a5:c0:a9:24:fb:84:18:b5:13:24:13:96:64:de:f7:
         89:5e:d6:4a:b2:e3:87:b1:d3:6e:51:80:cd:f9:3b:6c:4c:5d:
         e2:54:ea:57:42:5d:39:f3:ae:46:27:78:03:cc:11:ff:f8:d1:
         a9:12:5a:8c:22:e0:fb:d6:0c:a1:de:71:28:f6:ed:61:63:7d:
         0a:29:f6:5a:8d:5c:84:fd:08:b2:65:a4:35:6c:37:bc:7b:fb:
         67:a0:95:cb:0f:5e:d4:5c:aa:91:f1:0d:7d:6b:8b:b8:96:11:
         47:ef:d4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:03:26 2025 by rpki-client