Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
File:                     SmyWV_fDBZWx2hfELhdtdSygVLg.mft (raw, json)
Hash identifier:          Uxebqp4/OWn4CK+VHM3E/OfuTjctStZu2fePxbfgChg=
Subject key identifier:   C3:5C:DC:E9:10:A9:C8:15:C1:76:AE:D8:7A:C4:F9:EB:8E:A8:3F:E9
Authority key identifier: 4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8
Certificate issuer:       /CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
Certificate serial:       0198D7A977A782D56491D6DEFF654BAFBB07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
Manifest number:          0903
Signing time:             Sat 23 Aug 2025 16:01:04 +0000
Manifest this update:     Sat 23 Aug 2025 16:01:04 +0000
Manifest next update:     Sun 24 Aug 2025 16:01:04 +0000
Files and hashes:         1: SmyWV_fDBZWx2hfELhdtdSygVLg.crl (hash: IZQ2JTda0jqFFvhH6Y3KaF97fn/tms/h8r4B0yM1+kM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:77:a7:82:d5:64:91:d6:de:ff:65:4b:af:bb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
        Validity
            Not Before: Aug 23 16:01:04 2025 GMT
            Not After : Aug 24 16:01:04 2025 GMT
        Subject: CN=c35cdce910a9c815c176aed87ac4f9eb8ea83fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:72:eb:cb:a9:01:c8:df:8c:0a:13:b6:21:fa:
                    34:c5:d4:98:07:4d:11:84:d7:bd:de:17:c4:9c:a4:
                    11:ea:22:45:53:f5:12:83:13:63:f0:46:f2:e5:69:
                    12:8c:15:da:2e:af:2d:f7:86:93:6b:3c:cc:b3:16:
                    b8:e1:3b:34:02:2b:36:7f:fe:01:37:52:5e:f8:10:
                    34:6b:72:45:47:1b:73:15:6c:8a:80:03:ab:4b:ca:
                    4c:ac:66:70:c2:9e:fe:c1:a4:dd:cc:d7:90:32:0a:
                    a3:c6:3a:0f:2a:21:1a:fe:5b:d2:62:2e:1d:7b:b8:
                    b4:d9:74:2c:7b:fd:9c:6c:62:71:a6:e1:85:49:6c:
                    d9:f4:29:e8:64:3c:17:6c:cf:35:ec:0e:a4:2e:61:
                    69:b5:99:6c:98:93:44:4e:71:20:22:35:37:ad:f9:
                    ab:ea:63:94:04:68:c0:5c:e9:2d:61:6f:0b:f9:20:
                    d1:e3:26:46:4d:cf:ea:7f:d7:e0:b8:13:b0:38:9c:
                    55:40:9b:f3:3b:58:da:47:cb:a8:dd:60:2a:27:5b:
                    d2:7e:35:a0:8a:bf:89:f1:19:2d:01:31:a5:63:67:
                    3d:0a:aa:dc:d2:85:86:86:1a:94:32:be:19:55:18:
                    ff:4c:58:ad:e7:6c:e9:c3:75:28:bf:c8:6c:36:bb:
                    c2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5C:DC:E9:10:A9:C8:15:C1:76:AE:D8:7A:C4:F9:EB:8E:A8:3F:E9
            X509v3 Authority Key Identifier:
                keyid:4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:73:ae:a2:d2:ec:5a:67:e6:79:7b:a9:c2:df:e0:46:83:1b:
         c7:e6:cd:ec:4f:f3:e8:cb:ee:30:78:ee:66:cb:a8:43:39:e5:
         10:d9:16:ea:0c:d5:9e:d1:11:2b:35:55:3f:08:2f:bb:64:2d:
         37:7a:57:99:5b:2d:74:d3:8c:a5:08:3b:19:8f:33:83:8a:b1:
         02:70:f5:2d:db:1c:df:48:f4:2f:5c:ee:a4:99:0b:f4:8c:90:
         30:ac:b9:42:7d:ba:b5:99:94:63:6a:f4:1c:ef:af:62:2e:ad:
         1d:97:7a:59:e6:d4:46:09:1f:41:9d:bc:e2:47:da:7f:b7:ef:
         3f:38:e0:f2:3b:7e:dd:47:e0:19:8a:be:b1:a2:40:79:2b:d2:
         36:9a:a1:3b:fb:e5:a4:5c:9b:e0:97:c7:31:87:90:9b:5d:d3:
         34:af:39:b8:d9:dd:5f:c0:5c:b1:a1:f7:59:14:c3:68:53:87:
         01:e9:d7:9f:64:77:74:92:7f:34:e5:5e:37:d9:97:28:bd:58:
         86:1c:e3:21:bb:ef:61:74:a5:25:15:24:8d:22:fa:76:d1:4d:
         11:08:81:38:3c:8b:20:30:92:ea:18:41:00:50:6b:0a:e1:bc:
         23:cd:8f:77:44:84:4e:b3:7c:68:61:60:49:98:3f:c9:93:d9:
         38:40:05:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:01:07 2025 by rpki-client