Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
File:                     SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft (raw, json)
Hash identifier:          jfPZSyKP1IGyMEmZDNOKvCxIsga7IKL+zZjS74UH2WY=
Subject key identifier:   B5:16:06:37:0A:FD:C2:5A:25:A2:1D:2C:28:9A:6A:73:89:DF:DD:3B
Authority key identifier: 48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E
Certificate issuer:       /CN=48949d3c873503dbd296bda60eb777bc541d514e
Certificate serial:       01976EBE2CB9FD03E1C6AE7455EB139287C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
Manifest number:          034B
Signing time:             Sat 14 Jun 2025 14:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:46 +0000
Files and hashes:         1: SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl (hash: QqXKgXwTsctwfpUf1zEkX+rjTc+EvaI5HcvBG9z3Ivw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:2c:b9:fd:03:e1:c6:ae:74:55:eb:13:92:87:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48949d3c873503dbd296bda60eb777bc541d514e
        Validity
            Not Before: Jun 14 14:00:46 2025 GMT
            Not After : Jun 15 14:00:46 2025 GMT
        Subject: CN=b51606370afdc25a25a21d2c289a6a7389dfdd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:80:1e:af:16:49:32:28:82:30:aa:cd:c3:
                    14:b2:c0:d9:cb:04:81:36:08:bb:e7:b1:53:a1:1b:
                    79:7d:28:99:34:7e:ae:89:0d:d0:74:71:9d:09:41:
                    7d:91:d1:36:f3:54:94:ae:87:b4:cf:a6:c9:e1:32:
                    7b:80:10:c6:a4:4f:cb:35:e8:9a:6c:c2:a7:85:86:
                    f2:9e:8b:d0:31:12:20:38:4e:c4:91:8d:8f:98:fd:
                    6d:ae:24:01:44:58:c3:79:e3:c2:e7:82:56:05:1e:
                    fd:c3:45:fc:21:6c:36:43:a5:d8:7c:ea:b9:bb:c1:
                    d2:14:93:b3:f5:a0:3f:76:25:3e:1b:10:0c:f6:b4:
                    10:b6:d5:fd:60:93:c8:3c:dc:56:cd:ea:f0:b2:98:
                    56:e1:9d:64:8d:c5:68:e6:aa:d9:ec:30:5e:0e:41:
                    d7:53:b6:35:83:57:b6:46:02:92:72:66:88:b6:61:
                    36:83:ca:59:5f:15:1c:71:9c:c0:ac:bf:c6:1c:c1:
                    a9:c4:d5:a0:52:eb:ac:2d:75:5e:36:01:8b:35:da:
                    af:d3:4c:61:3a:b6:d0:05:61:79:2e:46:9b:24:a0:
                    26:41:3e:f3:64:0e:c2:dd:97:b7:07:b9:88:51:c7:
                    00:e3:b4:96:40:28:1e:24:ad:84:1e:72:72:91:bb:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:16:06:37:0A:FD:C2:5A:25:A2:1D:2C:28:9A:6A:73:89:DF:DD:3B
            X509v3 Authority Key Identifier:
                keyid:48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:62:7c:27:8c:c7:33:ee:59:21:3d:21:3d:5d:ae:a5:a2:4f:
         e5:35:8c:5f:85:46:69:89:6e:d1:59:64:9a:47:ac:f8:21:65:
         36:0a:30:c4:fd:19:64:d0:68:1d:1f:2e:ab:76:87:9a:73:d4:
         18:e1:3a:42:df:1f:cf:a1:cc:86:35:c2:7c:39:6c:2e:f2:d3:
         c3:8c:ba:34:b3:3a:c4:b4:6e:56:85:54:be:a3:38:e5:37:aa:
         c1:5f:ec:4c:99:96:3f:d0:45:ec:35:fa:ab:19:a4:bd:0a:d6:
         dd:75:48:43:26:56:9d:a3:bd:56:0a:d2:47:1b:ad:be:76:24:
         69:cc:69:81:19:97:ce:1c:13:2f:28:b9:10:16:0f:89:75:f7:
         f4:90:69:e7:47:55:8e:99:12:58:5b:e0:a4:6e:02:bb:03:23:
         63:eb:25:8c:86:99:7e:d2:1f:8f:e7:9a:10:a0:e0:11:a8:ca:
         f8:91:73:8d:88:ed:95:ab:9e:54:7e:26:c5:3b:34:de:19:22:
         6a:ab:46:9c:0a:36:10:ad:4f:71:cd:71:af:bf:e9:88:b2:4c:
         75:a0:f6:ae:89:ea:57:0b:d8:65:6d:ee:2b:da:a3:7f:da:a1:
         b7:67:18:58:36:28:80:0e:c2:c2:18:8d:a3:2e:54:54:49:18:
         0c:4e:e1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:49:56 2025 by rpki-client