Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
File:                     SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft (raw, json)
Hash identifier:          BKq6FPIqMeGE759UYR5bytEFg6001kaxH1kSIE6igSo=
Subject key identifier:   71:DA:C3:B0:89:F7:EC:96:80:F6:5D:24:34:9C:D0:4A:0C:CE:58:B6
Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
Certificate issuer:       /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Certificate serial:       019690DEDC05D2D512C4BE6E2F1F6545DDEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
Manifest number:          1259
Signing time:             Fri 02 May 2025 12:00:46 +0000
Manifest this update:     Fri 02 May 2025 12:00:46 +0000
Manifest next update:     Sat 03 May 2025 12:00:46 +0000
Files and hashes:         1: SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl (hash: bkieynpGe0pLM8b9+kEaJnCUm/Yr5fHreBkYQxkqBgs=)
                          2: eiFnEmDTPMfL3dAfRXolzkxp_i4.roa (hash: 4dzfRJYq125S/BqKfHbwTEsWNU4YgfgsuuliSEpx9eU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:de:dc:05:d2:d5:12:c4:be:6e:2f:1f:65:45:dd:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
        Validity
            Not Before: May  2 12:00:46 2025 GMT
            Not After : May  3 12:00:46 2025 GMT
        Subject: CN=71dac3b089f7ec9680f65d24349cd04a0cce58b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:be:ce:a8:3a:38:fa:5c:ee:83:2c:33:3c:
                    47:65:78:f3:8d:74:7e:fb:82:0b:27:f5:34:12:07:
                    c7:79:30:68:df:c6:45:51:36:38:06:9f:40:83:24:
                    c4:80:39:d3:b4:99:c5:c0:90:4b:18:09:86:76:96:
                    32:8a:61:3c:3a:06:ab:1b:09:39:66:9d:34:5f:27:
                    f8:51:6a:e2:8c:34:29:42:8f:87:0a:93:7c:74:6a:
                    d7:7d:87:35:4e:3f:8c:d0:c7:cb:73:98:08:13:b4:
                    0d:d1:f8:94:c5:0c:f3:1e:4c:bf:de:80:39:54:a7:
                    3b:86:e3:d6:47:f9:0d:c5:b6:d7:70:3e:b7:e3:90:
                    01:4c:2c:23:ed:15:9b:5f:50:cb:49:62:7f:e3:47:
                    29:97:a4:41:c9:18:fa:0f:81:37:2f:14:55:2a:f3:
                    f7:12:15:a2:7e:8d:5e:49:55:9f:f6:fc:71:1e:90:
                    08:d6:be:5b:9b:11:3f:3c:95:cc:c5:b2:f4:bd:c1:
                    b9:bd:1e:cf:d2:7b:4f:ff:22:14:d5:32:2f:f1:0d:
                    8e:3b:8c:e6:74:8d:9d:fc:51:f7:f6:fa:5f:3b:5e:
                    34:d4:41:b9:be:d5:79:46:23:2a:3c:6f:3c:03:8d:
                    28:0c:0f:9a:31:60:f6:37:27:40:21:92:60:86:8e:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DA:C3:B0:89:F7:EC:96:80:F6:5D:24:34:9C:D0:4A:0C:CE:58:B6
            X509v3 Authority Key Identifier:
                keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e5:b4:3a:cb:9c:81:f9:39:7a:af:42:06:bf:78:46:8f:bf:
         ba:ab:40:bb:da:d5:16:9a:4c:55:59:88:10:5a:0d:8d:e8:47:
         b3:45:23:9c:a8:f0:f3:e9:f5:c7:a1:e3:79:62:2c:e0:59:2c:
         8c:04:a5:b0:53:4e:28:84:ab:54:9c:39:ea:d1:1c:7b:17:9f:
         e1:a5:76:00:50:79:d4:fb:63:27:a5:d2:ae:58:03:79:3c:ff:
         8e:72:f4:cc:25:f4:16:96:6c:81:f0:06:4a:c7:cb:72:91:27:
         7b:38:68:71:b2:d5:d2:40:00:5b:9b:36:0f:af:bc:98:60:6c:
         38:fb:8e:2f:ef:81:a2:3f:76:1f:b5:09:56:4d:ef:1c:1d:9d:
         34:af:4e:3a:6c:63:37:9b:47:95:28:4c:8e:77:5d:b4:29:43:
         16:45:28:a0:2d:0e:86:73:08:ee:e0:61:f9:aa:14:e4:30:7c:
         09:e4:24:4b:39:8b:a0:ba:87:5c:9a:4b:fc:60:69:2d:37:4f:
         3d:31:64:ae:ae:83:6a:2c:83:e1:fa:27:4d:60:9c:a5:77:e9:
         fe:c3:79:b5:7d:09:f3:00:f3:f1:a3:ab:bc:ec:2f:99:50:fa:
         0c:ce:73:58:37:6d:59:14:e0:35:37:3b:94:03:9b:d7:fd:27:
         c2:89:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:44:00 2025 by rpki-client