Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
File:                     SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft (raw, json)
Hash identifier:          sLiqawWgj/d5qgzKdPOeL3Wp5jYI8BGK3bBAbD/M7Gc=
Subject key identifier:   60:91:62:1D:6B:04:75:E1:46:26:F3:61:A3:43:F7:45:FE:30:9A:4D
Authority key identifier: 4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
Certificate issuer:       /CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Certificate serial:       019691BA39EFBC4DCBF152149AE3F08A4092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
Manifest number:          0AFB
Signing time:             Fri 02 May 2025 16:00:22 +0000
Manifest this update:     Fri 02 May 2025 16:00:22 +0000
Manifest next update:     Sat 03 May 2025 16:00:22 +0000
Files and hashes:         1: SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl (hash: BVTkc1szswyO5oT5KLUHwhmZoPPoowhNkLqSJKf4cIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:ba:39:ef:bc:4d:cb:f1:52:14:9a:e3:f0:8a:40:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
        Validity
            Not Before: May  2 16:00:22 2025 GMT
            Not After : May  3 16:00:22 2025 GMT
        Subject: CN=6091621d6b0475e14626f361a343f745fe309a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:47:9f:28:38:ff:25:5c:a1:f0:12:56:79:
                    f2:ab:bc:3c:c1:a9:56:e9:3d:62:f8:1e:de:76:4d:
                    a4:fe:45:9f:8b:54:64:45:c0:2b:4d:4e:29:fb:ec:
                    75:87:d9:a3:99:94:fc:61:73:0f:34:5a:57:8f:b4:
                    24:75:97:94:9b:ca:e5:26:15:6a:4d:05:27:d2:ac:
                    85:70:83:71:8d:9a:7c:21:02:00:e7:0f:21:ec:60:
                    f2:18:64:f1:f3:78:62:11:c3:2b:9e:e7:70:91:49:
                    61:bc:65:7f:7c:59:56:2e:c3:4a:c5:06:1e:ce:19:
                    9f:02:5d:fc:c2:0c:0a:9d:82:59:06:6d:5f:01:40:
                    ad:65:9b:8a:3a:ee:f1:1b:6f:f0:5c:24:b5:57:18:
                    14:a3:53:98:1f:68:b3:bf:af:de:90:d3:e0:0e:dc:
                    cb:4a:2f:bd:87:34:ff:10:53:e8:9c:e4:c0:f3:28:
                    1b:5f:1c:cb:d8:63:51:09:14:d6:13:aa:bc:e7:92:
                    b9:fb:e3:62:48:2c:0b:17:09:36:be:55:7f:a9:03:
                    98:ed:cb:60:56:5e:bf:25:d7:5f:8c:02:cf:b9:c4:
                    4e:00:58:6f:d2:9a:04:d6:58:94:1b:9c:d7:65:b9:
                    4d:03:28:76:a2:ef:c2:96:e7:52:f2:36:45:b7:ad:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:91:62:1D:6B:04:75:E1:46:26:F3:61:A3:43:F7:45:FE:30:9A:4D
            X509v3 Authority Key Identifier:
                keyid:4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2b:a4:2f:c6:ce:ab:dd:81:c1:eb:38:20:99:05:20:94:38:
         d6:d4:c7:60:32:98:67:30:57:a8:46:67:d4:5e:47:a1:5c:62:
         95:10:1b:82:75:56:24:e8:54:ee:37:54:c8:c9:6a:4f:81:26:
         fd:37:68:92:0b:59:47:b1:af:c2:c9:0e:0a:c3:d6:2b:c2:24:
         21:93:4a:5b:1d:f9:37:48:8f:91:32:97:82:07:00:62:84:55:
         83:75:d4:a9:a9:c3:6f:ab:f4:c6:73:2f:30:a6:53:bb:8d:6a:
         4c:44:fb:e8:47:47:17:ca:c1:8e:6b:49:ec:a6:0e:74:49:1b:
         60:79:63:30:11:0e:65:59:2a:52:da:37:4e:e0:77:75:e3:4a:
         64:d4:a4:2e:f7:e0:3b:8e:d0:1f:38:49:fa:55:73:46:51:69:
         d8:c8:3b:2f:73:8a:c6:49:51:67:77:56:3d:2c:c3:42:4e:69:
         c0:50:92:44:30:b8:2e:1f:63:d3:e6:d0:d7:6e:5c:9e:8e:a6:
         04:8b:6d:43:cd:80:1a:9f:36:6c:c3:8a:c2:77:2f:1b:75:88:
         8f:28:2b:69:43:83:91:d4:4f:22:75:fc:60:de:f3:1b:47:ff:
         31:97:cf:07:1d:a4:40:64:ef:f8:8e:a6:12:8c:48:09:56:6c:
         75:28:63:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:48:25 2025 by rpki-client